Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=196, length=285 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x0201000801686d36 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xc56b144a4d423f22243806045d10c4a9 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 1 length 8 Wed Oct 14 10:38:17 2015 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = updated Wed Oct 14 10:38:17 2015 : Debug: ++[unix] = notfound Wed Oct 14 10:38:17 2015 : Debug: [files] users: Matched entry DEFAULT at line 92 Wed Oct 14 10:38:17 2015 : Debug: ++[files] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++[expiration] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[logintime] = noop Wed Oct 14 10:38:17 2015 : Debug: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Wed Oct 14 10:38:17 2015 : Debug: ++[pap] = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = updated Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP Identity Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type tls Wed Oct 14 10:38:17 2015 : Debug: [tls] Requiring client certificate Wed Oct 14 10:38:17 2015 : Debug: [tls] Initiate Wed Oct 14 10:38:17 2015 : Debug: [tls] Start returned 1 Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=196, length=0 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010200060d20 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd2bd5fe7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668982. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=197, length=301 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020200060319 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd2bd5fe7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xc91a03f12cddc0dff1efa1da4f2cad06 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 2 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = updated Wed Oct 14 10:38:17 2015 : Debug: ++[unix] = notfound Wed Oct 14 10:38:17 2015 : Debug: [files] users: Matched entry DEFAULT at line 92 Wed Oct 14 10:38:17 2015 : Debug: ++[files] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++[expiration] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[logintime] = noop Wed Oct 14 10:38:17 2015 : Debug: [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. Wed Oct 14 10:38:17 2015 : Debug: ++[pap] = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = updated Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP NAK Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP-NAK asked for EAP-Type/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type tls Wed Oct 14 10:38:17 2015 : Debug: [tls] Initiate Wed Oct 14 10:38:17 2015 : Debug: [tls] Start returned 1 Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=197, length=0 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010300061920 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd3bc4be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668983. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=200, length=463 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020300a819800000009e160301009901000095030399003f89ceb614e8779deaf18bf16ef575108a8f296a3b6987f73e7ef5a00c2800003cc02cc030009fc02bc02f009ec00ac024c014c0280039006bc009c023c013c02700330067c007c011009d009c0035003d002f003c00050004000a00ff0100003000170000000d001600140601060305010503040104030301030302010203000b00020100000a00080006001700180019 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd3bc4be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x6b636a15a47267852eb5f1e66555b77d Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 3 length 168 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Length Included Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 11 Wed Oct 14 10:38:17 2015 : Debug: [peap] (other): before/accept initialization Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: before/accept initialization Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 read client hello A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 write server hello A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 write certificate A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 write key exchange A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 write server done A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 flush data Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 13 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_HANDLED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=200, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x303030305a170d3137303832343233353935395a3081c0310b3009060355040613025553311330110603550411130a37373235312d31383932310e300c0603550408130554657861733110300e06035504071307486f7573746f6e311430120603550409130b504f20426f782031383932310f300d060355040913064d532031313931183016060355040a130f5269636520556e6976657273697479311f301d060355040b1316496e666f726d6174696f6e20546563686e6f6c6f6779311830160603550403130f7261646975732e726963652e65647530820122300d06092a864886f70d01010105000382010f003082010a0282010100c0abafe128 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x6bc30df0a3c2d2819ae89a3c0e4784956c31ce16f7845b0f72b8dd7dcc63e31b61b3943179e74feeb4f674712104b873e21b03c024c1a92c322bc112e76ce4bf126a944f32fe70e72128cbe6688c2bd64e4b97107410d77d80bf40904621d19b5977aa0a2c6ff5097aa84c4d3863032007db7ba738833594f29547be596c8989f26824bc26024146e1b678d28fb18f3d7da5a8217529d9dcc51d67d2b6b79e89363050ed5e11f5ad64167d11ae80a9c8b0bb2bcf54974c2c4ddefe3bddafeee7b0848580c750c964b05bb9700044ebc77944bfafaed6270fcba7e5fa8821b15bc62e0137f8f40f6f5caf9c1c39912617acb6ae037ef812442e4ccd0203 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x32a030a02e862c687474703a Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd0bb4be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668986. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=203, length=301 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020400061900 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd0bb4be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x11ee91de7b8e767c047be5d57bc04e2d Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 4 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Received TLS ACK Wed Oct 14 10:38:17 2015 : Debug: [peap] ACK handshake fragment handler Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 1 Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 13 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_HANDLED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=203, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010503fc19402f2f63726c2e696e636f6d6d6f6e2e6f72672f496e436f6d6d6f6e53657276657243412e63726c306f06082b0601050507010104633061303906082b06010505073002862d687474703a2f2f636572742e696e636f6d6d6f6e2e6f72672f496e436f6d6d6f6e53657276657243412e637274302406082b060105050730018618687474703a2f2f6f6373702e696e636f6d6d6f6e2e6f72673081ac0603551d110481a43081a1820f7261646975732e726963652e65647582186e65777261646975732d612e6e65742e726963652e65647582186e65777261646975732d622e6e65742e726963652e65647582157261646975732d612e6e Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x65742e726963652e65647582157261646975732d622e6e65742e726963652e65647582157261646975732d632e6e65742e726963652e65647582157261646975732d642e6e65742e726963652e656475300d06092a864886f70d0101050500038201010024b8ca39f8c5c7f30b29b43b46d5a205a13cff521c12aa709dba4a38b2db77d20a727adcf7a1f9fbb14ba8ef4b42ff5a17d4a50afa0539284f32566b1aa6c4ce179ccaeb57849e15465a592e9a6687ea84ba8cfece9d5480911b6b1bf0e539707e8e47951fbb90dbcdce93548fa1a8a2e36444b878c84fbe52740039e794686cd81d29ac09fcb9fc397d5b5c47b4904dd54640d8709c42a9dd Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x051695e9dfc9123a2f34881eb6888ff944bb0711cff3ea080287dbdd52811c91ea341f310e1ff2bd196b946d47264ec297d29eb65dba202b4309df303a2b8b80393aea3e914d7adfc9ad596a26d3866f221ef17e0db57a0573481457393ecd678788ce4afa12360004c7308204c3308203aba00302010202107f71c1d3a226b0d2b113f3e68167643e300d06092a864886f70d0101050500306f310b300906035504061302534531143012060355040a130b416464547275737420414231263024060355040b131d41646454727573742045787465726e616c20545450204e6574776f726b312230200603550403131941646454727573742045787465 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x726e616c20434120526f6f74301e170d3130313230373030303030305a170d3230303533303130343833385a3051310b300906035504061302555331123010060355040a1309496e7465726e6574323111300f060355040b1308496e436f6d6d6f6e311b301906035504031312496e436f6d6d6f6e2053657276657220434130820122300d06092a864886f70d01010105000382010f003082010a0282010100977cc7c8feb3e9206aa3a44f8e8e345606b37a6caa109b48612b369069e3340a47a7bb7bdeaa6afbeb82958fca1d7faf75a6a84cda2067611a0d86c1cac187afac4ee4de621b2f9db198afc601fb1770dbac1459ec6f3f337fa6980be4 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0xe238aff57f856d0e Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd1ba4be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668989. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=204, length=301 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020500061900 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd1ba4be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xb89ed1560360ceca46a5f123d4a29060 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 5 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Received TLS ACK Wed Oct 14 10:38:17 2015 : Debug: [peap] ACK handshake fragment handler Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 1 Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 13 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_HANDLED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=204, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x0253453114301206 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd6b94be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668990. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=205, length=301 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020600061900 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd6b94be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x0a6f66bdee6d622f214ead9c712c5483 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 6 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Received TLS ACK Wed Oct 14 10:38:17 2015 : Debug: [peap] ACK handshake fragment handler Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 1 Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 13 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_HANDLED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=205, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010703fc19400355040a130b416464547275737420414231263024060355040b131d41646454727573742045787465726e616c20545450204e6574776f726b312230200603550403131941646454727573742045787465726e616c20434120526f6f7430820122300d06092a864886f70d01010105000382010f003082010a0282010100b7f71a33e6f200042d39e04e5bed1fbc6c0fcdb5fa23b6cede9b113397a4294c7d939fbd4abc93ed031ae38fcfe56d505ad69729945a80b0497adb2e95fdb8cabf37382d1e3e9141ad7056c7f04f3fe8329e74cac89054e9c65f0f789d9a403c0eac61aa5e148f9e87a16a50dcd79a4eaf05b3a671949c71b3 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x0c7d10e0f13cd6eb Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd7b84be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668991. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=206, length=301 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020700061900 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd7b84be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xda646618af8946d718d40f1e65fc1c51 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 7 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Received TLS ACK Wed Oct 14 10:38:17 2015 : Debug: [peap] ACK handshake fragment handler Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 1 Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 13 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_HANDLED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=206, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0xe33e8fa52f7f0487095e0c9e7a8f72d25ae16df5a123349372db07aa3603f96aa8dd384d957bf99d28dc0b9de4ffd0f478faf8b89d1036c567a02d8562c1572ee7bbe117b7ebab5d7ba0a19294b83c3b85d684444410def483b6975ca3d3e5f9284961273ec26c6dd14462b2df7d787e413ccfd2abce7db78e67eac485a8c8b09faed036b20edcebe1179c15dd1622c00cb437ee43ba6d5aa911ff45625bb9c016030300040e000000 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd4b74be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8668992. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=225, length=625 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 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 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0xaebd84f2a507f3180f2a4f8a5e503fde2b95363debbb13b3140303000101160303002800000000000000003fa33a59a6eb8c323400781c7619aec325bc5284fb946ff309eeea8689967ca2 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd4b74be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xbdf4a4494cf41792229408a2738ddad6 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 8 length 253 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Length Included Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 11 Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 read client key exchange A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 read finished A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 write change cipher spec A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 write finished A Wed Oct 14 10:38:17 2015 : Debug: [peap] TLS_accept: SSLv3 flush data Wed Oct 14 10:38:17 2015 : Debug: [peap] (other): SSL negotiation finished successfully Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 13 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_HANDLED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=225, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x0109003919001403030001011603030028c0e818d89141685c9605de6806d749144022f7d80084d23e34d8159b1e814c240667437ed2e3fbe6 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd5b64be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8669026. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=228, length=301 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020900061900 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd5b64be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xa9934d96f5b57462bb0b1574354a3b7e Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 9 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] Received TLS ACK Wed Oct 14 10:38:17 2015 : Debug: [peap] ACK handshake is finished Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 3 Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 3 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_SUCCESS Wed Oct 14 10:38:17 2015 : Debug: [peap] Session established. Decoding tunneled attributes. Wed Oct 14 10:38:17 2015 : Debug: [peap] Peap state TUNNEL ESTABLISHED Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=228, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010a00281900170303001dc0e818d89141685d75d7043b62873453b0c5841147101884fb408bee25 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbdab54be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8669030. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=229, length=334 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020a00271900170303001c00000000000000012c03ad1a53ceeacb87e4e9937cd769fc8dc8284a Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbdab54be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x43702d53a1130c3122b86e3d13da6954 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 10 length 39 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] Done initial handshake Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_OK Wed Oct 14 10:38:17 2015 : Debug: [peap] Session established. Decoding tunneled attributes. Wed Oct 14 10:38:17 2015 : Debug: [peap] Peap state WAITING FOR INNER IDENTITY Wed Oct 14 10:38:17 2015 : Debug: [peap] Identity - hm6 Wed Oct 14 10:38:17 2015 : Debug: [peap] Got inner identity 'hm6' Wed Oct 14 10:38:17 2015 : Debug: [peap] Setting default EAP type for tunneled EAP session. Wed Oct 14 10:38:17 2015 : Debug: [peap] Setting User-Name to hm6 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[unix] = notfound Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++update control { Wed Oct 14 10:38:17 2015 : Debug: ++} # update control = noop Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 10 length 8 Wed Oct 14 10:38:17 2015 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = updated Wed Oct 14 10:38:17 2015 : Debug: [files] users: Matched entry DEFAULT at line 92 Wed Oct 14 10:38:17 2015 : Debug: ++[files] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++load-balance redundant_ldap { Wed Oct 14 10:38:17 2015 : Debug: ++redundant-load-balance group redundant_ldap { Wed Oct 14 10:38:17 2015 : Debug: [ldap2] performing user authorization for hm6 Wed Oct 14 10:38:17 2015 : Debug: [ldap2] expand: %{Stripped-User-Name} -> hm6 Wed Oct 14 10:38:17 2015 : Debug: [ldap2] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=hm6) Wed Oct 14 10:38:17 2015 : Debug: [ldap2] expand: dc=rice,dc=edu -> dc=rice,dc=edu Wed Oct 14 10:38:17 2015 : Debug: [ldap2] checking if remote access for hm6 is allowed by riceClass Wed Oct 14 10:38:17 2015 : Debug: [ldap2] looking for check items in directory... Wed Oct 14 10:38:17 2015 : Debug: [ldap2] looking for reply items in directory... Wed Oct 14 10:38:17 2015 : Debug: [ldap2] user hm6 authorized to use remote access Wed Oct 14 10:38:17 2015 : Debug: +++[ldap2] = ok Wed Oct 14 10:38:17 2015 : Debug: ++} # redundant-load-balance group redundant_ldap = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Connect-Info =~ /[a-z]* student/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (reply:Connect-Info =~ /[a-z]* student/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Connect-Info =~ /[a-z]* student/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++if (reply:Connect-Info =~ /[a-z]* student/) { Wed Oct 14 10:38:17 2015 : Debug: +++update reply { Wed Oct 14 10:38:17 2015 : Debug: +++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++} # if (reply:Connect-Info =~ /[a-z]* student/) = noop Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669032: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669032: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669032: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++? if ((Hint == "JOINstudent" ) && (reply:Connect-Info == "staff")) Wed Oct 14 10:38:17 2015 : Debug: (Attribute Hint was not found) Wed Oct 14 10:38:17 2015 : Debug: ?? Evaluating (Hint == "JOINstudent" ) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ?? Skipping (reply:Connect-Info == "staff") Wed Oct 14 10:38:17 2015 : Debug: ++? if ((Hint == "JOINstudent" ) && (reply:Connect-Info == "staff")) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++[perl] = updated Wed Oct 14 10:38:17 2015 : Debug: ++update reply { Wed Oct 14 10:38:17 2015 : Debug: expand: %{reply:Tunnel-Private-Group-Id} -> student Wed Oct 14 10:38:17 2015 : Debug: ++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++[expiration] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[logintime] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[pap] = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = updated Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP Identity Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type mschapv2 Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: [peap] Got tunneled Access-Challenge Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=229, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010b003c19001703030031c0e818d89141685ed4756a4de2576f89af4ea3e1cd4457df7b2cb560c00f3b77469425c491748bcac703d3c88837dd9ac2 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbdbb44be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8669032. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=231, length=388 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020b005d190017030300520000000000000002a97c835bae8374ab8d8bbfd91999adda230ae387595070be5defc2bc7c78c6c2867f3c5894838cb7ae576426364a1404bfcf0eec8ab3061275d3d9652f81d645d6140181a52d4d4e88b5 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbdbb44be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x3c44d9b222e5b9dcea129094c75d2680 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 11 length 93 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] Done initial handshake Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_OK Wed Oct 14 10:38:17 2015 : Debug: [peap] Session established. Decoding tunneled attributes. Wed Oct 14 10:38:17 2015 : Debug: [peap] Peap state phase2 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAP type mschapv2 Wed Oct 14 10:38:17 2015 : Debug: [peap] Setting User-Name to hm6 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[unix] = notfound Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++update control { Wed Oct 14 10:38:17 2015 : Debug: ++} # update control = noop Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 11 length 62 Wed Oct 14 10:38:17 2015 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = updated Wed Oct 14 10:38:17 2015 : Debug: [files] users: Matched entry DEFAULT at line 92 Wed Oct 14 10:38:17 2015 : Debug: ++[files] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++load-balance redundant_ldap { Wed Oct 14 10:38:17 2015 : Debug: ++redundant-load-balance group redundant_ldap { Wed Oct 14 10:38:17 2015 : Debug: [ldap3] performing user authorization for hm6 Wed Oct 14 10:38:17 2015 : Debug: [ldap3] expand: %{Stripped-User-Name} -> hm6 Wed Oct 14 10:38:17 2015 : Debug: [ldap3] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=hm6) Wed Oct 14 10:38:17 2015 : Debug: [ldap3] expand: dc=rice,dc=edu -> dc=rice,dc=edu Wed Oct 14 10:38:17 2015 : Debug: [ldap3] checking if remote access for hm6 is allowed by riceClass Wed Oct 14 10:38:17 2015 : Debug: [ldap3] looking for check items in directory... Wed Oct 14 10:38:17 2015 : Debug: [ldap3] looking for reply items in directory... Wed Oct 14 10:38:17 2015 : Debug: [ldap3] user hm6 authorized to use remote access Wed Oct 14 10:38:17 2015 : Debug: +++[ldap3] = ok Wed Oct 14 10:38:17 2015 : Debug: ++} # redundant-load-balance group redundant_ldap = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Connect-Info =~ /[a-z]* student/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (reply:Connect-Info =~ /[a-z]* student/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Connect-Info =~ /[a-z]* student/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++if (reply:Connect-Info =~ /[a-z]* student/) { Wed Oct 14 10:38:17 2015 : Debug: +++update reply { Wed Oct 14 10:38:17 2015 : Debug: +++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++} # if (reply:Connect-Info =~ /[a-z]* student/) = noop Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669034: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669034: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669034: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++? if ((Hint == "JOINstudent" ) && (reply:Connect-Info == "staff")) Wed Oct 14 10:38:17 2015 : Debug: (Attribute Hint was not found) Wed Oct 14 10:38:17 2015 : Debug: ?? Evaluating (Hint == "JOINstudent" ) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ?? Skipping (reply:Connect-Info == "staff") Wed Oct 14 10:38:17 2015 : Debug: ++? if ((Hint == "JOINstudent" ) && (reply:Connect-Info == "staff")) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++[perl] = updated Wed Oct 14 10:38:17 2015 : Debug: ++update reply { Wed Oct 14 10:38:17 2015 : Debug: expand: %{reply:Tunnel-Private-Group-Id} -> student Wed Oct 14 10:38:17 2015 : Debug: ++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++[expiration] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[logintime] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[pap] = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = updated Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/mschapv2 Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type mschapv2 Wed Oct 14 10:38:17 2015 : Debug: [mschapv2] # Executing group from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: [mschapv2] +group MS-CHAP { Wed Oct 14 10:38:17 2015 : Debug: [mschap] Creating challenge hash with username: hm6 Wed Oct 14 10:38:17 2015 : Debug: [mschap] Client is using MS-CHAPv2 for hm6, we need NT-Password Wed Oct 14 10:38:17 2015 : Debug: [mschap] expand: %{Stripped-User-Name} -> hm6 Wed Oct 14 10:38:17 2015 : Debug: [mschap] expand: --username=%{%{Stripped-User-Name}:-%{%{mschap:User-Name}:-%{User-Name}}} -> --username=hm6 Wed Oct 14 10:38:17 2015 : Debug: [mschap] No NT-Domain was found in the User-Name. Wed Oct 14 10:38:17 2015 : Debug: [mschap] expand: --domain=%{mschap:NT-Domain:-ADRICE} -> --domain= Wed Oct 14 10:38:17 2015 : Debug: [mschap] Creating challenge hash with username: hm6 Wed Oct 14 10:38:17 2015 : Debug: [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=c1b5930b981f7cb3 Wed Oct 14 10:38:17 2015 : Debug: [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=c5ff0b2ee1fc6f01d9bbad2d31f4c082811f86363ec9d645 Wed Oct 14 10:38:17 2015 : Debug: [mschap] Exec: program returned: 0 Wed Oct 14 10:38:17 2015 : Debug: [mschap] adding MS-CHAPv2 MPPE keys Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group MS-CHAP = ok Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: [peap] Got tunneled Access-Challenge Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=231, length=0 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010c005219001703030047c0e818d89141685fe8d226ad69155044d09e7d795326f1242391d7e11fe25aed69840fb7d0fdd3557f6fadbff7f2735e2ab95a70948061a52d783352cf181dd1a66d5c394bc989 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd8b34be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8669034. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=235, length=332 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020c00251900170303001a000000000000000373280432f973498aecaddcc6ca92bbba196f Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd8b34be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x5ee7a4da527d81a3902218a6bab37f9f Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 12 length 37 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] Done initial handshake Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_OK Wed Oct 14 10:38:17 2015 : Debug: [peap] Session established. Decoding tunneled attributes. Wed Oct 14 10:38:17 2015 : Debug: [peap] Peap state phase2 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAP type mschapv2 Wed Oct 14 10:38:17 2015 : Debug: [peap] Setting User-Name to hm6 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[unix] = notfound Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++update control { Wed Oct 14 10:38:17 2015 : Debug: ++} # update control = noop Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 12 length 6 Wed Oct 14 10:38:17 2015 : Debug: [eap] No EAP Start, assuming it's an on-going EAP conversation Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = updated Wed Oct 14 10:38:17 2015 : Debug: [files] users: Matched entry DEFAULT at line 92 Wed Oct 14 10:38:17 2015 : Debug: ++[files] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (control:Auth-Type == Kerberos) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++load-balance redundant_ldap { Wed Oct 14 10:38:17 2015 : Debug: ++redundant-load-balance group redundant_ldap { Wed Oct 14 10:38:17 2015 : Debug: [ldap3] performing user authorization for hm6 Wed Oct 14 10:38:17 2015 : Debug: [ldap3] expand: %{Stripped-User-Name} -> hm6 Wed Oct 14 10:38:17 2015 : Debug: [ldap3] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=hm6) Wed Oct 14 10:38:17 2015 : Debug: [ldap3] expand: dc=rice,dc=edu -> dc=rice,dc=edu Wed Oct 14 10:38:17 2015 : Debug: [ldap3] checking if remote access for hm6 is allowed by riceClass Wed Oct 14 10:38:17 2015 : Debug: [ldap3] looking for check items in directory... Wed Oct 14 10:38:17 2015 : Debug: [ldap3] looking for reply items in directory... Wed Oct 14 10:38:17 2015 : Debug: [ldap3] user hm6 authorized to use remote access Wed Oct 14 10:38:17 2015 : Debug: +++[ldap3] = ok Wed Oct 14 10:38:17 2015 : Debug: ++} # redundant-load-balance group redundant_ldap = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Connect-Info =~ /[a-z]* student/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (reply:Connect-Info =~ /[a-z]* student/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Connect-Info =~ /[a-z]* student/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++if (reply:Connect-Info =~ /[a-z]* student/) { Wed Oct 14 10:38:17 2015 : Debug: +++update reply { Wed Oct 14 10:38:17 2015 : Debug: +++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++} # if (reply:Connect-Info =~ /[a-z]* student/) = noop Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669041: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669041: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++ ... skipping elsif for request 8669041: Preceding "if" was taken Wed Oct 14 10:38:17 2015 : Debug: ++? if ((Hint == "JOINstudent" ) && (reply:Connect-Info == "staff")) Wed Oct 14 10:38:17 2015 : Debug: (Attribute Hint was not found) Wed Oct 14 10:38:17 2015 : Debug: ?? Evaluating (Hint == "JOINstudent" ) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ?? Skipping (reply:Connect-Info == "staff") Wed Oct 14 10:38:17 2015 : Debug: ++? if ((Hint == "JOINstudent" ) && (reply:Connect-Info == "staff")) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++[perl] = updated Wed Oct 14 10:38:17 2015 : Debug: ++update reply { Wed Oct 14 10:38:17 2015 : Debug: expand: %{reply:Tunnel-Private-Group-Id} -> student Wed Oct 14 10:38:17 2015 : Debug: ++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++[expiration] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[logintime] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[pap] = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = updated Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/mschapv2 Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type mschapv2 Wed Oct 14 10:38:17 2015 : Debug: [eap] Freeing handler Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = ok Wed Oct 14 10:38:17 2015 : Debug: # Executing section post-auth from file /etc/opt/freeradius/sites-enabled/inner-tunnel Wed Oct 14 10:38:17 2015 : Debug: +group post-auth { Wed Oct 14 10:38:17 2015 : Debug: [reply_log] expand: /var/opt/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/opt/freeradius/radacct/10.64.76.100/reply-detail-20151014 Wed Oct 14 10:38:17 2015 : Debug: [reply_log] /var/opt/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/opt/freeradius/radacct/10.64.76.100/reply-detail-20151014 Wed Oct 14 10:38:17 2015 : Debug: [reply_log] expand: %t -> Wed Oct 14 10:38:17 2015 Wed Oct 14 10:38:17 2015 : Debug: ++[reply_log] = ok Wed Oct 14 10:38:17 2015 : Debug: ++update outer.reply { Wed Oct 14 10:38:17 2015 : Debug: expand: %{request:User-Name} -> hm6 Wed Oct 14 10:38:17 2015 : Debug: ++} # update outer.reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++? if (! reply:Cached-Session-Policy) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating !(reply:Cached-Session-Policy) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++? if (! reply:Cached-Session-Policy) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++if (! reply:Cached-Session-Policy) { Wed Oct 14 10:38:17 2015 : Debug: +++update reply { Wed Oct 14 10:38:17 2015 : Debug: expand: TPG=%{reply:Tunnel-Private-Group-Id},CI=%{reply:Connect-Info} -> TPG=student,CI=student Wed Oct 14 10:38:17 2015 : Debug: +++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++} # if (! reply:Cached-Session-Policy) = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group post-auth = ok Wed Oct 14 10:38:17 2015 : Debug: [peap] Tunneled authentication was successful. Wed Oct 14 10:38:17 2015 : Debug: [peap] SUCCESS Wed Oct 14 10:38:17 2015 : Debug: [peap] Saving tunneled attributes for later Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = handled Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = handled Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Challenge packet to host 10.64.76.100 port 32770, id=235, length=0 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x010d002e19001703030023c0e818d8914168600522a03fe9268f7877bd85d4ec70f5a81c2f2e8c76993cab8b3c72 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd9b24be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8669041. Wed Oct 14 10:38:17 2015 : Debug: Received Access-Request packet from host 10.64.76.100 port 32770, id=236, length=341 Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Chargeable-User-Identity = "" Wed Oct 14 10:38:17 2015 : Debug: Location-Capable = Civix-Location Wed Oct 14 10:38:17 2015 : Debug: Calling-Station-Id = "14-1a-a3-93-54-21" Wed Oct 14 10:38:17 2015 : Debug: Called-Station-Id = "00-23-eb-2e-3d-f0:Rice Owls" Wed Oct 14 10:38:17 2015 : Debug: NAS-Port = 13 Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "audit-session-id=0a404c640127ea43561e76e8" Wed Oct 14 10:38:17 2015 : Debug: Acct-Session-Id = "561e76e8/14:1a:a3:93:54:21/10411163" Wed Oct 14 10:38:17 2015 : Debug: Cisco-AVPair = "mDNS=true" Wed Oct 14 10:38:17 2015 : Debug: NAS-IP-Address = 10.64.76.100 Wed Oct 14 10:38:17 2015 : Debug: NAS-Identifier = "WiSM2-HA1-1" Wed Oct 14 10:38:17 2015 : Debug: Airespace-Wlan-Id = 1 Wed Oct 14 10:38:17 2015 : Debug: Service-Type = Framed-User Wed Oct 14 10:38:17 2015 : Debug: Framed-MTU = 1300 Wed Oct 14 10:38:17 2015 : Debug: NAS-Port-Type = Wireless-802.11 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "355" Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x020d002e190017030300230000000000000004bba91b3a334d6a4076622f2294653030df6080f73dfbe7fbc28ded Wed Oct 14 10:38:17 2015 : Debug: State = 0xd2bf52bbd9b24be7705f38cb236b93a9 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0xca71508c36a2309050ea8cb81f0b1095 Wed Oct 14 10:38:17 2015 : Debug: # Executing section authorize from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authorize { Wed Oct 14 10:38:17 2015 : Debug: ++[preprocess] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[chap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[mschap] = noop Wed Oct 14 10:38:17 2015 : Debug: ++[digest] = noop Wed Oct 14 10:38:17 2015 : Debug: [suffix] No '@' in User-Name = "hm6", looking up realm NULL Wed Oct 14 10:38:17 2015 : Debug: [suffix] Found realm "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Stripped-User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Adding Realm = "NULL" Wed Oct 14 10:38:17 2015 : Debug: [suffix] Authentication realm is LOCAL. Wed Oct 14 10:38:17 2015 : Debug: ++[suffix] = ok Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm =~ /wlan.*gppnetwork\.org/) -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: ++? if (Realm == "WiFi.sktelecom.com") -> FALSE Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP packet type response id 13 length 46 Wed Oct 14 10:38:17 2015 : Debug: [eap] Continuing tunnel setup. Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authorize = ok Wed Oct 14 10:38:17 2015 : Debug: Found Auth-Type = EAP Wed Oct 14 10:38:17 2015 : Debug: # Executing group from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group authenticate { Wed Oct 14 10:38:17 2015 : Debug: [eap] Request found, released from the list Wed Oct 14 10:38:17 2015 : Debug: [eap] EAP/peap Wed Oct 14 10:38:17 2015 : Debug: [eap] processing type peap Wed Oct 14 10:38:17 2015 : Debug: [peap] processing EAP-TLS Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_verify returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] Done initial handshake Wed Oct 14 10:38:17 2015 : Debug: [peap] eaptls_process returned 7 Wed Oct 14 10:38:17 2015 : Debug: [peap] EAPTLS_OK Wed Oct 14 10:38:17 2015 : Debug: [peap] Session established. Decoding tunneled attributes. Wed Oct 14 10:38:17 2015 : Debug: [peap] Peap state send tlv success Wed Oct 14 10:38:17 2015 : Debug: [peap] Received EAP-TLV response. Wed Oct 14 10:38:17 2015 : Debug: [peap] Success Wed Oct 14 10:38:17 2015 : Debug: [peap] Using saved attributes from the original Access-Accept Wed Oct 14 10:38:17 2015 : Debug: [peap] Saving response in the cache Wed Oct 14 10:38:17 2015 : Debug: [eap] Freeing handler Wed Oct 14 10:38:17 2015 : Debug: ++[eap] = ok Wed Oct 14 10:38:17 2015 : Debug: +} # group authenticate = ok Wed Oct 14 10:38:17 2015 : Debug: # Executing section post-auth from file /etc/opt/freeradius/sites-enabled/default Wed Oct 14 10:38:17 2015 : Debug: +group post-auth { Wed Oct 14 10:38:17 2015 : Debug: [reply_log] expand: /var/opt/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/opt/freeradius/radacct/10.64.76.100/reply-detail-20151014 Wed Oct 14 10:38:17 2015 : Debug: [reply_log] /var/opt/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/opt/freeradius/radacct/10.64.76.100/reply-detail-20151014 Wed Oct 14 10:38:17 2015 : Debug: [reply_log] expand: %t -> Wed Oct 14 10:38:17 2015 Wed Oct 14 10:38:17 2015 : Debug: ++[reply_log] = ok Wed Oct 14 10:38:17 2015 : Debug: ++[exec] = noop Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Cached-Session-Policy =~ /TPG=(.+),CI=(.+)/) Wed Oct 14 10:38:17 2015 : Debug: ? Evaluating (reply:Cached-Session-Policy =~ /TPG=(.+),CI=(.+)/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++? if (reply:Cached-Session-Policy =~ /TPG=(.+),CI=(.+)/) -> TRUE Wed Oct 14 10:38:17 2015 : Debug: ++if (reply:Cached-Session-Policy =~ /TPG=(.+),CI=(.+)/) { Wed Oct 14 10:38:17 2015 : Debug: +++update reply { Wed Oct 14 10:38:17 2015 : Debug: expand: %{1} -> student Wed Oct 14 10:38:17 2015 : Debug: expand: %{2} -> student Wed Oct 14 10:38:17 2015 : Debug: +++} # update reply = noop Wed Oct 14 10:38:17 2015 : Debug: ++} # if (reply:Cached-Session-Policy =~ /TPG=(.+),CI=(.+)/) = noop Wed Oct 14 10:38:17 2015 : Debug: +} # group post-auth = ok Wed Oct 14 10:38:17 2015 : Debug: Sending Access-Accept packet to host 10.64.76.100 port 32770, id=236, length=0 Wed Oct 14 10:38:17 2015 : Debug: Connect-Info = "student" Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Medium-Type:0 = IEEE-802 Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Type:0 = VLAN Wed Oct 14 10:38:17 2015 : Debug: Tunnel-Private-Group-Id:0 = "student" Wed Oct 14 10:38:17 2015 : Debug: User-Name = "hm6" Wed Oct 14 10:38:17 2015 : Debug: Cached-Session-Policy = "TPG=student,CI=student" Wed Oct 14 10:38:17 2015 : Debug: MS-MPPE-Recv-Key = 0x44b548185372c8a886dcc1126f6223f71d6df51507c61a3ecc63d101fbb63151 Wed Oct 14 10:38:17 2015 : Debug: MS-MPPE-Send-Key = 0xfb088233dc414a36129de240105954054ef16417bfa5b5022ee01dde562c16e3 Wed Oct 14 10:38:17 2015 : Debug: EAP-MSK = 0x44b548185372c8a886dcc1126f6223f71d6df51507c61a3ecc63d101fbb63151fb088233dc414a36129de240105954054ef16417bfa5b5022ee01dde562c16e3 Wed Oct 14 10:38:17 2015 : Debug: EAP-EMSK = 0x54c09152b3e71253db345017c99e5c0141050fbfcf65edc514b76adbc471c9ad7f30272e7780368e5e6305e6071f031d72fe08ad43ebcf64e4e35b396e36de96 Wed Oct 14 10:38:17 2015 : Debug: EAP-Session-Id = 0x1999003f89ceb614e8779deaf18bf16ef575108a8f296a3b6987f73e7ef5a00c28561e76e95197ed406fd8149d26f490d27122bb9c77c5bab8154eeab3677a63a4 Wed Oct 14 10:38:17 2015 : Debug: EAP-Message = 0x030d0004 Wed Oct 14 10:38:17 2015 : Debug: Message-Authenticator = 0x00000000000000000000000000000000 Wed Oct 14 10:38:17 2015 : Debug: Finished request 8669042. Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668982 ID 196 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668983 ID 197 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668986 ID 200 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668989 ID 203 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668990 ID 204 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668991 ID 205 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8668992 ID 206 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8669026 ID 225 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8669030 ID 228 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8669032 ID 229 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8669034 ID 231 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8669041 ID 235 with timestamp +103464 Wed Oct 14 10:38:21 2015 : Debug: Cleaning up request 8669042 ID 236 with timestamp +103464