Pn Jun 23, 2020, at 2:25 PM, The Doctor via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Script started on Tue Jun 23 12:12:11 2020 You have mail. root@doctor:~ # /usr/freerad3/sbin/radiusd -X -sx
So... you're not following the documentation, despite REPEATED instructions to do so.
Tue Jun 23 12:12:40 2020 : Debug: update { Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Serial}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Expiration}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Subject}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Issuer}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Common-Name}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Cert-Subject-Alt-Name-Email}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Serial}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Expiration}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Subject}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Issuer}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Common-Name}" Tue Jun 23 12:12:40 2020 : Debug: &reply:Reply-Message += "%{TLS-Client-Cert-Subject-Alt-Name-Email}" Tue Jun 23 12:12:40 2020 : Debug: }
I have no idea why you uncommented that. It doesn't do anything useful.
Even if the usrname/password is correct, the NAS is not getting clearance to continue. What bridge needs to built?
You're making random changes to the config, and failing to follow the documentation. Can you explain why you think it's important for you to not follow the documentation? Can you explain why you ask for help, and then ignore our advice? Alan DeKok.