Re: Hostapd-0.5.5 and freeradius-server-2.1.1

Le mardi 28 octobre 2008 10:19, tnt@kalik.net a écrit :

Have you enabled sql in the accounting section? Can you post the freeradius debug (radiusd -X)? Accounting-Request should be coming straight after Access-Accept.

And a part of my hostapd debug : RADIUS message: code=1 (Access-Request) identifier=13 length=205 Attribute 1 (User-Name) length=5 Value: 'bea' Attribute 4 (NAS-IP-Address) length=6 Value: 10.3.1.1 Attribute 32 (NAS-Identifier) length=19 Value: 'private-network-1' Attribute 5 (NAS-Port) length=6 Value: 0 Attribute 30 (Called-Station-Id) length=29 Value: '00-18-4D-76-22-19:Debian-AP' Attribute 31 (Calling-Station-Id) length=19 Value: '00-1A-70-AE-D4-53' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=22 Value: 'CONNECT 0Mbps 802.11' Attribute 79 (EAP-Message) length=31 Value: 02 0f 00 1d 19 00 17 03 01 00 12 f9 58 45 e9 d6 44 be bd cf 76 8f 0e 15 39 6d 57 9d 58 Attribute 24 (State) length=18 Value: 2b 6f 35 1a 23 60 2c f5 d4 4f 03 71 be bd d5 61 Attribute 80 (Message-Authenticator) length=18 Value: 4e 6c 17 63 cb 4f 52 41 92 a0 25 8e 8b 93 ab 0e IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE RADIUS message: code=11 (Access-Challenge) identifier=13 length=96 Attribute 79 (EAP-Message) length=40 Value: 01 10 00 26 19 00 17 03 01 00 1b 09 9f db b8 c3 59 e2 08 0e af 65 29 c7 5e 1f 37 57 d3 f9 4b 08 bd 5a 01 bb 08 9b Attribute 80 (Message-Authenticator) length=18 Value: 55 9e 51 4e b2 1a b9 4f e1 80 9b c2 fd 58 78 a8 Attribute 24 (State) length=18 Value: 2b 6f 35 1a 22 7f 2c f5 d4 4f 03 71 be bd d5 61 RADIUS packet matching with station 00:1a:70:ae:d4:53 IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state REQUEST IEEE 802.1X: Sending EAP Packet to 00:1a:70:ae:d4:53 (identifier 16) TX EAPOL - hexdump(len=56): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 00 00 26 01 10 00 26 19 00 17 03 01 00 1b 09 9f db b8 c3 59 e2 08 0e af 65 29 c7 5e 1f 37 57 d3 f9 4b 08 bd 5a 01 bb 08 9b IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 42 bytes from 00:1a:70:ae:d4:53 IEEE 802.1X: version=1 type=0 length=38 EAP: code=2 identifier=16 length=38 (response) IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state RESPONSE Encapsulating EAP message into a RADIUS packet Copied RADIUS State Attribute RADIUS message: code=1 (Access-Request) identifier=14 length=214 Attribute 1 (User-Name) length=5 Value: 'bea' Attribute 4 (NAS-IP-Address) length=6 Value: 10.3.1.1 Attribute 32 (NAS-Identifier) length=19 Value: 'private-network-1' Attribute 5 (NAS-Port) length=6 Value: 0 Attribute 30 (Called-Station-Id) length=29 Value: '00-18-4D-76-22-19:Debian-AP' Attribute 31 (Calling-Station-Id) length=19 Value: '00-1A-70-AE-D4-53' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=22 Value: 'CONNECT 0Mbps 802.11' Attribute 79 (EAP-Message) length=40 Value: 02 10 00 26 19 00 17 03 01 00 1b 40 ca 97 50 69 d4 77 6f 15 57 b3 ee f3 ec 63 2e dd 93 b0 f1 7b f5 14 81 3b 7f 0b Attribute 24 (State) length=18 Value: 2b 6f 35 1a 22 7f 2c f5 d4 4f 03 71 be bd d5 61 Attribute 80 (Message-Authenticator) length=18 Value: 6d 79 43 5f 97 d1 ca c6 27 23 a3 60 11 a4 d1 7a IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE RADIUS message: code=2 (Access-Accept) identifier=14 length=165 Attribute 26 (Vendor-Specific) length=58 Value: 00 00 01 37 11 34 81 e4 83 fe 13 8f 20 ac 61 72 f7 4d cc 93 46 7a 66 b5 ab 24 a8 47 a7 bf cf 0a 32 4a 70 03 88 d0 92 07 70 4e a0 8f cc d6 e2 7b 1a 9f b5 39 ad 2a 7e a5 Attribute 26 (Vendor-Specific) length=58 Value: 00 00 01 37 10 34 8a fb be 0d b7 12 ba 6f ff 36 d3 e6 b6 cf 6e 94 fb 85 99 41 66 62 bb b0 31 9e b9 ed 62 49 1a 21 bc 83 81 d1 c9 f9 05 d3 50 a6 9e 37 01 39 23 40 1d 68 Attribute 79 (EAP-Message) length=6 Value: 03 10 00 04 Attribute 80 (Message-Authenticator) length=18 Value: f5 48 97 70 6f 18 70 8d 27 46 16 8c e9 99 80 95 Attribute 1 (User-Name) length=5 Value: 'bea' RADIUS packet matching with station 00:1a:70:ae:d4:53 MS-MPPE-Send-Key - hexdump(len=32): [REMOVED] MS-MPPE-Recv-Key - hexdump(len=32): [REMOVED] RSN: added PMKSA cache entry for 00:1a:70:ae:d4:53 RSN: added PMKID - hexdump(len=16): 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93 IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state SUCCESS IEEE 802.1X: Sending EAP Packet to 00:1a:70:ae:d4:53 (identifier 16) TX EAPOL - hexdump(len=22): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 00 00 04 03 10 00 04 IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state IDLE IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state INITPMK WPA: PMK from EAPOL state machine (len=32) WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKSTART WPA: Send EAPOL(secure=0 mic=0 ack=1 install=0 pairwise=8 kde_len=22 keyidx=0 encr=0) TX EAPOL - hexdump(len=135): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 01 8c 1a c0 22 01 b5 17 73 2c 5e 8b 38 3c 2a 5a c5 c6 a7 78 79 0a bd 12 45 26 8b 94 8e 5d 40 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 dd 14 00 0f ac 04 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93 IEEE 802.1X: 121 bytes from 00:1a:70:ae:d4:53 IEEE 802.1X: version=1 type=3 length=117 WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKCALCNEGOTIATING PMK - hexdump(len=32): [REMOVED] PTK - hexdump(len=64): [REMOVED] WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKCALCNEGOTIATING2 WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKINITNEGOTIATING madwifi_get_seqnum: addr=00:00:00:00:00:00 idx=1 WPA: Send EAPOL(secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=66 keyidx=1 encr=1) Plaintext EAPOL-Key Key Data - hexdump(len=80): [REMOVED] TX EAPOL - hexdump(len=193): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 03 00 af 02 13 ca 00 10 00 00 00 00 00 00 00 02 8c 1a c0 22 01 b5 17 73 2c 5e 8b 38 3c 2a 5a c5 c6 a7 78 79 0a bd 12 45 26 8b 94 8e 5d 40 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 50 25 68 b4 cb fc 7c 34 30 1f 98 83 ff 1b c0 00 50 75 6a d4 10 9f c4 77 31 ca 59 eb ef 27 9d be bf 81 15 5b 78 70 0a 10 50 9f fd 33 71 9d fd 3e a2 1c ae 6d 6b d1 15 6c 61 13 3f ed 1b a8 86 1b a9 db 4d 3f d9 c4 f7 a4 21 91 fc 07 33 93 9e 3b d0 f2 6c ef 32 91 d3 13 06 1b 3a 32 e7 e0 62 ea 0b IEEE 802.1X: 99 bytes from 00:1a:70:ae:d4:53 IEEE 802.1X: version=1 type=3 length=95 WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKINITDONE madwifi_set_key: alg=CCMP addr=00:1a:70:ae:d4:53 key_idx=0 IEEE 802.1X: 00:1a:70:ae:d4:53 AUTH_PAE entering state AUTHENTICATED madwifi_set_sta_authorized: addr=00:1a:70:ae:d4:53 authorized=1 madwifi_sta_clear_stats: addr=00:1a:70:ae:d4:53 RADIUS message: code=4 (Accounting-Request) identifier=15 length=163 Attribute 44 (Acct-Session-Id) length=19 Value: '4906E22C-00000000' Attribute 40 (Acct-Status-Type) length=6 Value: 1 Attribute 45 (Acct-Authentic) length=6 Value: 1 Attribute 1 (User-Name) length=5 Value: 'bea' Attribute 4 (NAS-IP-Address) length=6 Value: 10.3.1.1 Attribute 32 (NAS-Identifier) length=19 Value: 'private-network-1' Attribute 5 (NAS-Port) length=6 Value: 0 Attribute 30 (Called-Station-Id) length=29 Value: '00-18-4D-76-22-19:Debian-AP' Attribute 31 (Calling-Station-Id) length=19 Value: '00-1A-70-AE-D4-53' Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=22 Value: 'CONNECT 0Mbps 802.11' RSN: added PMKSA cache entry for 00:1a:70:ae:d4:53 RSN: added PMKID - hexdump(len=16): 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93 IEEE 802.1X: 00:1a:70:ae:d4:53 - aWhile --> 0