I'm trying to setup an instance of freeradius 4.0 so that I can use the IMAP authentication module to authenticate from our Google workspace since the non-profit version is not allowed to use LDAP and we can't afford to switch a paid version that will allow it. I used the package from networkradius.com on a fresh install of jammy per the install guide. But when I went to start it gives this Error: Error : Network - Failed adding new socket to network event loop: Failed inserting filters for FD 17: EFAULT: Bad address Error : /etc/freeradius/sites-enabled/default[275]: Opening radius I/O interface failed The only other reference I can find for that says I'm using the wrong version of libkqueue. Here's the info on the vesion I'm running: root@freeradius:/etc/freeradius# apt show libkqueue-dev Package: libkqueue-dev Version: 2.7.0-nr+git41 Priority: optional Section: libdevel Source: libkqueue Maintainer: Mark Heily <mark@heily.com> Installed-Size: 41.0 kB Depends: libkqueue0 (= 2.7.0-nr+git41) Homepage: https://github.com/mheily/libkqueue/wiki Download-Size: 12.5 kB APT-Sources: http://packages.networkradius.com/extras/ubuntu/jammy jammy/main amd64 Packages Description: Development files for libkqueue Contains the header files, manpages, and static libraries for use in developing applications that use the libkqueue library. . libkqueue is a portable userspace implementation of the kqueue(2) kernel event notification mechanism found in FreeBSD and other BSD-based operating systems. The library translates between the kevent structure and the native kernel facilities of the host machine. N: There are 7 additional records. Please use the '-a' switch to see them. I have included the full output of the debug output below. Thanks, Jonathan Dukes Technical Ministry New Heights Church JDukes@NewHeights.org Info : Copyright 1999-2023 The FreeRADIUS server project and contributors Info : There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Info : PARTICULAR PURPOSE Info : You may redistribute copies of FreeRADIUS under the terms of the Info : GNU General Public License Info : For more information about these matters, see the file named COPYRIGHT Info : Starting - reading configuration files ... Debug : Including dictionary file "/etc/freeradius/dictionary" Debug : including configuration file /etc/freeradius/radiusd.conf Debug : Including files in directory "/etc/freeradius/template.d/" Debug : including configuration file /etc/freeradius/template.d/default Debug : including configuration file /etc/freeradius/clients.conf Debug : Including files in directory "/etc/freeradius/global.d/" Debug : including configuration file /etc/freeradius/global.d/ldap Debug : including configuration file /etc/freeradius/global.d/python Debug : Including files in directory "/etc/freeradius/mods-enabled/" Debug : including configuration file /etc/freeradius/mods-enabled/always Debug : including configuration file /etc/freeradius/mods-enabled/attr_filter Debug : including configuration file /etc/freeradius/mods-enabled/cache_eap Debug : including configuration file /etc/freeradius/mods-enabled/chap Debug : including configuration file /etc/freeradius/mods-enabled/client Debug : including configuration file /etc/freeradius/mods-enabled/delay Debug : including configuration file /etc/freeradius/mods-enabled/detail Debug : including configuration file /etc/freeradius/mods-enabled/detail.log Debug : including configuration file /etc/freeradius/mods-enabled/digest Debug : including configuration file /etc/freeradius/mods-enabled/eap Debug : including configuration file /etc/freeradius/mods-enabled/eap_inner Debug : including configuration file /etc/freeradius/mods-enabled/echo Debug : including configuration file /etc/freeradius/mods-enabled/exec Debug : including configuration file /etc/freeradius/mods-enabled/files Debug : including configuration file /etc/freeradius/mods-enabled/linelog Debug : including configuration file /etc/freeradius/mods-enabled/mschap Debug : including configuration file /etc/freeradius/mods-enabled/ntlm_auth Debug : including configuration file /etc/freeradius/mods-enabled/pam Debug : including configuration file /etc/freeradius/mods-enabled/pap Debug : including configuration file /etc/freeradius/mods-enabled/passwd Debug : including configuration file /etc/freeradius/mods-enabled/radutmp Debug : including configuration file /etc/freeradius/mods-enabled/sradutmp Debug : including configuration file /etc/freeradius/mods-enabled/stats Debug : including configuration file /etc/freeradius/mods-enabled/unix Debug : including configuration file /etc/freeradius/mods-enabled/unpack Debug : including configuration file /etc/freeradius/mods-enabled/utf8 Debug : Including files in directory "/etc/freeradius/policy.d/" Debug : including configuration file /etc/freeradius/policy.d/abfab-tr Debug : including configuration file /etc/freeradius/policy.d/accounting Debug : including configuration file /etc/freeradius/policy.d/canonicalisation Debug : including configuration file /etc/freeradius/policy.d/control Debug : including configuration file /etc/freeradius/policy.d/cui Debug : including configuration file /etc/freeradius/policy.d/debug Debug : including configuration file /etc/freeradius/policy.d/dhcp Debug : including configuration file /etc/freeradius/policy.d/eap Debug : including configuration file /etc/freeradius/policy.d/filter Debug : including configuration file /etc/freeradius/policy.d/operator-name Debug : including configuration file /etc/freeradius/policy.d/time Debug : including configuration file /etc/freeradius/policy.d/vendor Debug : Including files in directory "/etc/freeradius/sites-enabled/" Debug : including configuration file /etc/freeradius/sites-enabled/default Debug : Loaded module process_radius Debug : including configuration file /etc/freeradius/sites-enabled/inner-tunnel Debug : Parsing initial logging configuration. Debug : main { Debug : prefix = /usr Debug : log { Debug : destination = files Debug : syslog_facility = daemon Debug : local_state_dir = "/usr/var" Debug : logdir = "/usr/var/log" Debug : file = /var/log/freeradius/radius.log Debug : suppress_secrets = no Debug : } Debug : } Debug : Parsing security rules to bootstrap UID / GID / chroot / etc. Debug : main { Debug : log { Debug : } Debug : security { Debug : user = freerad Debug : group = freerad Debug : allow_core_dumps = no Debug : openssl_fips_mode = no Debug : } Debug : name = freeradius Debug : local_state_dir = "/usr/var" Debug : run_dir = /var/run/freeradius Debug : } Debug : Parsing main configuration Debug : main { Debug : server default { Debug : namespace = radius Debug : radius { Debug : Access-Request { Debug : log { Debug : stripped_names = no Debug : auth = no Debug : auth_badpass = no Debug : auth_goodpass = no Debug : msg_denied = "You are already logged in - access denied" Debug : } Debug : session { Debug : timeout = 15 Debug : max = 4096 Debug : } Debug : } Debug : } Debug : Loaded module proto_radius Debug : listen { Debug : type = Access-Request Debug : type = Status-Server Debug : transport = udp Debug : Loaded module proto_radius_udp Debug : udp { Debug : ipaddr = * Debug : port = 1812 Debug : networks { Debug : allow = 127/8 Debug : allow = 192.0.2/24 Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 60.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 256 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : listen tcp_auth { Debug : type = Access-Request Debug : type = Status-Server Debug : transport = tcp Debug : Loaded module proto_radius_tcp Debug : tcp { Debug : ipaddr = * Debug : port = 1812 Debug : networks { Debug : allow = 127/8 Debug : allow = 192.0.2/24 Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 30.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 1024 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : listen udp_acct { Debug : type = Accounting-Request Debug : transport = udp Debug : udp { Debug : ipaddr = * Debug : port = 1813 Debug : networks { Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 30.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 1024 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : } Debug : server inner-tunnel { Debug : namespace = radius Debug : radius { Debug : Access-Request { Debug : log { Debug : stripped_names = no Debug : auth = no Debug : auth_badpass = no Debug : auth_goodpass = no Debug : msg_denied = "You are already logged in - access denied" Debug : } Debug : session { Debug : timeout = 15 Debug : max = 4096 Debug : } Debug : } Debug : } Debug : listen { Debug : type = Access-Request Debug : transport = udp Debug : udp { Debug : ipaddr = 127.0.0.1 Debug : port = 18120 Debug : networks { Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 30.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 1024 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : } Debug : log { Debug : colourise = yes Debug : } Debug : security { Debug : } Debug : sbin_dir = "/usr/sbin" Debug : logdir = /var/log/freeradius Debug : radacctdir = /var/log/freeradius/radacct Debug : reverse_lookups = no Debug : hostname_lookups = yes Debug : max_request_time = 30 Debug : pidfile = /var/run/freeradius/freeradius.pid Debug : debug_level = 0 Debug : max_requests = 16384 Debug : resources { Debug : } Debug : thread pool { Debug : num_networks = 1 Info : Dynamically determined thread.workers = 4 Debug : num_workers = 4 Debug : openssl_async_pool_init = 64 Debug : openssl_async_pool_max = 1024 Debug : } Debug : migrate { Debug : rewrite_update = false Debug : forbid_update = false Debug : } Debug : } Info : Switching to configured log settings Debug : freeradius: #### Loading Clients #### Debug : client localhost { Debug : ipaddr = 127.0.0.1 Debug : secret = <<< secret >>> Debug : require_message_authenticator = no Debug : proto = * Debug : limit { Debug : max_connections = 16 Debug : lifetime = 0 Debug : idle_timeout = 30 Debug : } Debug : } Debug : client localhost_ipv6 { Debug : ipv6addr = ::1 Debug : secret = <<< secret >>> Debug : limit { Debug : max_connections = 16 Debug : lifetime = 0 Debug : idle_timeout = 30s Debug : } Debug : } Warn : radiusd - Process concurrency checks disabled: Failed associating semaphore with "/etc/freeradius/freeradius.conf" ID 0x66: ENOENT: No such file or directory Info : Debugger not attached Info : systemd watchdog is disabled Info : pre-suid-down capabilities: =p Warn : trigger { ... } subsection not found, triggers will be disabled Debug : #### Instantiating libraries #### Debug : #### Bootstrapping process modules #### Debug : Bootstrapping process_radius "default" Debug : Creating Auth-Type = pap Debug : Creating Auth-Type = chap Debug : Creating Auth-Type = mschap Debug : Creating Auth-Type = digest Debug : Creating Auth-Type = ldap Debug : Creating Auth-Type = eap Debug : Bootstrapping process_radius "inner-tunnel" Debug : #### Bootstrapping protocol modules #### Debug : Bootstrapping proto_radius "default.radius" Debug : client localhost { Debug : ipaddr = 192.0.2.1 Debug : secret = <<< secret >>> Debug : shortname = sample Debug : limit { Debug : max_connections = 16 Debug : lifetime = 0 Debug : idle_timeout = 30s Debug : } Debug : } Debug : Bootstrapping proto_radius "default.tcp_auth" Debug : Bootstrapping proto_radius "default.udp_acct" Debug : Bootstrapping proto_radius "inner-tunnel.radius" Debug : #### Instantiating libraries #### Debug : #### Bootstrapping modules #### Debug : modules { Debug : Loaded module rlm_always Debug : always reject { Debug : rcode = reject Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always fail { Debug : rcode = fail Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always ok { Debug : rcode = ok Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always handled { Debug : rcode = handled Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always invalid { Debug : rcode = invalid Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always disallow { Debug : rcode = disallow Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always notfound { Debug : rcode = notfound Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always noop { Debug : rcode = noop Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always updated { Debug : rcode = updated Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : Loaded module rlm_attr_filter Debug : attr_filter attr_filter.pre-proxy { Debug : filename = /etc/freeradius/mods-config/attr_filter/pre-proxy Debug : key = "%{Realm}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.post-proxy { Debug : filename = /etc/freeradius/mods-config/attr_filter/post-proxy Debug : key = "%{Realm}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.access_reject { Debug : filename = /etc/freeradius/mods-config/attr_filter/access_reject Debug : key = "%{User-Name}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.access_challenge { Debug : filename = /etc/freeradius/mods-config/attr_filter/access_challenge Debug : key = "%{User-Name}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.accounting_response { Debug : filename = /etc/freeradius/mods-config/attr_filter/accounting_response Debug : key = "%{User-Name}" Debug : relaxed = no Debug : } Debug : Loaded module rlm_cache Debug : cache cache_eap { Debug : driver = rbtree Debug : Loaded module rlm_cache_rbtree Debug : key = %{&control.State || &reply.State || &State} Debug : ttl = 15 Debug : max_entries = 0 Debug : epoch = 0 Debug : add_stats = no Debug : } Debug : Loaded module rlm_chap Debug : chap { Debug : min_challenge_len = 16 Debug : } Debug : Loaded module rlm_client Debug : Loaded module rlm_delay Debug : delay { Debug : delay = 1.0s Debug : relative = no Debug : force_reschedule = no Debug : } Debug : delay delay_reject { Debug : delay = "%{&reply.FreeRADIUS-Response-Delay || 1}" Debug : relative = yes Debug : force_reschedule = no Debug : } Debug : Loaded module rlm_detail Debug : detail { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail auth_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/auth-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail reply_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/reply-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail pre_proxy_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/pre-proxy-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail post_proxy_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/post-proxy-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : Loaded module rlm_digest Debug : Loaded module rlm_eap Debug : eap { Debug : require_identity_realm = nai Debug : type = md5 Debug : Loaded module rlm_eap_md5 Debug : type = gtc Debug : Loaded module rlm_eap_gtc Debug : gtc { Debug : challenge = "Password: " Debug : auth_type = PAP Debug : } Debug : type = tls Debug : Loaded module rlm_eap_tls Debug : tls { Debug : tls = tls-common Debug : require_client_cert = yes Debug : include_length = yes Debug : } Debug : type = ttls Debug : Loaded module rlm_eap_ttls Debug : ttls { Debug : tls = tls-common Debug : virtual_server = "inner-tunnel" Debug : include_length = yes Debug : require_client_cert = no Debug : } Debug : type = mschapv2 Debug : Loaded module rlm_eap_mschapv2 Debug : mschapv2 { Debug : with_ntdomain_hack = no Debug : auth_type = mschap Debug : send_error = no Debug : } Debug : type = peap Debug : Loaded module rlm_eap_peap Debug : peap { Debug : tls = tls-common Debug : virtual_server = "inner-tunnel" Debug : require_client_cert = no Debug : } Debug : ignore_unknown_eap_types = no Debug : } Debug : eap inner-eap { Debug : require_identity_realm = nai Debug : default_eap_type = mschapv2 Debug : type = md5 Debug : type = gtc Debug : gtc { Debug : challenge = "Password: " Debug : auth_type = PAP Debug : } Debug : type = mschapv2 Debug : mschapv2 { Debug : with_ntdomain_hack = no Debug : auth_type = mschap Debug : send_error = no Debug : } Debug : type = tls Debug : tls { Debug : tls = tls-peer Debug : require_client_cert = yes Debug : include_length = yes Debug : } Debug : ignore_unknown_eap_types = no Debug : } Debug : Loaded module rlm_exec Debug : exec echo { Debug : wait = yes Debug : input_pairs = &request Debug : output_pairs = &reply Debug : shell_escape = yes Debug : env_inherit = no Debug : } Debug : exec { Debug : wait = yes Debug : input_pairs = &request Debug : shell_escape = yes Debug : env_inherit = no Debug : timeout = 10 Debug : } Debug : Loaded module rlm_files Debug : files { Debug : filename = /etc/freeradius/mods-config/files/authorize Debug : acctusersfile = /etc/freeradius/mods-config/files/accounting Debug : key = %{%{Stripped-User-Name}:-%{User-Name}} Debug : } Debug : Loaded module rlm_linelog Debug : linelog { Debug : destination = file Debug : delimiter = "\n" Debug : format = "This is a log message for %{User-Name}" Debug : reference = "messages.%{&reply.Packet-Type || 'default'}" Debug : file { Debug : filename = /var/log/freeradius/linelog Debug : permissions = 0600 Debug : escape_filenames = no Debug : } Debug : syslog { Debug : severity = "info" Debug : } Debug : unix { Debug : } Debug : tcp { Debug : server = localhost Debug : port = 514 Debug : timeout = 2.0 Debug : } Debug : udp { Debug : server = localhost Debug : port = 514 Debug : timeout = 2.0 Debug : } Debug : } Debug : linelog log_accounting { Debug : destination = file Debug : delimiter = "\n" Debug : format = "" Debug : reference = "Accounting-Request.%{&Acct-Status-Type || 'unknown'}" Debug : file { Debug : filename = /var/log/freeradius/linelog-accounting Debug : permissions = 0600 Debug : escape_filenames = no Debug : } Debug : syslog { Debug : severity = "info" Debug : } Debug : unix { Debug : } Debug : tcp { Debug : timeout = 1000 Debug : } Debug : udp { Debug : timeout = 1000 Debug : } Debug : } Debug : Loaded module rlm_mschap Debug : mschap { Debug : normalise = yes Debug : use_mppe = yes Debug : require_encryption = no Debug : require_strong = no Debug : with_ntdomain_hack = yes Debug : passchange { Debug : } Debug : allow_retry = yes Debug : winbind { Debug : retry_with_normalised_username = no Debug : } Debug : } Debug : exec ntlm_auth { Debug : wait = yes Debug : shell_escape = yes Debug : env_inherit = no Debug : } Debug : Loaded module rlm_pam Debug : pam { Debug : pam_auth = radiusd Debug : } Debug : Loaded module rlm_pap Debug : pap { Debug : normalise = yes Debug : } Debug : Loaded module rlm_passwd Debug : passwd etc_passwd { Debug : filename = /etc/passwd Debug : format = "*User-Name:Crypt-Password:" Debug : delimiter = ":" Debug : ignore_nislike = no Debug : ignore_empty = yes Debug : allow_multiple_keys = no Debug : hash_size = 100 Debug : } Debug : Loaded module rlm_radutmp Debug : radutmp { Debug : filename = /var/log/freeradius/radutmp Debug : username = %{User-Name} Debug : check_with_nas = yes Debug : permissions = 0600 Debug : caller_id = no Debug : } Debug : radutmp sradutmp { Debug : filename = /var/log/freeradius/sradutmp Debug : username = "%{User-Name}" Debug : check_with_nas = yes Debug : permissions = 0644 Debug : caller_id = no Debug : } Debug : Loaded module rlm_stats Debug : stats { Debug : } Debug : Loaded module rlm_unix Debug : unix { Debug : } Debug : Loaded module rlm_unpack Debug : Loaded module rlm_utf8 Debug : #### Bootstrapping rlm modules #### Debug : Bootstrapping rlm_cache "cache_eap" Debug : Bootstrapping rlm_chap "chap" Debug : Bootstrapping rlm_delay "delay" Debug : Bootstrapping rlm_delay "delay_reject" Debug : Bootstrapping rlm_always "disallow" Debug : Bootstrapping rlm_eap "eap" Debug : Bootstrapping rlm_exec "echo" Debug : Bootstrapping rlm_exec "exec" Debug : Bootstrapping rlm_always "fail" Debug : Bootstrapping rlm_always "handled" Debug : Bootstrapping rlm_eap "inner-eap" Debug : Bootstrapping rlm_always "invalid" Debug : Bootstrapping rlm_linelog "linelog" Debug : Bootstrapping rlm_linelog "log_accounting" Debug : Bootstrapping rlm_mschap "mschap" Debug : Bootstrapping rlm_always "noop" Debug : Bootstrapping rlm_always "notfound" Debug : Bootstrapping rlm_exec "ntlm_auth" Debug : Bootstrapping rlm_always "ok" Debug : Bootstrapping rlm_always "reject" Debug : Bootstrapping rlm_unix "unix" Debug : Bootstrapping rlm_always "updated" Debug : } # modules Debug : #### Instantiating listeners #### Debug : Compiling policies in server default { ... } Debug : Instantiating proto_radius "default.radius" Debug : Instantiating proto_radius "default.tcp_auth" Debug : Instantiating proto_radius "default.udp_acct" Debug : Instantiating process_radius "default" Debug : Compiling policies in - recv Access-Request {...} Warn : /etc/freeradius/sites-enabled/default[859]: Ignoring "-sql" as the "sql" module is not enabled. Warn : /etc/freeradius/sites-enabled/default[875]: Ignoring "-ldap" as the "ldap" module is not enabled. Warn : /etc/freeradius/policy.d/time[13]: Skipping remaining instructions due to 'return' Warn : /etc/freeradius/policy.d/time[18]: Please use the 'filter' keyword for attribute filtering Debug : Compiling policies in - send Access-Accept {...} Warn : /etc/freeradius/sites-enabled/default[1174]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - send Access-Challenge {...} Debug : Compiling policies in - send Access-Reject {...} Warn : /etc/freeradius/sites-enabled/default[1289]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - recv Accounting-Request {...} Debug : Compiling policies in - send Accounting-Response {...} Warn : /etc/freeradius/sites-enabled/default[1504]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - recv Status-Server {...} Debug : Compiling policies in - authenticate pap {...} Debug : Compiling policies in - authenticate chap {...} Debug : Compiling policies in - authenticate mschap {...} Debug : Compiling policies in - authenticate digest {...} Debug : Compiling policies in - authenticate ldap {...} Warn : /etc/freeradius/sites-enabled/default[1037]: Ignoring "-ldap" as the "ldap" module is not enabled. Debug : Compiling policies in - authenticate eap {...} Debug : Compiling policies in - accounting Start {...} Debug : Compiling policies in - accounting Stop {...} Debug : Compiling policies in - accounting Interim-Update {...} Debug : Compiling policies in - accounting Accounting-On {...} Debug : Compiling policies in - accounting Accounting-Off {...} Debug : Compiling policies in - accounting Failed {...} Warn : /etc/freeradius/sites-enabled/default[80]: radius { ... } section is unused Warn : /etc/freeradius/sites-enabled/default[224]: dictionary { ... } section is unused Debug : Compiling policies in server inner-tunnel { ... } Debug : Instantiating proto_radius "inner-tunnel.radius" Debug : Instantiating process_radius "inner-tunnel" Debug : Compiling policies in - recv Access-Request {...} Warn : /etc/freeradius/sites-enabled/inner-tunnel[124]: Ignoring "-sql" as the "sql" module is not enabled. Warn : /etc/freeradius/sites-enabled/inner-tunnel[134]: Ignoring "-ldap" as the "ldap" module is not enabled. Warn : /etc/freeradius/policy.d/time[13]: Skipping remaining instructions due to 'return' Warn : /etc/freeradius/policy.d/time[18]: Please use the 'filter' keyword for attribute filtering Debug : Compiling policies in - send Access-Accept {...} Warn : /etc/freeradius/sites-enabled/inner-tunnel[266]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - send Access-Reject {...} Warn : /etc/freeradius/sites-enabled/inner-tunnel[301]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - authenticate pap {...} Debug : Compiling policies in - authenticate chap {...} Debug : Compiling policies in - authenticate mschap {...} Debug : Compiling policies in - authenticate eap {...} Warn : radius { ... } section is unused Debug : #### Instantiating rlm modules #### Debug : Instantiating rlm_attr_filter "attr_filter.access_challenge" Debug : Reading file /etc/freeradius/mods-config/attr_filter/access_challenge Debug : Instantiating rlm_attr_filter "attr_filter.access_reject" Debug : Reading file /etc/freeradius/mods-config/attr_filter/access_reject Debug : Instantiating rlm_attr_filter "attr_filter.accounting_response" Debug : Reading file /etc/freeradius/mods-config/attr_filter/accounting_response Debug : Instantiating rlm_attr_filter "attr_filter.post-proxy" Debug : Reading file /etc/freeradius/mods-config/attr_filter/post-proxy Debug : Instantiating rlm_attr_filter "attr_filter.pre-proxy" Debug : Reading file /etc/freeradius/mods-config/attr_filter/pre-proxy Debug : Instantiating rlm_detail "auth_log" Debug : auth_log - 'User-Password' suppressed, will not appear in detail output Debug : Instantiating rlm_cache "cache_eap" Debug : Instantiating rlm_chap "chap" Debug : Instantiating rlm_detail "detail" Debug : Instantiating rlm_digest "digest" Debug : Instantiating rlm_always "disallow" Debug : Instantiating rlm_eap "eap" Debug : Instantiating rlm_passwd "etc_passwd" Debug : Instantiating rlm_always "fail" Debug : Instantiating rlm_files "files" Debug : Reading file /etc/freeradius/mods-config/files/authorize Error : /etc/freeradius/mods-config/files/authorize[1]: Unknown attribute 'Cleartext.Password' Error : Failed reading /etc/freeradius/mods-config/files/authorize Error : /etc/freeradius/mods-enabled/files[26]: Instantiation failed for module "files" root@freeradius:/etc/freeradius# nano /etc/freeradius/mods-config/files/authorize root@freeradius:/etc/freeradius# freeradius -X > debug.txt root@freeradius:/etc/freeradius# radtest testing password 127.0.0.1 0 testing123 Sent Access-Request Id 76 from 0.0.0.0:43164 to 127.0.0.1:1812 length 77 User-Name = "testing" User-Password = "password" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00 Password.Cleartext = "password" Sent Access-Request Id 76 from 0.0.0.0:43164 to 127.0.0.1:1812 length 77 User-Name = "testing" User-Password = "password" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00 Password.Cleartext = "password" Sent Access-Request Id 76 from 0.0.0.0:43164 to 127.0.0.1:1812 length 77 User-Name = "testing" User-Password = "password" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00 Password.Cleartext = "password" (0) No reply from server for ID 76 socket 3 root@freeradius:/etc/freeradius# sudo systemctl stop freeradius root@freeradius:/etc/freeradius# cat debug.txt Info : Copyright 1999-2023 The FreeRADIUS server project and contributors Info : There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Info : PARTICULAR PURPOSE Info : You may redistribute copies of FreeRADIUS under the terms of the Info : GNU General Public License Info : For more information about these matters, see the file named COPYRIGHT Info : Starting - reading configuration files ... Debug : Including dictionary file "/etc/freeradius/dictionary" Debug : including configuration file /etc/freeradius/radiusd.conf Debug : Including files in directory "/etc/freeradius/template.d/" Debug : including configuration file /etc/freeradius/template.d/default Debug : including configuration file /etc/freeradius/clients.conf Debug : Including files in directory "/etc/freeradius/global.d/" Debug : including configuration file /etc/freeradius/global.d/ldap Debug : including configuration file /etc/freeradius/global.d/python Debug : Including files in directory "/etc/freeradius/mods-enabled/" Debug : including configuration file /etc/freeradius/mods-enabled/always Debug : including configuration file /etc/freeradius/mods-enabled/attr_filter Debug : including configuration file /etc/freeradius/mods-enabled/cache_eap Debug : including configuration file /etc/freeradius/mods-enabled/chap Debug : including configuration file /etc/freeradius/mods-enabled/client Debug : including configuration file /etc/freeradius/mods-enabled/delay Debug : including configuration file /etc/freeradius/mods-enabled/detail Debug : including configuration file /etc/freeradius/mods-enabled/detail.log Debug : including configuration file /etc/freeradius/mods-enabled/digest Debug : including configuration file /etc/freeradius/mods-enabled/eap Debug : including configuration file /etc/freeradius/mods-enabled/eap_inner Debug : including configuration file /etc/freeradius/mods-enabled/echo Debug : including configuration file /etc/freeradius/mods-enabled/exec Debug : including configuration file /etc/freeradius/mods-enabled/files Debug : including configuration file /etc/freeradius/mods-enabled/linelog Debug : including configuration file /etc/freeradius/mods-enabled/mschap Debug : including configuration file /etc/freeradius/mods-enabled/ntlm_auth Debug : including configuration file /etc/freeradius/mods-enabled/pam Debug : including configuration file /etc/freeradius/mods-enabled/pap Debug : including configuration file /etc/freeradius/mods-enabled/passwd Debug : including configuration file /etc/freeradius/mods-enabled/radutmp Debug : including configuration file /etc/freeradius/mods-enabled/sradutmp Debug : including configuration file /etc/freeradius/mods-enabled/stats Debug : including configuration file /etc/freeradius/mods-enabled/unix Debug : including configuration file /etc/freeradius/mods-enabled/unpack Debug : including configuration file /etc/freeradius/mods-enabled/utf8 Debug : Including files in directory "/etc/freeradius/policy.d/" Debug : including configuration file /etc/freeradius/policy.d/abfab-tr Debug : including configuration file /etc/freeradius/policy.d/accounting Debug : including configuration file /etc/freeradius/policy.d/canonicalisation Debug : including configuration file /etc/freeradius/policy.d/control Debug : including configuration file /etc/freeradius/policy.d/cui Debug : including configuration file /etc/freeradius/policy.d/debug Debug : including configuration file /etc/freeradius/policy.d/dhcp Debug : including configuration file /etc/freeradius/policy.d/eap Debug : including configuration file /etc/freeradius/policy.d/filter Debug : including configuration file /etc/freeradius/policy.d/operator-name Debug : including configuration file /etc/freeradius/policy.d/time Debug : including configuration file /etc/freeradius/policy.d/vendor Debug : Including files in directory "/etc/freeradius/sites-enabled/" Debug : including configuration file /etc/freeradius/sites-enabled/default Debug : Loaded module process_radius Debug : including configuration file /etc/freeradius/sites-enabled/inner-tunnel Debug : Parsing initial logging configuration. Debug : main { Debug : prefix = /usr Debug : log { Debug : destination = files Debug : syslog_facility = daemon Debug : local_state_dir = "/usr/var" Debug : logdir = "/usr/var/log" Debug : file = /var/log/freeradius/radius.log Debug : suppress_secrets = no Debug : } Debug : } Debug : Parsing security rules to bootstrap UID / GID / chroot / etc. Debug : main { Debug : log { Debug : } Debug : security { Debug : user = freerad Debug : group = freerad Debug : allow_core_dumps = no Debug : openssl_fips_mode = no Debug : } Debug : name = freeradius Debug : local_state_dir = "/usr/var" Debug : run_dir = /var/run/freeradius Debug : } Debug : Parsing main configuration Debug : main { Debug : server default { Debug : namespace = radius Debug : radius { Debug : Access-Request { Debug : log { Debug : stripped_names = no Debug : auth = no Debug : auth_badpass = no Debug : auth_goodpass = no Debug : msg_denied = "You are already logged in - access denied" Debug : } Debug : session { Debug : timeout = 15 Debug : max = 4096 Debug : } Debug : } Debug : } Debug : Loaded module proto_radius Debug : listen { Debug : type = Access-Request Debug : type = Status-Server Debug : transport = udp Debug : Loaded module proto_radius_udp Debug : udp { Debug : ipaddr = * Debug : port = 1812 Debug : networks { Debug : allow = 127/8 Debug : allow = 192.0.2/24 Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 60.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 256 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : listen tcp_auth { Debug : type = Access-Request Debug : type = Status-Server Debug : transport = tcp Debug : Loaded module proto_radius_tcp Debug : tcp { Debug : ipaddr = * Debug : port = 1812 Debug : networks { Debug : allow = 127/8 Debug : allow = 192.0.2/24 Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 30.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 1024 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : listen udp_acct { Debug : type = Accounting-Request Debug : transport = udp Debug : udp { Debug : ipaddr = * Debug : port = 1813 Debug : networks { Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 30.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 1024 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : } Debug : server inner-tunnel { Debug : namespace = radius Debug : radius { Debug : Access-Request { Debug : log { Debug : stripped_names = no Debug : auth = no Debug : auth_badpass = no Debug : auth_goodpass = no Debug : msg_denied = "You are already logged in - access denied" Debug : } Debug : session { Debug : timeout = 15 Debug : max = 4096 Debug : } Debug : } Debug : } Debug : listen { Debug : type = Access-Request Debug : transport = udp Debug : udp { Debug : ipaddr = 127.0.0.1 Debug : port = 18120 Debug : networks { Debug : } Debug : max_packet_size = 4096 Debug : max_attributes = 255 Debug : } Debug : limit { Debug : cleanup_delay = 5.0 Debug : idle_timeout = 30.0 Debug : nak_lifetime = 30.0 Debug : max_connections = 1024 Debug : max_clients = 256 Debug : max_pending_packets = 256 Debug : } Debug : priority { Debug : Access-Request = high Debug : Accounting-Request = low Debug : CoA-Request = normal Debug : Disconnect-Request = low Debug : Status-Server = now Debug : } Debug : } Debug : } Debug : log { Debug : colourise = yes Debug : } Debug : security { Debug : } Debug : sbin_dir = "/usr/sbin" Debug : logdir = /var/log/freeradius Debug : radacctdir = /var/log/freeradius/radacct Debug : reverse_lookups = no Debug : hostname_lookups = yes Debug : max_request_time = 30 Debug : pidfile = /var/run/freeradius/freeradius.pid Debug : debug_level = 0 Debug : max_requests = 16384 Debug : resources { Debug : } Debug : thread pool { Debug : num_networks = 1 Info : Dynamically determined thread.workers = 4 Debug : num_workers = 4 Debug : openssl_async_pool_init = 64 Debug : openssl_async_pool_max = 1024 Debug : } Debug : migrate { Debug : rewrite_update = false Debug : forbid_update = false Debug : } Debug : } Info : Switching to configured log settings Debug : freeradius: #### Loading Clients #### Debug : client localhost { Debug : ipaddr = 127.0.0.1 Debug : secret = <<< secret >>> Debug : require_message_authenticator = no Debug : proto = * Debug : limit { Debug : max_connections = 16 Debug : lifetime = 0 Debug : idle_timeout = 30 Debug : } Debug : } Debug : client localhost_ipv6 { Debug : ipv6addr = ::1 Debug : secret = <<< secret >>> Debug : limit { Debug : max_connections = 16 Debug : lifetime = 0 Debug : idle_timeout = 30s Debug : } Debug : } Warn : radiusd - Process concurrency checks disabled: Failed associating semaphore with "/etc/freeradius/freeradius.conf" ID 0x66: ENOENT: No such file or directory Info : Debugger not attached Info : systemd watchdog is disabled Info : pre-suid-down capabilities: =p Warn : trigger { ... } subsection not found, triggers will be disabled Debug : #### Instantiating libraries #### Debug : #### Bootstrapping process modules #### Debug : Bootstrapping process_radius "default" Debug : Creating Auth-Type = pap Debug : Creating Auth-Type = chap Debug : Creating Auth-Type = mschap Debug : Creating Auth-Type = digest Debug : Creating Auth-Type = ldap Debug : Creating Auth-Type = eap Debug : Bootstrapping process_radius "inner-tunnel" Debug : #### Bootstrapping protocol modules #### Debug : Bootstrapping proto_radius "default.radius" Debug : client localhost { Debug : ipaddr = 192.0.2.1 Debug : secret = <<< secret >>> Debug : shortname = sample Debug : limit { Debug : max_connections = 16 Debug : lifetime = 0 Debug : idle_timeout = 30s Debug : } Debug : } Debug : Bootstrapping proto_radius "default.tcp_auth" Debug : Bootstrapping proto_radius "default.udp_acct" Debug : Bootstrapping proto_radius "inner-tunnel.radius" Debug : #### Instantiating libraries #### Debug : #### Bootstrapping modules #### Debug : modules { Debug : Loaded module rlm_always Debug : always reject { Debug : rcode = reject Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always fail { Debug : rcode = fail Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always ok { Debug : rcode = ok Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always handled { Debug : rcode = handled Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always invalid { Debug : rcode = invalid Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always disallow { Debug : rcode = disallow Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always notfound { Debug : rcode = notfound Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always noop { Debug : rcode = noop Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : always updated { Debug : rcode = updated Debug : simulcount = 0 Debug : mpp = no Debug : } Debug : Loaded module rlm_attr_filter Debug : attr_filter attr_filter.pre-proxy { Debug : filename = /etc/freeradius/mods-config/attr_filter/pre-proxy Debug : key = "%{Realm}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.post-proxy { Debug : filename = /etc/freeradius/mods-config/attr_filter/post-proxy Debug : key = "%{Realm}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.access_reject { Debug : filename = /etc/freeradius/mods-config/attr_filter/access_reject Debug : key = "%{User-Name}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.access_challenge { Debug : filename = /etc/freeradius/mods-config/attr_filter/access_challenge Debug : key = "%{User-Name}" Debug : relaxed = no Debug : } Debug : attr_filter attr_filter.accounting_response { Debug : filename = /etc/freeradius/mods-config/attr_filter/accounting_response Debug : key = "%{User-Name}" Debug : relaxed = no Debug : } Debug : Loaded module rlm_cache Debug : cache cache_eap { Debug : driver = rbtree Debug : Loaded module rlm_cache_rbtree Debug : key = %{&control.State || &reply.State || &State} Debug : ttl = 15 Debug : max_entries = 0 Debug : epoch = 0 Debug : add_stats = no Debug : } Debug : Loaded module rlm_chap Debug : chap { Debug : min_challenge_len = 16 Debug : } Debug : Loaded module rlm_client Debug : Loaded module rlm_delay Debug : delay { Debug : delay = 1.0s Debug : relative = no Debug : force_reschedule = no Debug : } Debug : delay delay_reject { Debug : delay = "%{&reply.FreeRADIUS-Response-Delay || 1}" Debug : relative = yes Debug : force_reschedule = no Debug : } Debug : Loaded module rlm_detail Debug : detail { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail auth_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/auth-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail reply_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/reply-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail pre_proxy_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/pre-proxy-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : detail post_proxy_log { Debug : filename = /var/log/freeradius/radacct/%{Net.Src.IP}/post-proxy-detail-%Y-%m-%d Debug : header = %t Debug : permissions = 0600 Debug : locking = no Debug : escape_filenames = no Debug : log_packet_header = no Debug : } Debug : Loaded module rlm_digest Debug : Loaded module rlm_eap Debug : eap { Debug : require_identity_realm = nai Debug : type = md5 Debug : Loaded module rlm_eap_md5 Debug : type = gtc Debug : Loaded module rlm_eap_gtc Debug : gtc { Debug : challenge = "Password: " Debug : auth_type = PAP Debug : } Debug : type = tls Debug : Loaded module rlm_eap_tls Debug : tls { Debug : tls = tls-common Debug : require_client_cert = yes Debug : include_length = yes Debug : } Debug : type = ttls Debug : Loaded module rlm_eap_ttls Debug : ttls { Debug : tls = tls-common Debug : virtual_server = "inner-tunnel" Debug : include_length = yes Debug : require_client_cert = no Debug : } Debug : type = mschapv2 Debug : Loaded module rlm_eap_mschapv2 Debug : mschapv2 { Debug : with_ntdomain_hack = no Debug : auth_type = mschap Debug : send_error = no Debug : } Debug : type = peap Debug : Loaded module rlm_eap_peap Debug : peap { Debug : tls = tls-common Debug : virtual_server = "inner-tunnel" Debug : require_client_cert = no Debug : } Debug : ignore_unknown_eap_types = no Debug : } Debug : eap inner-eap { Debug : require_identity_realm = nai Debug : default_eap_type = mschapv2 Debug : type = md5 Debug : type = gtc Debug : gtc { Debug : challenge = "Password: " Debug : auth_type = PAP Debug : } Debug : type = mschapv2 Debug : mschapv2 { Debug : with_ntdomain_hack = no Debug : auth_type = mschap Debug : send_error = no Debug : } Debug : type = tls Debug : tls { Debug : tls = tls-peer Debug : require_client_cert = yes Debug : include_length = yes Debug : } Debug : ignore_unknown_eap_types = no Debug : } Debug : Loaded module rlm_exec Debug : exec echo { Debug : wait = yes Debug : input_pairs = &request Debug : output_pairs = &reply Debug : shell_escape = yes Debug : env_inherit = no Debug : } Debug : exec { Debug : wait = yes Debug : input_pairs = &request Debug : shell_escape = yes Debug : env_inherit = no Debug : timeout = 10 Debug : } Debug : Loaded module rlm_files Debug : files { Debug : filename = /etc/freeradius/mods-config/files/authorize Debug : acctusersfile = /etc/freeradius/mods-config/files/accounting Debug : key = %{%{Stripped-User-Name}:-%{User-Name}} Debug : } Debug : Loaded module rlm_linelog Debug : linelog { Debug : destination = file Debug : delimiter = "\n" Debug : format = "This is a log message for %{User-Name}" Debug : reference = "messages.%{&reply.Packet-Type || 'default'}" Debug : file { Debug : filename = /var/log/freeradius/linelog Debug : permissions = 0600 Debug : escape_filenames = no Debug : } Debug : syslog { Debug : severity = "info" Debug : } Debug : unix { Debug : } Debug : tcp { Debug : server = localhost Debug : port = 514 Debug : timeout = 2.0 Debug : } Debug : udp { Debug : server = localhost Debug : port = 514 Debug : timeout = 2.0 Debug : } Debug : } Debug : linelog log_accounting { Debug : destination = file Debug : delimiter = "\n" Debug : format = "" Debug : reference = "Accounting-Request.%{&Acct-Status-Type || 'unknown'}" Debug : file { Debug : filename = /var/log/freeradius/linelog-accounting Debug : permissions = 0600 Debug : escape_filenames = no Debug : } Debug : syslog { Debug : severity = "info" Debug : } Debug : unix { Debug : } Debug : tcp { Debug : timeout = 1000 Debug : } Debug : udp { Debug : timeout = 1000 Debug : } Debug : } Debug : Loaded module rlm_mschap Debug : mschap { Debug : normalise = yes Debug : use_mppe = yes Debug : require_encryption = no Debug : require_strong = no Debug : with_ntdomain_hack = yes Debug : passchange { Debug : } Debug : allow_retry = yes Debug : winbind { Debug : retry_with_normalised_username = no Debug : } Debug : } Debug : exec ntlm_auth { Debug : wait = yes Debug : shell_escape = yes Debug : env_inherit = no Debug : } Debug : Loaded module rlm_pam Debug : pam { Debug : pam_auth = radiusd Debug : } Debug : Loaded module rlm_pap Debug : pap { Debug : normalise = yes Debug : } Debug : Loaded module rlm_passwd Debug : passwd etc_passwd { Debug : filename = /etc/passwd Debug : format = "*User-Name:Crypt-Password:" Debug : delimiter = ":" Debug : ignore_nislike = no Debug : ignore_empty = yes Debug : allow_multiple_keys = no Debug : hash_size = 100 Debug : } Debug : Loaded module rlm_radutmp Debug : radutmp { Debug : filename = /var/log/freeradius/radutmp Debug : username = %{User-Name} Debug : check_with_nas = yes Debug : permissions = 0600 Debug : caller_id = no Debug : } Debug : radutmp sradutmp { Debug : filename = /var/log/freeradius/sradutmp Debug : username = "%{User-Name}" Debug : check_with_nas = yes Debug : permissions = 0644 Debug : caller_id = no Debug : } Debug : Loaded module rlm_stats Debug : stats { Debug : } Debug : Loaded module rlm_unix Debug : unix { Debug : } Debug : Loaded module rlm_unpack Debug : Loaded module rlm_utf8 Debug : #### Bootstrapping rlm modules #### Debug : Bootstrapping rlm_cache "cache_eap" Debug : Bootstrapping rlm_chap "chap" Debug : Bootstrapping rlm_delay "delay" Debug : Bootstrapping rlm_delay "delay_reject" Debug : Bootstrapping rlm_always "disallow" Debug : Bootstrapping rlm_eap "eap" Debug : Bootstrapping rlm_exec "echo" Debug : Bootstrapping rlm_exec "exec" Debug : Bootstrapping rlm_always "fail" Debug : Bootstrapping rlm_always "handled" Debug : Bootstrapping rlm_eap "inner-eap" Debug : Bootstrapping rlm_always "invalid" Debug : Bootstrapping rlm_linelog "linelog" Debug : Bootstrapping rlm_linelog "log_accounting" Debug : Bootstrapping rlm_mschap "mschap" Debug : Bootstrapping rlm_always "noop" Debug : Bootstrapping rlm_always "notfound" Debug : Bootstrapping rlm_exec "ntlm_auth" Debug : Bootstrapping rlm_always "ok" Debug : Bootstrapping rlm_always "reject" Debug : Bootstrapping rlm_unix "unix" Debug : Bootstrapping rlm_always "updated" Debug : } # modules Debug : #### Instantiating listeners #### Debug : Compiling policies in server default { ... } Debug : Instantiating proto_radius "default.radius" Debug : Instantiating proto_radius "default.tcp_auth" Debug : Instantiating proto_radius "default.udp_acct" Debug : Instantiating process_radius "default" Debug : Compiling policies in - recv Access-Request {...} Warn : /etc/freeradius/sites-enabled/default[859]: Ignoring "-sql" as the "sql" module is not enabled. Warn : /etc/freeradius/sites-enabled/default[875]: Ignoring "-ldap" as the "ldap" module is not enabled. Warn : /etc/freeradius/policy.d/time[13]: Skipping remaining instructions due to 'return' Warn : /etc/freeradius/policy.d/time[18]: Please use the 'filter' keyword for attribute filtering Debug : Compiling policies in - send Access-Accept {...} Warn : /etc/freeradius/sites-enabled/default[1174]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - send Access-Challenge {...} Debug : Compiling policies in - send Access-Reject {...} Warn : /etc/freeradius/sites-enabled/default[1289]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - recv Accounting-Request {...} Debug : Compiling policies in - send Accounting-Response {...} Warn : /etc/freeradius/sites-enabled/default[1504]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - recv Status-Server {...} Debug : Compiling policies in - authenticate pap {...} Debug : Compiling policies in - authenticate chap {...} Debug : Compiling policies in - authenticate mschap {...} Debug : Compiling policies in - authenticate digest {...} Debug : Compiling policies in - authenticate ldap {...} Warn : /etc/freeradius/sites-enabled/default[1037]: Ignoring "-ldap" as the "ldap" module is not enabled. Debug : Compiling policies in - authenticate eap {...} Debug : Compiling policies in - accounting Start {...} Debug : Compiling policies in - accounting Stop {...} Debug : Compiling policies in - accounting Interim-Update {...} Debug : Compiling policies in - accounting Accounting-On {...} Debug : Compiling policies in - accounting Accounting-Off {...} Debug : Compiling policies in - accounting Failed {...} Warn : /etc/freeradius/sites-enabled/default[80]: radius { ... } section is unused Warn : /etc/freeradius/sites-enabled/default[224]: dictionary { ... } section is unused Debug : Compiling policies in server inner-tunnel { ... } Debug : Instantiating proto_radius "inner-tunnel.radius" Debug : Instantiating process_radius "inner-tunnel" Debug : Compiling policies in - recv Access-Request {...} Warn : /etc/freeradius/sites-enabled/inner-tunnel[124]: Ignoring "-sql" as the "sql" module is not enabled. Warn : /etc/freeradius/sites-enabled/inner-tunnel[134]: Ignoring "-ldap" as the "ldap" module is not enabled. Warn : /etc/freeradius/policy.d/time[13]: Skipping remaining instructions due to 'return' Warn : /etc/freeradius/policy.d/time[18]: Please use the 'filter' keyword for attribute filtering Debug : Compiling policies in - send Access-Accept {...} Warn : /etc/freeradius/sites-enabled/inner-tunnel[266]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - send Access-Reject {...} Warn : /etc/freeradius/sites-enabled/inner-tunnel[301]: Ignoring "-sql" as the "sql" module is not enabled. Debug : Compiling policies in - authenticate pap {...} Debug : Compiling policies in - authenticate chap {...} Debug : Compiling policies in - authenticate mschap {...} Debug : Compiling policies in - authenticate eap {...} Warn : radius { ... } section is unused Debug : #### Instantiating rlm modules #### Debug : Instantiating rlm_attr_filter "attr_filter.access_challenge" Debug : Reading file /etc/freeradius/mods-config/attr_filter/access_challenge Debug : Instantiating rlm_attr_filter "attr_filter.access_reject" Debug : Reading file /etc/freeradius/mods-config/attr_filter/access_reject Debug : Instantiating rlm_attr_filter "attr_filter.accounting_response" Debug : Reading file /etc/freeradius/mods-config/attr_filter/accounting_response Debug : Instantiating rlm_attr_filter "attr_filter.post-proxy" Debug : Reading file /etc/freeradius/mods-config/attr_filter/post-proxy Debug : Instantiating rlm_attr_filter "attr_filter.pre-proxy" Debug : Reading file /etc/freeradius/mods-config/attr_filter/pre-proxy Debug : Instantiating rlm_detail "auth_log" Debug : auth_log - 'User-Password' suppressed, will not appear in detail output Debug : Instantiating rlm_cache "cache_eap" Debug : Instantiating rlm_chap "chap" Debug : Instantiating rlm_detail "detail" Debug : Instantiating rlm_digest "digest" Debug : Instantiating rlm_always "disallow" Debug : Instantiating rlm_eap "eap" Debug : Instantiating rlm_passwd "etc_passwd" Debug : Instantiating rlm_always "fail" Debug : Instantiating rlm_files "files" Debug : Reading file /etc/freeradius/mods-config/files/authorize Debug : Reading file /etc/freeradius/mods-config/files/accounting Debug : Instantiating rlm_always "handled" Debug : Instantiating rlm_eap "inner-eap" Warn : inner-eap - Failed to find 'authenticate inner-eap {...}' section. EAP authentication will likely not work Debug : Instantiating rlm_always "invalid" Debug : Instantiating rlm_linelog "linelog" Debug : Instantiating rlm_linelog "log_accounting" Debug : Instantiating rlm_mschap "mschap" Debug : mschap - Using internal authentication Debug : Instantiating rlm_always "noop" Debug : Instantiating rlm_always "notfound" Debug : Instantiating rlm_always "ok" Debug : Instantiating rlm_pam "pam" Debug : Instantiating rlm_pap "pap" Debug : Instantiating rlm_detail "post_proxy_log" Debug : Instantiating rlm_detail "pre_proxy_log" Debug : Instantiating rlm_always "reject" Debug : Instantiating rlm_detail "reply_log" Debug : Instantiating rlm_stats "stats" Debug : Instantiating rlm_always "updated" Debug : Instantiating _cache_rbtree "cache_eap.rbtree" Debug : Instantiating _eap_mschapv2 "eap.mschapv2" Debug : Instantiating _eap_peap "eap.peap" Debug : tls-config tls-common { Debug : chain rsa { Debug : format = pem Debug : certificate_file = /etc/freeradius/certs/rsa/server.pem Debug : private_key_password = <<< secret >>> Debug : private_key_file = /etc/freeradius/certs/rsa/server.key Debug : ca_file = /etc/freeradius/certs/rsa/ca.pem Debug : verify_mode = hard Debug : include_root_ca = no Debug : } Debug : verify_depth = 0 Debug : ca_path = /etc/freeradius/certs Debug : ca_file = /etc/freeradius/certs/rsa/ca.pem Debug : dh_file = /etc/freeradius/certs/dh Debug : fragment_size = 1024 Debug : cipher_list = "DEFAULT" Debug : cipher_server_preference = yes Debug : allow_renegotiation = no Debug : ecdh_curve = prime256v1 Debug : tls_min_version = 1.2 Debug : session { Debug : mode = auto Warn : tls - A virtual_server must be provided for stateful caching. cache.mode = "auto" rewritten to cache.mode = "stateless" Debug : name = "%{EAP-Type}%(interpreter:server)" Debug : lifetime = 1d Debug : require_extended_master_secret = yes Debug : require_perfect_forward_secrecy = no Debug : } Debug : verify { Debug : mode = all Debug : attribute_mode = client-and-issuer Debug : check_crl = no Debug : } Debug : } Debug : Instantiating _eap_tls "eap.tls" Debug : tls - Using cached TLS configuration from previous invocation Debug : Instantiating _eap_ttls "eap.ttls" Debug : tls - Using cached TLS configuration from previous invocation Debug : Instantiating _eap_mschapv2 "inner-eap.mschapv2" Debug : Instantiating _eap_tls "inner-eap.tls" Debug : tls-config tls-peer { Debug : chain { Debug : format = pem Debug : certificate_file = /etc/freeradius/certs/rsa/server.pem Debug : private_key_password = <<< secret >>> Debug : private_key_file = /etc/freeradius/certs/rsa/server.key Debug : ca_file = /etc/freeradius/certs/rsa/ca.pem Debug : verify_mode = hard Debug : include_root_ca = no Debug : } Debug : verify_depth = 0 Debug : ca_path = /etc/freeradius/certs Debug : ca_file = /etc/freeradius/certs/rsa/ca.pem Debug : dh_file = /etc/freeradius/certs/dh Debug : fragment_size = 16384 Debug : cipher_server_preference = yes Debug : allow_renegotiation = no Debug : ecdh_curve = "prime256v1" Debug : tls_min_version = 1.2 Debug : session { Debug : mode = auto Warn : tls - A virtual_server must be provided for stateful caching. cache.mode = "auto" rewritten to cache.mode = "stateless" Debug : name = "%{EAP-Type}%(interpreter:server)" Debug : lifetime = 1d Debug : require_extended_master_secret = yes Debug : require_perfect_forward_secrecy = no Debug : } Debug : verify { Debug : mode = all Debug : attribute_mode = client-and-issuer Debug : check_crl = no Debug : } Debug : } Debug : Scheduler created in single-threaded mode Debug : #### Opening listener interfaces #### Error : Network - Failed adding new socket to network event loop: Failed inserting filters for FD 17: EFAULT: Bad address Error : /etc/freeradius/sites-enabled/default[275]: Opening radius I/O interface failed