Here is the debugging output produced:<br><br><br>Wed Apr 15 13:43:43 2009 : Info: FreeRADIUS Version 2.1.4, for host i386-portbld-freebsd7.1, built on Apr 13 2009 at 14:36:26<br>Wed Apr 15 13:43:43 2009 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors.<br>
Wed Apr 15 13:43:43 2009 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A<br>Wed Apr 15 13:43:43 2009 : Info: PARTICULAR PURPOSE.<br>Wed Apr 15 13:43:43 2009 : Info: You may redistribute copies of FreeRADIUS under the terms of the<br>
Wed Apr 15 13:43:43 2009 : Info: GNU General Public License v2.<br>Wed Apr 15 13:43:43 2009 : Info: Starting - reading configuration files ...<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/radiusd.conf<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/proxy.conf<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/clients.conf<br>Wed Apr 15 13:43:43 2009 : Debug: including files in directory /usr/local/etc/raddb/modules/<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/wimax<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/always<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/attr_filter<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/attr_rewrite<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/chap<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/checkval<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/counter<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/detail<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/<a href="http://detail.example.com">detail.example.com</a><br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/detail.log<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/digest<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/echo<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/etc_group<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/exec<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/expiration<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/expr<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/files<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/inner-eap<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/ippool<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/krb5<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/ldap<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/linelog<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/logintime<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/mac2ip<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/mac2vlan<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/mschap<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/otp<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/pam<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/pap<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/passwd<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/perl<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/policy<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/preprocess<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/radutmp<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/realm<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/smbpasswd<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/smsotp<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/sql_log<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/sradutmp<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/unix<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/modules/acct_unique<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/eap.conf<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/sql.conf<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/policy.conf<br>
Wed Apr 15 13:43:43 2009 : Debug: including files in directory /usr/local/etc/raddb/sites-enabled/<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/default<br>Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel<br>
Wed Apr 15 13:43:43 2009 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/control-socket<br>Wed Apr 15 13:43:43 2009 : Debug: group = freeradius<br>Wed Apr 15 13:43:43 2009 : Debug: user = freeradius<br>
Wed Apr 15 13:43:43 2009 : Debug: including dictionary file /usr/local/etc/raddb/dictionary<br>Wed Apr 15 13:43:43 2009 : Debug: main {<br>Wed Apr 15 13:43:43 2009 : Debug:       prefix = &quot;/usr/local&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       localstatedir = &quot;/var&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       logdir = &quot;/var/log&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       libdir = &quot;/usr/local/lib/freeradius-2.1.4&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       radacctdir = &quot;/var/log/radacct&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       hostname_lookups = no<br>Wed Apr 15 13:43:43 2009 : Debug:       max_request_time = 30<br>Wed Apr 15 13:43:43 2009 : Debug:       cleanup_delay = 5<br>Wed Apr 15 13:43:43 2009 : Debug:       max_requests = 1024<br>
Wed Apr 15 13:43:43 2009 : Debug:       allow_core_dumps = no<br>Wed Apr 15 13:43:43 2009 : Debug:       pidfile = &quot;/var/run/radiusd/radiusd.pid&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       checkrad = &quot;/usr/local/sbin/checkrad&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       debug_level = 0<br>Wed Apr 15 13:43:43 2009 : Debug:       proxy_requests = yes<br>Wed Apr 15 13:43:43 2009 : Debug:  log {<br>Wed Apr 15 13:43:43 2009 : Debug:       stripped_names = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       auth = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       auth_badpass = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       auth_goodpass = yes<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug:  security {<br>
Wed Apr 15 13:43:43 2009 : Debug:       max_attributes = 200<br>Wed Apr 15 13:43:43 2009 : Debug:       reject_delay = 0<br>Wed Apr 15 13:43:43 2009 : Debug:       status_server = yes<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>
Wed Apr 15 13:43:43 2009 : Debug: }<br>Wed Apr 15 13:43:43 2009 : Debug: radiusd: #### Loading Realms and Home Servers ####<br>Wed Apr 15 13:43:43 2009 : Debug:  proxy server {<br>Wed Apr 15 13:43:43 2009 : Debug:       retry_delay = 5<br>
Wed Apr 15 13:43:43 2009 : Debug:       retry_count = 3<br>Wed Apr 15 13:43:43 2009 : Debug:       default_fallback = no<br>Wed Apr 15 13:43:43 2009 : Debug:       dead_time = 120<br>Wed Apr 15 13:43:43 2009 : Debug:       wake_all_if_all_dead = no<br>
Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug:  home_server localhost {<br>Wed Apr 15 13:43:43 2009 : Debug:       ipaddr = 127.0.0.1<br>Wed Apr 15 13:43:43 2009 : Debug:       port = 1812<br>Wed Apr 15 13:43:43 2009 : Debug:       type = &quot;auth&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       secret = &quot;testing123&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       response_window = 20<br>Wed Apr 15 13:43:43 2009 : Debug:       max_outstanding = 65536<br>Wed Apr 15 13:43:43 2009 : Debug:       require_message_authenticator = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       zombie_period = 40<br>Wed Apr 15 13:43:43 2009 : Debug:       status_check = &quot;status-server&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       ping_interval = 30<br>Wed Apr 15 13:43:43 2009 : Debug:       check_interval = 30<br>
Wed Apr 15 13:43:43 2009 : Debug:       num_answers_to_alive = 3<br>Wed Apr 15 13:43:43 2009 : Debug:       num_pings_to_alive = 3<br>Wed Apr 15 13:43:43 2009 : Debug:       revive_interval = 120<br>Wed Apr 15 13:43:43 2009 : Debug:       status_check_timeout = 4<br>
Wed Apr 15 13:43:43 2009 : Debug:       irt = 2<br>Wed Apr 15 13:43:43 2009 : Debug:       mrt = 16<br>Wed Apr 15 13:43:43 2009 : Debug:       mrc = 5<br>Wed Apr 15 13:43:43 2009 : Debug:       mrd = 30<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>
Wed Apr 15 13:43:43 2009 : Debug:  home_server_pool my_auth_failover {<br>Wed Apr 15 13:43:43 2009 : Debug:       type = fail-over<br>Wed Apr 15 13:43:43 2009 : Debug:       home_server = localhost<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>
Wed Apr 15 13:43:43 2009 : Debug:  realm <a href="http://example.com">example.com</a> {<br>Wed Apr 15 13:43:43 2009 : Debug:       auth_pool = my_auth_failover<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug:  realm LOCAL {<br>
Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug: radiusd: #### Loading Clients ####<br>Wed Apr 15 13:43:43 2009 : Debug:  client localhost {<br>Wed Apr 15 13:43:43 2009 : Debug:       ipaddr = 127.0.0.1<br>
Wed Apr 15 13:43:43 2009 : Debug:       require_message_authenticator = no<br>Wed Apr 15 13:43:43 2009 : Debug:       secret = &quot;testing123&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       nastype = &quot;other&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug: radiusd: #### Instantiating modules ####<br>Wed Apr 15 13:43:43 2009 : Debug:  instantiate {<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_exec, checking if it&#39;s valid)<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_exec<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating exec<br>Wed Apr 15 13:43:43 2009 : Debug:   exec {<br>Wed Apr 15 13:43:43 2009 : Debug:       wait = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       input_pairs = &quot;request&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       shell_escape = yes<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_expr, checking if it&#39;s valid)<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_expr<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating expr<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_expiration, checking if it&#39;s valid)<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_expiration<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating expiration<br>Wed Apr 15 13:43:43 2009 : Debug:   expiration {<br>Wed Apr 15 13:43:43 2009 : Debug:       reply-message = &quot;Password Has Expired  &quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_logintime, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_logintime<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating logintime<br>
Wed Apr 15 13:43:43 2009 : Debug:   logintime {<br>Wed Apr 15 13:43:43 2009 : Debug:       reply-message = &quot;You are calling outside your allowed timespan  &quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       minimum-timeout = 60<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug: radiusd: #### Loading Virtual Servers ####<br>Wed Apr 15 13:43:43 2009 : Debug: server inner-tunnel {<br>Wed Apr 15 13:43:43 2009 : Debug:  modules {<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking authenticate {...} for more modules to load<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_pap, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_pap<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating pap<br>Wed Apr 15 13:43:43 2009 : Debug:   pap {<br>Wed Apr 15 13:43:43 2009 : Debug:       encryption_scheme = &quot;auto&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       auto_header = yes<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_chap, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_chap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating chap<br>
Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_mschap, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_mschap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating mschap<br>
Wed Apr 15 13:43:43 2009 : Debug:   mschap {<br>Wed Apr 15 13:43:43 2009 : Debug:       use_mppe = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       require_encryption = no<br>Wed Apr 15 13:43:43 2009 : Debug:       require_strong = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       with_ntdomain_hack = no<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_unix, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_unix<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating unix<br>Wed Apr 15 13:43:43 2009 : Debug:   unix {<br>Wed Apr 15 13:43:43 2009 : Debug:       radwtmp = &quot;/var/log/radwtmp&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>
Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_eap, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_eap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap<br>
Wed Apr 15 13:43:43 2009 : Debug:   eap {<br>Wed Apr 15 13:43:43 2009 : Debug:       default_eap_type = &quot;md5&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       timer_expire = 60<br>Wed Apr 15 13:43:43 2009 : Debug:       ignore_unknown_eap_types = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       cisco_accounting_username_bug = no<br>Wed Apr 15 13:43:43 2009 : Debug:       max_sessions = 2048<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_md5<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-md5<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_leap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-leap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_gtc<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-gtc<br>Wed Apr 15 13:43:43 2009 : Debug:    gtc {<br>Wed Apr 15 13:43:43 2009 : Debug:       challenge = &quot;Password: &quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       auth_type = &quot;PAP&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:    }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_tls<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-tls<br>Wed Apr 15 13:43:43 2009 : Debug:    tls {<br>
Wed Apr 15 13:43:43 2009 : Debug:       rsa_key_exchange = no<br>Wed Apr 15 13:43:43 2009 : Debug:       dh_key_exchange = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       rsa_key_length = 512<br>Wed Apr 15 13:43:43 2009 : Debug:       dh_key_length = 512<br>
Wed Apr 15 13:43:43 2009 : Debug:       verify_depth = 0<br>Wed Apr 15 13:43:43 2009 : Debug:       pem_file_type = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       private_key_file = &quot;/usr/local/etc/raddb/certs/server.pem&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       certificate_file = &quot;/usr/local/etc/raddb/certs/server.pem&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       CA_file = &quot;/usr/local/etc/raddb/certs/ca.pem&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       private_key_password = &quot;whatever&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       dh_file = &quot;/usr/local/etc/raddb/certs/dh&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       random_file = &quot;/usr/local/etc/raddb/certs/random&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       fragment_size = 1024<br>
Wed Apr 15 13:43:43 2009 : Debug:       include_length = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       check_crl = no<br>Wed Apr 15 13:43:43 2009 : Debug:       cipher_list = &quot;DEFAULT&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       make_cert_command = &quot;/usr/local/etc/raddb/certs/bootstrap&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:     cache {<br>Wed Apr 15 13:43:43 2009 : Debug:       enable = no<br>Wed Apr 15 13:43:43 2009 : Debug:       lifetime = 24<br>Wed Apr 15 13:43:43 2009 : Debug:       max_entries = 255<br>
Wed Apr 15 13:43:43 2009 : Debug:     }<br>Wed Apr 15 13:43:43 2009 : Debug:    }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_ttls<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-ttls<br>
Wed Apr 15 13:43:43 2009 : Debug:    ttls {<br>Wed Apr 15 13:43:43 2009 : Debug:       default_eap_type = &quot;md5&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       copy_request_to_tunnel = no<br>Wed Apr 15 13:43:43 2009 : Debug:       use_tunneled_reply = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       virtual_server = &quot;inner-tunnel&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:    }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_peap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-peap<br>
Wed Apr 15 13:43:43 2009 : Debug:    peap {<br>Wed Apr 15 13:43:43 2009 : Debug:       default_eap_type = &quot;mschapv2&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       copy_request_to_tunnel = no<br>Wed Apr 15 13:43:43 2009 : Debug:       use_tunneled_reply = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       proxy_tunneled_request_as_eap = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       virtual_server = &quot;inner-tunnel&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:    }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to sub-module rlm_eap_mschapv2<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating eap-mschapv2<br>Wed Apr 15 13:43:43 2009 : Debug:    mschapv2 {<br>Wed Apr 15 13:43:43 2009 : Debug:       with_ntdomain_hack = no<br>Wed Apr 15 13:43:43 2009 : Debug:    }<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking authorize {...} for more modules to load<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_realm, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_realm<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating suffix<br>Wed Apr 15 13:43:43 2009 : Debug:   realm suffix {<br>Wed Apr 15 13:43:43 2009 : Debug:       format = &quot;suffix&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       delimiter = &quot;@&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       ignore_default = no<br>Wed Apr 15 13:43:43 2009 : Debug:       ignore_null = no<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_files, checking if it&#39;s valid)<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_files<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating files<br>Wed Apr 15 13:43:43 2009 : Debug:   files {<br>Wed Apr 15 13:43:43 2009 : Debug:       usersfile = &quot;/usr/local/etc/raddb/users&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       acctusersfile = &quot;/usr/local/etc/raddb/acct_users&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       preproxy_usersfile = &quot;/usr/local/etc/raddb/preproxy_users&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       compat = &quot;no&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking session {...} for more modules to load<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_radutmp, checking if it&#39;s valid)<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_radutmp<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating radutmp<br>Wed Apr 15 13:43:43 2009 : Debug:   radutmp {<br>Wed Apr 15 13:43:43 2009 : Debug:       filename = &quot;/var/log/radutmp&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       username = &quot;%{User-Name}&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       case_sensitive = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       check_with_nas = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       perm = 384<br>
Wed Apr 15 13:43:43 2009 : Debug:       callerid = yes<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking post-proxy {...} for more modules to load<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking post-auth {...} for more modules to load<br>
Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_attr_filter, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_attr_filter<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating attr_filter.access_reject<br>
Wed Apr 15 13:43:43 2009 : Debug:   attr_filter attr_filter.access_reject {<br>Wed Apr 15 13:43:43 2009 : Debug:       attrsfile = &quot;/usr/local/etc/raddb/attrs.access_reject&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       key = &quot;%{User-Name}&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug: }<br>Wed Apr 15 13:43:43 2009 : Debug:  modules {<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking authenticate {...} for more modules to load<br>
Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_ldap, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_ldap<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating ldap<br>
Wed Apr 15 13:43:43 2009 : Debug:   ldap {<br>Wed Apr 15 13:43:43 2009 : Debug:       server = &quot;web3&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       port = 389<br>Wed Apr 15 13:43:43 2009 : Debug:       password = &quot;test&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       identity = &quot;cn=test,dc=gwis&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       net_timeout = 1<br>Wed Apr 15 13:43:43 2009 : Debug:       timeout = 4<br>Wed Apr 15 13:43:43 2009 : Debug:       timelimit = 3<br>
Wed Apr 15 13:43:43 2009 : Debug:       tls_mode = no<br>Wed Apr 15 13:43:43 2009 : Debug:       start_tls = no<br>Wed Apr 15 13:43:43 2009 : Debug:       tls_require_cert = &quot;allow&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:    tls {<br>
Wed Apr 15 13:43:43 2009 : Debug:       start_tls = no<br>Wed Apr 15 13:43:43 2009 : Debug:       require_cert = &quot;allow&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:    }<br>Wed Apr 15 13:43:43 2009 : Debug:       basedn = &quot;dc=gwis&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       filter = &quot;(&amp;(%{Ldap-User}=%{Stripped-User-Name:-%{User-Name}})(aaaenable=1))&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       base_filter = &quot;(objectclass=radiusprofile)&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       password_attribute = &quot;%{Ldap-Pass}&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       auto_header = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       access_attr_used_for_allow = yes<br>
Wed Apr 15 13:43:43 2009 : Debug:       groupname_attribute = &quot;cn&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       groupmembership_filter = &quot;(|(&amp;(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&amp;(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       dictionary_mapping = &quot;/usr/local/etc/raddb/ldap.attrmap&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       ldap_debug = 0<br>Wed Apr 15 13:43:43 2009 : Debug:       ldap_connections_number = 5<br>
Wed Apr 15 13:43:43 2009 : Debug:       compare_check_items = no<br>Wed Apr 15 13:43:43 2009 : Debug:       do_xlat = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       set_auth_type = yes<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_ldap: Registering ldap_groupcmp for Ldap-Group<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_ldap: Registering ldap_xlat with xlat_name ldap<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_ldap: reading ldap&lt;-&gt;radius mappings from file /usr/local/etc/raddb/ldap.attrmap<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_ldap: LDAP aaasimultaneoususe mapped to RADIUS Simultaneous-Use<br>Wed Apr 15 13:43:43 2009 : Debug: conns: 0x2842bf60<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking authorize {...} for more modules to load<br>
Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_preprocess, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_preprocess<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating preprocess<br>
Wed Apr 15 13:43:43 2009 : Debug:   preprocess {<br>Wed Apr 15 13:43:43 2009 : Debug:       huntgroups = &quot;/usr/local/etc/raddb/huntgroups&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       hints = &quot;/usr/local/etc/raddb/hints&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       with_ascend_hack = no<br>Wed Apr 15 13:43:43 2009 : Debug:       ascend_channels_per_line = 23<br>Wed Apr 15 13:43:43 2009 : Debug:       with_ntdomain_hack = no<br>Wed Apr 15 13:43:43 2009 : Debug:       with_specialix_jetstream_hack = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       with_cisco_vsa_hack = no<br>Wed Apr 15 13:43:43 2009 : Debug:       with_alvarion_vsa_hack = no<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking preacct {...} for more modules to load<br>
Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_acct_unique, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_acct_unique<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating acct_unique<br>
Wed Apr 15 13:43:43 2009 : Debug:   acct_unique {<br>Wed Apr 15 13:43:43 2009 : Debug:       key = &quot;User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:   }<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking accounting {...} for more modules to load<br>Wed Apr 15 13:43:43 2009 : Debug:     (Loaded rlm_sql, checking if it&#39;s valid)<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Linked to module rlm_sql<br>
Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating sql<br>Wed Apr 15 13:43:43 2009 : Debug:   sql {<br>Wed Apr 15 13:43:43 2009 : Debug:       driver = &quot;rlm_sql_mysql&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       server = &quot;localhost&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       port = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       login = &quot;test&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       password = &quot;test&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       radius_db = &quot;test&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       read_groups = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       sqltrace = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       sqltracefile = &quot;/var/log/sqltrace.sql&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       readclients = no<br>
Wed Apr 15 13:43:43 2009 : Debug:       deletestalesessions = yes<br>Wed Apr 15 13:43:43 2009 : Debug:       num_sql_socks = 5<br>Wed Apr 15 13:43:43 2009 : Debug:       lifetime = 0<br>Wed Apr 15 13:43:43 2009 : Debug:       max_queries = 0<br>
Wed Apr 15 13:43:43 2009 : Debug:       sql_user_name = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       default_user_profile = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       nas_query = &quot;SELECT id,nasname,shortname,type,secret FROM nas&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       authorize_check_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       authorize_group_check_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       authorize_group_reply_query = &quot;&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       accounting_onoff_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       accounting_update_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       accounting_update_query_alt = &quot;&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       accounting_start_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       accounting_start_query_alt = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       accounting_stop_query = &quot;&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       accounting_stop_query_alt = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       connect_failure_retry_delay = 60<br>Wed Apr 15 13:43:43 2009 : Debug:       simul_count_query = &quot;&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       simul_verify_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       postauth_query = &quot;&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       safe-characters = &quot;@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked<br>Wed Apr 15 13:43:43 2009 : Info: rlm_sql (sql): Attempting to connect to test@localhost:/visp<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): starting 0<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0<br>Wed Apr 15 13:43:43 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Connected new DB handle, #0<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): starting 1<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1<br>
Wed Apr 15 13:43:43 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Connected new DB handle, #1<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): starting 2<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2<br>Wed Apr 15 13:43:43 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Connected new DB handle, #2<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): starting 3<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3<br>Wed Apr 15 13:43:43 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3<br>
Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Connected new DB handle, #3<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): starting 4<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4<br>
Wed Apr 15 13:43:43 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4<br>Wed Apr 15 13:43:43 2009 : Debug: rlm_sql (sql): Connected new DB handle, #4<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Instantiating attr_filter.accounting_response<br>
Wed Apr 15 13:43:43 2009 : Debug:   attr_filter attr_filter.accounting_response {<br>Wed Apr 15 13:43:43 2009 : Debug:       attrsfile = &quot;/usr/local/etc/raddb/attrs.accounting_response&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:       key = &quot;%{User-Name}&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:   }<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking session {...} for more modules to load<br>Wed Apr 15 13:43:43 2009 : Debug:  Module: Checking post-auth {...} for more modules to load<br>
Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug: radiusd: #### Opening IP addresses and Ports ####<br>Wed Apr 15 13:43:43 2009 : Debug: listen {<br>Wed Apr 15 13:43:43 2009 : Debug:       type = &quot;auth&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       ipaddr = *<br>Wed Apr 15 13:43:43 2009 : Debug:       port = 1645<br>Wed Apr 15 13:43:43 2009 : Debug: }<br>Wed Apr 15 13:43:43 2009 : Debug: listen {<br>Wed Apr 15 13:43:43 2009 : Debug:       type = &quot;acct&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:       ipaddr = *<br>Wed Apr 15 13:43:43 2009 : Debug:       port = 1646<br>Wed Apr 15 13:43:43 2009 : Debug: }<br>Wed Apr 15 13:43:43 2009 : Debug: listen {<br>Wed Apr 15 13:43:43 2009 : Debug:       type = &quot;control&quot;<br>
Wed Apr 15 13:43:43 2009 : Debug:  listen {<br>Wed Apr 15 13:43:43 2009 : Debug:       socket = &quot;/var/run/radiusd/radiusd.sock&quot;<br>Wed Apr 15 13:43:43 2009 : Debug:  }<br>Wed Apr 15 13:43:43 2009 : Debug: }<br>Wed Apr 15 13:43:43 2009 : Debug: Listening on authentication address * port 1645<br>
Wed Apr 15 13:43:43 2009 : Debug: Listening on accounting address * port 1646<br>Wed Apr 15 13:43:43 2009 : Debug: Listening on command file /var/run/radiusd/radiusd.sock<br>Wed Apr 15 13:43:43 2009 : Debug: Listening on proxy address * port 1647<br>
Wed Apr 15 13:43:43 2009 : Debug: Ready to process requests.<br>rad_recv: Access-Request packet from host 127.0.0.1 port 62589, id=219, length=85<br>       User-Name = &quot;00:1f:3a:21:62:f8&quot;<br>       User-Password = &quot;00:1f:3a:21:62:f8&quot;<br>
       NAS-IP-Address = 10.10.10.76<br>       NAS-Port = 1414<br>Wed Apr 15 13:43:45 2009 : Info: +- entering group authorize {...}<br>Wed Apr 15 13:43:45 2009 : Info: [preprocess]   expand: %{User-Name} -&gt; 00:1f:3a:21:62:f8<br>
Wed Apr 15 13:43:45 2009 : Info: [preprocess]   hints: Matched DEFAULT at 37<br>Wed Apr 15 13:43:45 2009 : Info: ++[preprocess] returns ok<br>Wed Apr 15 13:43:45 2009 : Info: [ldap] performing user authorization for 00:1f:3a:21:62:f8<br>
Wed Apr 15 13:43:45 2009 : Info: [ldap] WARNING: Deprecated conditional expansion &quot;:-&quot;.  See &quot;man unlang&quot; for details<br>Wed Apr 15 13:43:45 2009 : Info: [ldap]         expand: (&amp;(%{Ldap-User}=%{Stripped-User-Name:-%{User-Name}})(aaaenable=1)) -&gt; (&amp;(macaddress=00:1f:3a:21:62:f8)(aaaenable=1))<br>
Wed Apr 15 13:43:45 2009 : Info: [ldap]         expand: dc=gwis -&gt; dc=gwis<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: ldap_get_conn: Checking Id: 0<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0<br>
Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: attempting LDAP reconnection<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: (re)connect to web3:389, authentication 0<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: bind as cn=test,dc=gwis/test to web3:389<br>
Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: waiting for bind result ...<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: Bind was successful<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: performing search in dc=gwis, with filter (&amp;(macaddress=00:1f:3a:21:62:f8)(aaaenable=1))<br>
Wed Apr 15 13:43:45 2009 : Info: [ldap] looking for check items in directory...<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: aaasimultaneoususe -&gt; Simultaneous-Use == 1<br>Wed Apr 15 13:43:45 2009 : Info: [ldap] looking for reply items in directory...<br>
Wed Apr 15 13:43:45 2009 : Debug: WARNING: No &quot;known good&quot; password was found in LDAP.  Are you sure that the user is configured correctly?<br>Wed Apr 15 13:43:45 2009 : Info: [ldap] Setting Auth-Type = LDAP<br>
Wed Apr 15 13:43:45 2009 : Info: [ldap] user 00:1f:3a:21:62:f8 authorized to use remote access<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0<br>Wed Apr 15 13:43:45 2009 : Info: ++[ldap] returns ok<br>
Wed Apr 15 13:43:45 2009 : Info: [pap] WARNING! No &quot;known good&quot; password found for the user.  Authentication may fail because of this.<br>Wed Apr 15 13:43:45 2009 : Info: ++[pap] returns noop<br>Wed Apr 15 13:43:45 2009 : Info: Found Auth-Type = LDAP<br>
Wed Apr 15 13:43:45 2009 : Info: +- entering group LDAP {...}<br>Wed Apr 15 13:43:45 2009 : Info: [ldap] login attempt by &quot;00:1f:3a:21:62:f8&quot; with password &quot;00:1f:3a:21:62:f8&quot;<br>Wed Apr 15 13:43:45 2009 : Info: [ldap] user DN: cn=<a href="mailto:testing1@nsab.us">testing1@nsab.us</a>,dc=gwis<br>
Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: (re)connect to web3:389, authentication 1<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: bind as cn=<a href="mailto:testing1@nsab.us">testing1@nsab.us</a>,dc=gwis/00:1f:3a:21:62:f8 to web3:389<br>
Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: waiting for bind result ...<br>Wed Apr 15 13:43:45 2009 : Debug: rlm_ldap: Bind failed with invalid credentials<br>Wed Apr 15 13:43:45 2009 : Info: ++[ldap] returns reject<br>Wed Apr 15 13:43:45 2009 : Info: Failed to authenticate the user.<br>
Wed Apr 15 13:43:45 2009 : Auth: Login incorrect (rlm_ldap: Bind as user failed): [00:1f:3a:21:62:f8/00:1f:3a:21:62:f8] (from client localhost port 1414)<br>Wed Apr 15 13:43:45 2009 : Info: Using Post-Auth-Type Reject<br>
Wed Apr 15 13:43:45 2009 : Info: +- entering group REJECT {...}<br>Wed Apr 15 13:43:45 2009 : Info: [attr_filter.access_reject]    expand: %{User-Name} -&gt; 00:1f:3a:21:62:f8<br>Wed Apr 15 13:43:45 2009 : Debug:  attr_filter: Matched entry DEFAULT at line 11<br>
Wed Apr 15 13:43:45 2009 : Info: ++[attr_filter.access_reject] returns updated<br>Sending Access-Reject of id 219 to 127.0.0.1 port 62589<br>Wed Apr 15 13:43:45 2009 : Info: Finished request 0.<br>Wed Apr 15 13:43:45 2009 : Debug: Going to the next request<br>
Wed Apr 15 13:43:45 2009 : Debug: Waking up in 4.9 seconds.<br><br><br><br><br>LDAP auth of mac addresses works if I set password_attribute = &quot;macaddress&quot;, but not all requests will contain a mac address for a user which is why I need to make it dynamic.<br>
<br>
<br><br><br><br><div class="gmail_quote">On Wed, Apr 15, 2009 at 11:26 AM, Alan DeKok <span dir="ltr">&lt;<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">

<div>James Devine wrote:<br>
&gt; That didn&#39;t seem to work.  What I am trying to do is authenticate an<br>
&gt; access request in which I am given a mac address for both the username<br>
&gt; and password, so I was going to try to use the mac address attribute for<br>
&gt; both.  The authorization matches my filter, but authentication fails<br>
&gt; even with auto_header turned on, although authentication succeeds with<br>
&gt; correct userPassword credentials.<br>
<br>
</div>  Would it be possible for you to show the debugging log as suggested in<br>
the README, FAQ, INSTALL, &quot;man&quot; page, and daily on this list?<br>
<br>
  You have repeatedly discussed a *solution*.  We don&#39;t even know what<br>
the *problem* is yet.<br>
<font color="#888888"><br>
  Alan DeKok.<br>
</font><div><div></div><div>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>