RadiusServer:/usr/local/etc/raddb # radiusd -XXX Mon Nov 7 09:28:45 2016 : Debug: Server was built with: Mon Nov 7 09:28:45 2016 : Debug: accounting : yes Mon Nov 7 09:28:45 2016 : Debug: authentication : yes Mon Nov 7 09:28:45 2016 : Debug: ascend-binary-attributes : yes Mon Nov 7 09:28:45 2016 : Debug: coa : yes Mon Nov 7 09:28:45 2016 : Debug: control-socket : yes Mon Nov 7 09:28:45 2016 : Debug: detail : yes Mon Nov 7 09:28:45 2016 : Debug: dhcp : yes Mon Nov 7 09:28:45 2016 : Debug: dynamic-clients : yes Mon Nov 7 09:28:45 2016 : Debug: osfc2 : no Mon Nov 7 09:28:45 2016 : Debug: proxy : yes Mon Nov 7 09:28:45 2016 : Debug: regex-pcre : no Mon Nov 7 09:28:45 2016 : Debug: regex-posix : yes Mon Nov 7 09:28:45 2016 : Debug: regex-posix-extended : yes Mon Nov 7 09:28:45 2016 : Debug: session-management : yes Mon Nov 7 09:28:45 2016 : Debug: stats : yes Mon Nov 7 09:28:45 2016 : Debug: tcp : yes Mon Nov 7 09:28:45 2016 : Debug: threads : yes Mon Nov 7 09:28:45 2016 : Debug: tls : yes Mon Nov 7 09:28:45 2016 : Debug: unlang : yes Mon Nov 7 09:28:45 2016 : Debug: vmps : yes Mon Nov 7 09:28:45 2016 : Debug: developer : no Mon Nov 7 09:28:45 2016 : Debug: Server core libs: Mon Nov 7 09:28:45 2016 : Debug: freeradius-server : 3.0.13 Mon Nov 7 09:28:45 2016 : Debug: talloc : 2.0.* Mon Nov 7 09:28:45 2016 : Debug: ssl : 1.0.1i release Mon Nov 7 09:28:45 2016 : Debug: Endianness: Mon Nov 7 09:28:45 2016 : Debug: little Mon Nov 7 09:28:45 2016 : Debug: Compilation flags: Mon Nov 7 09:28:45 2016 : Debug: cppflags : Mon Nov 7 09:28:45 2016 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -g -O2 -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 Mon Nov 7 09:28:45 2016 : Debug: ldflags : Mon Nov 7 09:28:45 2016 : Debug: libs : -lcrypto -lssl -ltalloc -lnsl -lresolv -ldl -lpthread Mon Nov 7 09:28:45 2016 : Debug: Mon Nov 7 09:28:45 2016 : Info: FreeRADIUS Version 3.0.13 Mon Nov 7 09:28:45 2016 : Info: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors Mon Nov 7 09:28:45 2016 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Mon Nov 7 09:28:45 2016 : Info: PARTICULAR PURPOSE Mon Nov 7 09:28:45 2016 : Info: You may redistribute copies of FreeRADIUS under the terms of the Mon Nov 7 09:28:45 2016 : Info: GNU General Public License Mon Nov 7 09:28:45 2016 : Info: For more information about these matters, see the file named COPYRIGHT Mon Nov 7 09:28:45 2016 : Info: Starting - reading configuration files ... Mon Nov 7 09:28:45 2016 : Debug: including dictionary file /usr/local/share/freeradius/dictionary Mon Nov 7 09:28:45 2016 : Debug: including dictionary file /usr/local/share/freeradius/dictionary.dhcp Mon Nov 7 09:28:45 2016 : Debug: including dictionary file /usr/local/share/freeradius/dictionary.vqp Mon Nov 7 09:28:45 2016 : Debug: including dictionary file /usr/local/etc/raddb/dictionary Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/radiusd.conf Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/proxy.conf Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/clients.conf Mon Nov 7 09:28:45 2016 : Debug: including files in directory /usr/local/etc/raddb/mods-enabled/ Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/perl Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/chap Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/detail Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/preprocess Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/eap Mon Nov 7 09:28:45 2016 : Debug: including files in directory /usr/local/etc/raddb/policy.d/ Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/abfab-tr Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/accounting Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/canonicalization Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/control Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/cui Mon Nov 7 09:28:45 2016 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Mon Nov 7 09:28:45 2016 : Debug: OPTIMIZING (no == yes) --> FALSE Mon Nov 7 09:28:45 2016 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Mon Nov 7 09:28:45 2016 : Debug: OPTIMIZING (no == yes) --> FALSE Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/debug Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/dhcp Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/eap Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/filter Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/moonshot-targeted-ids Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/operator-name Mon Nov 7 09:28:45 2016 : Debug: including files in directory /usr/local/etc/raddb/sites-enabled/ Mon Nov 7 09:28:45 2016 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:28:45 2016 : Debug: main { Mon Nov 7 09:28:45 2016 : Debug: security { Mon Nov 7 09:28:45 2016 : Debug: allow_core_dumps = no Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[462]: The item 'max_attributes' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[480]: The item 'reject_delay' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[500]: The item 'status_server' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[510]: The item 'allow_vulnerable_openssl' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: name = "radiusd" Mon Nov 7 09:28:45 2016 : Debug: prefix = "/usr/local" Mon Nov 7 09:28:45 2016 : Debug: localstatedir = "/usr/local/var" Mon Nov 7 09:28:45 2016 : Debug: logdir = "/usr/local/var/log/radius" Mon Nov 7 09:28:45 2016 : Debug: run_dir = "/usr/local/var/run/radiusd" Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[67]: The item 'confdir' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[74]: The item 'db_dir' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[108]: The item 'libdir' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[119]: The item 'pidfile' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[140]: The item 'correct_escapes' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[194]: The item 'max_request_time' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[213]: The item 'cleanup_delay' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[250]: The item 'hostname_lookups' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[372]: The item 'checkrad' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[529]: The item 'proxy_requests' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: main { Mon Nov 7 09:28:45 2016 : Debug: name = "radiusd" Mon Nov 7 09:28:45 2016 : Debug: prefix = "/usr/local" Mon Nov 7 09:28:45 2016 : Debug: localstatedir = "/usr/local/var" Mon Nov 7 09:28:45 2016 : Debug: sbindir = "/usr/local/sbin" Mon Nov 7 09:28:45 2016 : Debug: logdir = "/usr/local/var/log/radius" Mon Nov 7 09:28:45 2016 : Debug: run_dir = "/usr/local/var/run/radiusd" Mon Nov 7 09:28:45 2016 : Debug: libdir = "/usr/local/lib" Mon Nov 7 09:28:45 2016 : Debug: radacctdir = "/usr/local/var/log/radius/radacct" Mon Nov 7 09:28:45 2016 : Debug: hostname_lookups = no Mon Nov 7 09:28:45 2016 : Debug: max_request_time = 30 Mon Nov 7 09:28:45 2016 : Debug: cleanup_delay = 5 Mon Nov 7 09:28:45 2016 : Debug: max_requests = 16384 Mon Nov 7 09:28:45 2016 : Debug: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" Mon Nov 7 09:28:45 2016 : Debug: checkrad = "/usr/local/sbin/checkrad" Mon Nov 7 09:28:45 2016 : Debug: debug_level = 0 Mon Nov 7 09:28:45 2016 : Debug: proxy_requests = yes Mon Nov 7 09:28:45 2016 : Debug: log { Mon Nov 7 09:28:45 2016 : Debug: stripped_names = no Mon Nov 7 09:28:45 2016 : Debug: auth = no Mon Nov 7 09:28:45 2016 : Debug: auth_badpass = no Mon Nov 7 09:28:45 2016 : Debug: auth_goodpass = no Mon Nov 7 09:28:45 2016 : Debug: colourise = yes Mon Nov 7 09:28:45 2016 : Debug: msg_denied = "You are already logged in - access denied" Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[268]: The item 'destination' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[285]: The item 'file' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[331]: The item 'syslog_facility' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: resources { Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: security { Mon Nov 7 09:28:45 2016 : Debug: max_attributes = 200 Mon Nov 7 09:28:45 2016 : Debug: reject_delay = 1.000000 Mon Nov 7 09:28:45 2016 : Debug: status_server = yes Mon Nov 7 09:28:45 2016 : Debug: allow_vulnerable_openssl = "CVE-2016-6304" Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[67]: The item 'confdir' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[74]: The item 'db_dir' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[140]: The item 'correct_escapes' is defined, but is unused by the configuration Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: radiusd: #### Loading Realms and Home Servers #### Mon Nov 7 09:28:45 2016 : Debug: proxy server { Mon Nov 7 09:28:45 2016 : Debug: retry_delay = 5 Mon Nov 7 09:28:45 2016 : Debug: retry_count = 3 Mon Nov 7 09:28:45 2016 : Debug: default_fallback = no Mon Nov 7 09:28:45 2016 : Debug: dead_time = 120 Mon Nov 7 09:28:45 2016 : Debug: wake_all_if_all_dead = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: home_server localhost { Mon Nov 7 09:28:45 2016 : Debug: ipaddr = 127.0.0.1 Mon Nov 7 09:28:45 2016 : Debug: port = 1812 Mon Nov 7 09:28:45 2016 : Debug: type = "auth" Mon Nov 7 09:28:45 2016 : Debug: proto = "udp" Mon Nov 7 09:28:45 2016 : Debug: secret = "Secret" Mon Nov 7 09:28:45 2016 : Debug: response_window = 20.000000 Mon Nov 7 09:28:45 2016 : Debug: response_timeouts = 1 Mon Nov 7 09:28:45 2016 : Debug: max_outstanding = 65536 Mon Nov 7 09:28:45 2016 : Debug: zombie_period = 40 Mon Nov 7 09:28:45 2016 : Debug: status_check = "status-server" Mon Nov 7 09:28:45 2016 : Debug: ping_interval = 30 Mon Nov 7 09:28:45 2016 : Debug: check_interval = 30 Mon Nov 7 09:28:45 2016 : Debug: check_timeout = 4 Mon Nov 7 09:28:45 2016 : Debug: num_answers_to_alive = 3 Mon Nov 7 09:28:45 2016 : Debug: revive_interval = 120 Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: max_requests = 0 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 0 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: coa { Mon Nov 7 09:28:45 2016 : Debug: irt = 2 Mon Nov 7 09:28:45 2016 : Debug: mrt = 16 Mon Nov 7 09:28:45 2016 : Debug: mrc = 5 Mon Nov 7 09:28:45 2016 : Debug: mrd = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: realm LOCAL { Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: radiusd: #### Loading Clients #### Mon Nov 7 09:28:45 2016 : Debug: client localhost { Mon Nov 7 09:28:45 2016 : Debug: ipaddr = 127.0.0.1 Mon Nov 7 09:28:45 2016 : Debug: require_message_authenticator = no Mon Nov 7 09:28:45 2016 : Debug: secret = "Secret" Mon Nov 7 09:28:45 2016 : Debug: nas_type = "other" Mon Nov 7 09:28:45 2016 : Debug: proto = "*" Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32 Mon Nov 7 09:28:45 2016 : Debug: client s1 { Mon Nov 7 09:28:45 2016 : Debug: ipaddr = ip Mon Nov 7 09:28:45 2016 : Debug: require_message_authenticator = no Mon Nov 7 09:28:45 2016 : Debug: secret = "Secret" Mon Nov 7 09:28:45 2016 : Debug: nas_type = "other" Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Adding client ip/32 (ip) to prefix tree 32 Mon Nov 7 09:28:45 2016 : Debug: client s2 { Mon Nov 7 09:28:45 2016 : Debug: ipaddr = ip Mon Nov 7 09:28:45 2016 : Debug: require_message_authenticator = no Mon Nov 7 09:28:45 2016 : Debug: secret = "Secret" Mon Nov 7 09:28:45 2016 : Debug: nas_type = "other" Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Adding client ip/32 (ip) to prefix tree 32 Mon Nov 7 09:28:45 2016 : Debug: client s3 { Mon Nov 7 09:28:45 2016 : Debug: ipaddr = ip Mon Nov 7 09:28:45 2016 : Debug: require_message_authenticator = no Mon Nov 7 09:28:45 2016 : Debug: secret = "Secret" Mon Nov 7 09:28:45 2016 : Debug: nas_type = "cisco" Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Adding client ip/32 (ip) to prefix tree 32 Mon Nov 7 09:28:45 2016 : Info: Debugger not attached Mon Nov 7 09:28:45 2016 : Debug: # Creating Auth-Type = EAP Mon Nov 7 09:28:45 2016 : Debug: radiusd: #### Instantiating modules #### Mon Nov 7 09:28:45 2016 : Debug: modules { Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_perl with path: /usr/local/lib/rlm_perl.so Mon Nov 7 09:28:45 2016 : Debug: Loaded rlm_perl, checking if it's valid Mon Nov 7 09:28:45 2016 : Debug: # Loaded module rlm_perl Mon Nov 7 09:28:45 2016 : Debug: # Loading module "GoPerl" from file /usr/local/etc/raddb/mods-enabled/perl Mon Nov 7 09:28:45 2016 : Debug: perl GoPerl { Mon Nov 7 09:28:45 2016 : Debug: filename = "/usr/local/etc/raddb/mods-config/perl/example.pl" Mon Nov 7 09:28:45 2016 : Debug: func_authorize = "authorize" Mon Nov 7 09:28:45 2016 : Debug: func_authenticate = "authenticate" Mon Nov 7 09:28:45 2016 : Debug: func_post_auth = "post_auth" Mon Nov 7 09:28:45 2016 : Debug: func_accounting = "accounting" Mon Nov 7 09:28:45 2016 : Debug: func_preacct = "preacct" Mon Nov 7 09:28:45 2016 : Debug: func_checksimul = "checksimul" Mon Nov 7 09:28:45 2016 : Debug: func_detach = "detach" Mon Nov 7 09:28:45 2016 : Debug: func_xlat = "xlat" Mon Nov 7 09:28:45 2016 : Debug: func_pre_proxy = "pre_proxy" Mon Nov 7 09:28:45 2016 : Debug: func_post_proxy = "post_proxy" Mon Nov 7 09:28:45 2016 : Debug: func_recv_coa = "recv_coa" Mon Nov 7 09:28:45 2016 : Debug: func_send_coa = "send_coa" Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_chap with path: /usr/local/lib/rlm_chap.so Mon Nov 7 09:28:45 2016 : Debug: Loaded rlm_chap, checking if it's valid Mon Nov 7 09:28:45 2016 : Debug: # Loaded module rlm_chap Mon Nov 7 09:28:45 2016 : Debug: # Loading module "chap" from file /usr/local/etc/raddb/mods-enabled/chap Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_always with path: /usr/local/lib/rlm_always.so Mon Nov 7 09:28:45 2016 : Debug: Loaded rlm_always, checking if it's valid Mon Nov 7 09:28:45 2016 : Debug: # Loaded module rlm_always Mon Nov 7 09:28:45 2016 : Debug: # Loading module "reject" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always reject { Mon Nov 7 09:28:45 2016 : Debug: rcode = "reject" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "fail" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always fail { Mon Nov 7 09:28:45 2016 : Debug: rcode = "fail" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "ok" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always ok { Mon Nov 7 09:28:45 2016 : Debug: rcode = "ok" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "handled" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always handled { Mon Nov 7 09:28:45 2016 : Debug: rcode = "handled" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "invalid" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always invalid { Mon Nov 7 09:28:45 2016 : Debug: rcode = "invalid" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "userlock" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always userlock { Mon Nov 7 09:28:45 2016 : Debug: rcode = "userlock" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "notfound" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always notfound { Mon Nov 7 09:28:45 2016 : Debug: rcode = "notfound" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "noop" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always noop { Mon Nov 7 09:28:45 2016 : Debug: rcode = "noop" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "updated" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: always updated { Mon Nov 7 09:28:45 2016 : Debug: rcode = "updated" Mon Nov 7 09:28:45 2016 : Debug: simulcount = 0 Mon Nov 7 09:28:45 2016 : Debug: mpp = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_detail with path: /usr/local/lib/rlm_detail.so Mon Nov 7 09:28:45 2016 : Debug: Loaded rlm_detail, checking if it's valid Mon Nov 7 09:28:45 2016 : Debug: # Loaded module rlm_detail Mon Nov 7 09:28:45 2016 : Debug: # Loading module "detail" from file /usr/local/etc/raddb/mods-enabled/detail Mon Nov 7 09:28:45 2016 : Debug: detail { Mon Nov 7 09:28:45 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Mon Nov 7 09:28:45 2016 : Debug: header = "%t" Mon Nov 7 09:28:45 2016 : Debug: permissions = 384 Mon Nov 7 09:28:45 2016 : Debug: locking = no Mon Nov 7 09:28:45 2016 : Debug: escape_filenames = no Mon Nov 7 09:28:45 2016 : Debug: log_packet_header = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: detail auth_log { Mon Nov 7 09:28:45 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Mon Nov 7 09:28:45 2016 : Debug: header = "%t" Mon Nov 7 09:28:45 2016 : Debug: permissions = 384 Mon Nov 7 09:28:45 2016 : Debug: locking = no Mon Nov 7 09:28:45 2016 : Debug: escape_filenames = no Mon Nov 7 09:28:45 2016 : Debug: log_packet_header = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: detail reply_log { Mon Nov 7 09:28:45 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Mon Nov 7 09:28:45 2016 : Debug: header = "%t" Mon Nov 7 09:28:45 2016 : Debug: permissions = 384 Mon Nov 7 09:28:45 2016 : Debug: locking = no Mon Nov 7 09:28:45 2016 : Debug: escape_filenames = no Mon Nov 7 09:28:45 2016 : Debug: log_packet_header = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: detail pre_proxy_log { Mon Nov 7 09:28:45 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Mon Nov 7 09:28:45 2016 : Debug: header = "%t" Mon Nov 7 09:28:45 2016 : Debug: permissions = 384 Mon Nov 7 09:28:45 2016 : Debug: locking = no Mon Nov 7 09:28:45 2016 : Debug: escape_filenames = no Mon Nov 7 09:28:45 2016 : Debug: log_packet_header = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Loading module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: detail post_proxy_log { Mon Nov 7 09:28:45 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Mon Nov 7 09:28:45 2016 : Debug: header = "%t" Mon Nov 7 09:28:45 2016 : Debug: permissions = 384 Mon Nov 7 09:28:45 2016 : Debug: locking = no Mon Nov 7 09:28:45 2016 : Debug: escape_filenames = no Mon Nov 7 09:28:45 2016 : Debug: log_packet_header = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_preprocess with path: /usr/local/lib/rlm_preprocess.so Mon Nov 7 09:28:45 2016 : Debug: Loaded rlm_preprocess, checking if it's valid Mon Nov 7 09:28:45 2016 : Debug: # Loaded module rlm_preprocess Mon Nov 7 09:28:45 2016 : Debug: # Loading module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess Mon Nov 7 09:28:45 2016 : Debug: preprocess { Mon Nov 7 09:28:45 2016 : Debug: huntgroups = "/usr/local/etc/raddb/mods-config/preprocess/huntgroups" Mon Nov 7 09:28:45 2016 : Debug: hints = "/usr/local/etc/raddb/mods-config/preprocess/hints" Mon Nov 7 09:28:45 2016 : Debug: with_ascend_hack = no Mon Nov 7 09:28:45 2016 : Debug: ascend_channels_per_line = 23 Mon Nov 7 09:28:45 2016 : Debug: with_ntdomain_hack = no Mon Nov 7 09:28:45 2016 : Debug: with_specialix_jetstream_hack = no Mon Nov 7 09:28:45 2016 : Debug: with_cisco_vsa_hack = no Mon Nov 7 09:28:45 2016 : Debug: with_alvarion_vsa_hack = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_eap with path: /usr/local/lib/rlm_eap.so Mon Nov 7 09:28:45 2016 : Debug: Loaded rlm_eap, checking if it's valid Mon Nov 7 09:28:45 2016 : Debug: # Loaded module rlm_eap Mon Nov 7 09:28:45 2016 : Debug: # Loading module "EAP" from file /usr/local/etc/raddb/mods-enabled/eap Mon Nov 7 09:28:45 2016 : Debug: eap EAP { Mon Nov 7 09:28:45 2016 : Debug: default_eap_type = "tls" Mon Nov 7 09:28:45 2016 : Debug: timer_expire = 60 Mon Nov 7 09:28:45 2016 : Debug: ignore_unknown_eap_types = no Mon Nov 7 09:28:45 2016 : Debug: cisco_accounting_username_bug = no Mon Nov 7 09:28:45 2016 : Debug: max_sessions = 16384 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: instantiate { Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "GoPerl" from file /usr/local/etc/raddb/mods-enabled/perl Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "reject" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "fail" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "ok" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "handled" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "invalid" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "userlock" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "notfound" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "noop" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "updated" from file /usr/local/etc/raddb/mods-enabled/always Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess Mon Nov 7 09:28:45 2016 : Debug: reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/huntgroups Mon Nov 7 09:28:45 2016 : Debug: reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/hints Mon Nov 7 09:28:45 2016 : Debug: # Instantiating module "EAP" from file /usr/local/etc/raddb/mods-enabled/eap Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_eap_tls with path: /usr/local/lib/rlm_eap_tls.so Mon Nov 7 09:28:45 2016 : Debug: # Linked to sub-module rlm_eap_tls Mon Nov 7 09:28:45 2016 : Debug: tls { Mon Nov 7 09:28:45 2016 : Debug: tls = "tls-common" Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: tls-config tls-common { Mon Nov 7 09:28:45 2016 : Debug: verify_depth = 0 Mon Nov 7 09:28:45 2016 : Debug: ca_path = "/usr/local/etc/raddb/certs" Mon Nov 7 09:28:45 2016 : Debug: pem_file_type = yes Mon Nov 7 09:28:45 2016 : Debug: private_key_file = "/usr/local/etc/raddb/certs/company/RadiusServer_private_cert.pem" Mon Nov 7 09:28:45 2016 : Debug: certificate_file = "/usr/local/etc/raddb/certs/company/RadiusServer_cert.pem" Mon Nov 7 09:28:45 2016 : Debug: ca_file = "/usr/local/etc/raddb/certs/company/companyCA.pem" Mon Nov 7 09:28:45 2016 : Debug: private_key_password = "sec" Mon Nov 7 09:28:45 2016 : Debug: dh_file = "/usr/local/etc/raddb/certs/dh" Mon Nov 7 09:28:45 2016 : Debug: fragment_size = 1024 Mon Nov 7 09:28:45 2016 : Debug: include_length = yes Mon Nov 7 09:28:45 2016 : Debug: auto_chain = yes Mon Nov 7 09:28:45 2016 : Debug: check_crl = no Mon Nov 7 09:28:45 2016 : Debug: check_all_crl = no Mon Nov 7 09:28:45 2016 : Debug: cipher_list = "DEFAULT" Mon Nov 7 09:28:45 2016 : Debug: ecdh_curve = "prime256v1" Mon Nov 7 09:28:45 2016 : Debug: cache { Mon Nov 7 09:28:45 2016 : Debug: enable = yes Mon Nov 7 09:28:45 2016 : Debug: lifetime = 24 Mon Nov 7 09:28:45 2016 : Debug: max_entries = 255 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: verify { Mon Nov 7 09:28:45 2016 : Debug: skip_if_ocsp_ok = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: ocsp { Mon Nov 7 09:28:45 2016 : Debug: enable = no Mon Nov 7 09:28:45 2016 : Debug: override_cert_url = yes Mon Nov 7 09:28:45 2016 : Debug: url = "http://127.0.0.1/ocsp/" Mon Nov 7 09:28:45 2016 : Debug: use_nonce = yes Mon Nov 7 09:28:45 2016 : Debug: timeout = 0 Mon Nov 7 09:28:45 2016 : Debug: softfail = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Loading rlm_eap_ttls with path: /usr/local/lib/rlm_eap_ttls.so Mon Nov 7 09:28:45 2016 : Debug: # Linked to sub-module rlm_eap_ttls Mon Nov 7 09:28:45 2016 : Debug: ttls { Mon Nov 7 09:28:45 2016 : Debug: tls = "tls-common" Mon Nov 7 09:28:45 2016 : Debug: default_eap_type = "md5" Mon Nov 7 09:28:45 2016 : Debug: copy_request_to_tunnel = no Mon Nov 7 09:28:45 2016 : Debug: use_tunneled_reply = no Mon Nov 7 09:28:45 2016 : Debug: virtual_server = "inner-tunnel" Mon Nov 7 09:28:45 2016 : Debug: include_length = yes Mon Nov 7 09:28:45 2016 : Debug: require_client_cert = no Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: tls: Using cached TLS configuration from previous invocation Mon Nov 7 09:28:45 2016 : Debug: } # modules Mon Nov 7 09:28:45 2016 : Debug: radiusd: #### Loading Virtual Servers #### Mon Nov 7 09:28:45 2016 : Debug: server { # from file /usr/local/etc/raddb/radiusd.conf Mon Nov 7 09:28:45 2016 : Debug: } # server Mon Nov 7 09:28:45 2016 : Debug: server default { # from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:28:45 2016 : Debug: authenticate { Mon Nov 7 09:28:45 2016 : Debug: EAP Mon Nov 7 09:28:45 2016 : Debug: } # authenticate Mon Nov 7 09:28:45 2016 : Debug: authorize { Mon Nov 7 09:28:45 2016 : Debug: policy filter_username { Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name) { Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name =~ / /) { Mon Nov 7 09:28:45 2016 : Debug: update { Mon Nov 7 09:28:45 2016 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: reject Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name =~ /@[^@]*@/) { Mon Nov 7 09:28:45 2016 : Debug: update { Mon Nov 7 09:28:45 2016 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: reject Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name =~ /\.\./) { Mon Nov 7 09:28:45 2016 : Debug: update { Mon Nov 7 09:28:45 2016 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: reject Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Mon Nov 7 09:28:45 2016 : Debug: update { Mon Nov 7 09:28:45 2016 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: reject Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name =~ /\.$/) { Mon Nov 7 09:28:45 2016 : Debug: update { Mon Nov 7 09:28:45 2016 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: reject Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: if (&User-Name =~ /@\./) { Mon Nov 7 09:28:45 2016 : Debug: update { Mon Nov 7 09:28:45 2016 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: reject Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: preprocess Mon Nov 7 09:28:45 2016 : Debug: auth_log Mon Nov 7 09:28:45 2016 : Debug: GoPerl Mon Nov 7 09:28:45 2016 : Debug: EAP Mon Nov 7 09:28:45 2016 : Debug: } # authorize Mon Nov 7 09:28:45 2016 : Debug: accounting { Mon Nov 7 09:28:45 2016 : Debug: detail Mon Nov 7 09:28:45 2016 : Debug: } # accounting Mon Nov 7 09:28:45 2016 : Debug: } # server default Mon Nov 7 09:28:45 2016 : Debug: Created signal pipe. Read end FD 5, write end FD 6 Mon Nov 7 09:28:45 2016 : Debug: radiusd: #### Opening IP addresses and Ports #### Mon Nov 7 09:28:45 2016 : Debug: Loading proto_auth with path: /usr/local/lib/proto_auth.so Mon Nov 7 09:28:45 2016 : Debug: Loading proto_auth failed: /usr/local/lib/proto_auth.so: cannot open shared object file: No such file or directory - No such file or directory Mon Nov 7 09:28:45 2016 : Debug: Loading library using linker search path(s) Mon Nov 7 09:28:45 2016 : Debug: Defaults : /lib:/usr/lib Mon Nov 7 09:28:45 2016 : Debug: Failed with error: proto_auth.so: cannot open shared object file: No such file or directory Mon Nov 7 09:28:45 2016 : Debug: listen { Mon Nov 7 09:28:45 2016 : Debug: type = "auth" Mon Nov 7 09:28:45 2016 : Debug: ipaddr = * Mon Nov 7 09:28:45 2016 : Debug: port = 0 Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Loading proto_acct with path: /usr/local/lib/proto_acct.so Mon Nov 7 09:28:45 2016 : Debug: Loading proto_acct failed: /usr/local/lib/proto_acct.so: cannot open shared object file: No such file or directory - No such file or directory Mon Nov 7 09:28:45 2016 : Debug: Loading library using linker search path(s) Mon Nov 7 09:28:45 2016 : Debug: Defaults : /lib:/usr/lib Mon Nov 7 09:28:45 2016 : Debug: Failed with error: proto_acct.so: cannot open shared object file: No such file or directory Mon Nov 7 09:28:45 2016 : Debug: listen { Mon Nov 7 09:28:45 2016 : Debug: type = "acct" Mon Nov 7 09:28:45 2016 : Debug: ipaddr = * Mon Nov 7 09:28:45 2016 : Debug: port = 0 Mon Nov 7 09:28:45 2016 : Debug: limit { Mon Nov 7 09:28:45 2016 : Debug: max_connections = 16 Mon Nov 7 09:28:45 2016 : Debug: lifetime = 0 Mon Nov 7 09:28:45 2016 : Debug: idle_timeout = 30 Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: } Mon Nov 7 09:28:45 2016 : Debug: Listening on auth address * port 1812 bound to server default Mon Nov 7 09:28:45 2016 : Debug: Listening on acct address * port 1813 bound to server default Mon Nov 7 09:28:45 2016 : Debug: Opened new proxy socket 'proxy address * port 46979' Mon Nov 7 09:28:45 2016 : Debug: Listening on proxy address * port 46979 Mon Nov 7 09:28:45 2016 : Info: Ready to process requests Mon Nov 7 09:29:00 2016 : Debug: (0) Received Access-Request Id 33 from ip:53266 to ip:1812 length 300 Mon Nov 7 09:29:00 2016 : Debug: (0) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:00 2016 : Debug: (0) Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: (0) Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: (0) Called-Station-Id = "mac" Mon Nov 7 09:29:00 2016 : Debug: (0) Calling-Station-Id = "Emac" Mon Nov 7 09:29:00 2016 : Debug: (0) EAP-Message = 0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d Mon Nov 7 09:29:00 2016 : Debug: (0) Message-Authenticator = 0xf06f77f3471a57542a8cb5a30aa31f12 Mon Nov 7 09:29:00 2016 : Debug: (0) NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: (0) NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: (0) NAS-Port-Id = "int" Mon Nov 7 09:29:00 2016 : Debug: (0) NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: (0) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:00 2016 : Debug: (0) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:00 2016 : Debug: (0) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:00 2016 : Debug: (0) Proxy-State = 0x8b16a4ad00000355 Mon Nov 7 09:29:00 2016 : Debug: (0) session-state: No State attribute Mon Nov 7 09:29:00 2016 : Debug: (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (0) authorize { Mon Nov 7 09:29:00 2016 : Debug: (0) policy filter_username { Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name) -> TRUE Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ / /) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (0) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (0) } # if (&User-Name) = notfound Mon Nov 7 09:29:00 2016 : Debug: (0) } # policy filter_username = notfound Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (0) [preprocess] = ok Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:00 2016 : Debug: if { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: else { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:00 2016 : Debug: percent --> Y Mon Nov 7 09:29:00 2016 : Debug: percent --> m Mon Nov 7 09:29:00 2016 : Debug: percent --> d Mon Nov 7 09:29:00 2016 : Debug: (0) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: (0) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: (0) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: %t Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: percent --> t Mon Nov 7 09:29:00 2016 : Debug: (0) auth_log: EXPAND %t Mon Nov 7 09:29:00 2016 : Debug: (0) auth_log: --> Mon Nov 7 09:29:00 2016 Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: (0) [auth_log] = ok Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4ad00000355' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xf06f77f3471a57542a8cb5a30aa31f12' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:00 CET Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780a0) Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xf06f77f3471a57542a8cb5a30aa31f12 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4ad00000355 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xf06f77f3471a57542a8cb5a30aa31f12' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4ad00000355' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:00 2016 : Debug: (0) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (0) [GoPerl] = ok Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (0) EAP: Peer sent EAP Response (code 2) ID 1 length 30 Mon Nov 7 09:29:00 2016 : Debug: (0) EAP: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (0) [EAP] = ok Mon Nov 7 09:29:00 2016 : Debug: (0) } # authorize = ok Mon Nov 7 09:29:00 2016 : Debug: (0) Found Auth-Type = EAP Mon Nov 7 09:29:00 2016 : Debug: (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (0) authenticate { Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (0) EAP: Peer sent packet with method EAP Identity (1) Mon Nov 7 09:29:00 2016 : Debug: (0) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:00 2016 : Debug: (0) eap_tls: Initiating new EAP-TLS session Mon Nov 7 09:29:00 2016 : Debug: (0) eap_tls: Flushing SSL sessions (of #0) Mon Nov 7 09:29:00 2016 : Debug: (0) eap_tls: Setting verify mode to require certificate from client Mon Nov 7 09:29:00 2016 : Debug: (0) eap_tls: [eaptls start] = request Mon Nov 7 09:29:00 2016 : Debug: (0) EAP: Sending EAP Request (code 1) ID 2 length 6 Mon Nov 7 09:29:00 2016 : Debug: (0) EAP: EAP session adding &reply:State = 0xad310c0fad3301b5 Mon Nov 7 09:29:00 2016 : Debug: (0) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (0) [EAP] = handled Mon Nov 7 09:29:00 2016 : Debug: (0) } # authenticate = handled Mon Nov 7 09:29:00 2016 : Debug: (0) Using Post-Auth-Type Challenge Mon Nov 7 09:29:00 2016 : Debug: (0) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:00 2016 : Debug: (0) session-state: Nothing to cache Mon Nov 7 09:29:00 2016 : Debug: (0) Sent Access-Challenge Id 33 from ip:1812 to ip:53266 length 0 Mon Nov 7 09:29:00 2016 : Debug: (0) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:00 2016 : Debug: (0) Tunnel-Type = VLAN Mon Nov 7 09:29:00 2016 : Debug: (0) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:00 2016 : Debug: (0) EAP-Message = 0x010200060d20 Mon Nov 7 09:29:00 2016 : Debug: (0) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:00 2016 : Debug: (0) State = 0xad310c0fad3301b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (0) Proxy-State = 0x8b16a4ad00000355 Mon Nov 7 09:29:00 2016 : Debug: (0) Finished request Mon Nov 7 09:29:00 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:00 2016 : Debug: (1) Received Access-Request Id 34 from ip:53266 to ip:1812 length 401 Mon Nov 7 09:29:00 2016 : Debug: (1) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:00 2016 : Debug: (1) Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: (1) Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: (1) Called-Station-Id = "mac" Mon Nov 7 09:29:00 2016 : Debug: (1) Calling-Station-Id = "Emac" Mon Nov 7 09:29:00 2016 : Debug: (1) EAP-Message = 0x020200710d800000006716030100620100005e030158203b505cc7078b159e9529e428b43e063a094b0ab702eb47c6add1d557e7fc00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100 Mon Nov 7 09:29:00 2016 : Debug: (1) Message-Authenticator = 0x410df75feabd99a334dc50ca4b2dd3f1 Mon Nov 7 09:29:00 2016 : Debug: (1) NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: (1) NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: (1) NAS-Port-Id = "int" Mon Nov 7 09:29:00 2016 : Debug: (1) NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: (1) State = 0xad310c0fad3301b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (1) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:00 2016 : Debug: (1) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:00 2016 : Debug: (1) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:00 2016 : Debug: (1) Proxy-State = 0x8b16a4ad00000357 Mon Nov 7 09:29:00 2016 : Debug: (1) session-state: No cached attributes Mon Nov 7 09:29:00 2016 : Debug: (1) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (1) authorize { Mon Nov 7 09:29:00 2016 : Debug: (1) policy filter_username { Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name) -> TRUE Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ / /) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (1) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (1) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (1) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (1) } # if (&User-Name) = notfound Mon Nov 7 09:29:00 2016 : Debug: (1) } # policy filter_username = notfound Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (1) [preprocess] = ok Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:00 2016 : Debug: if { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: else { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:00 2016 : Debug: percent --> Y Mon Nov 7 09:29:00 2016 : Debug: percent --> m Mon Nov 7 09:29:00 2016 : Debug: percent --> d Mon Nov 7 09:29:00 2016 : Debug: (1) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: (1) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: (1) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: %t Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: percent --> t Mon Nov 7 09:29:00 2016 : Debug: (1) auth_log: EXPAND %t Mon Nov 7 09:29:00 2016 : Debug: (1) auth_log: --> Mon Nov 7 09:29:00 2016 Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: (1) [auth_log] = ok Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xad310c0fad3301b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4ad00000357' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020200710d800000006716030100620100005e030158203b505cc7078b159e9529e428b43e063a094b0ab702eb47c6add1d557e7fc00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x410df75feabd99a334dc50ca4b2dd3f1' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:00 CET Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x410df75feabd99a334dc50ca4b2dd3f1 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4ad00000357 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020200710d800000006716030100620100005e030158203b505cc7078b159e9529e428b43e063a094b0ab702eb47c6add1d557e7fc00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xad310c0fad3301b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x410df75feabd99a334dc50ca4b2dd3f1' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4ad00000357' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020200710d800000006716030100620100005e030158203b505cc7078b159e9529e428b43e063a094b0ab702eb47c6add1d557e7fc00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xad310c0fad3301b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:00 2016 : Debug: (1) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (1) [GoPerl] = ok Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Peer sent EAP Response (code 2) ID 2 length 113 Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (1) [EAP] = updated Mon Nov 7 09:29:00 2016 : Debug: (1) } # authorize = updated Mon Nov 7 09:29:00 2016 : Debug: (1) Found Auth-Type = EAP Mon Nov 7 09:29:00 2016 : Debug: (1) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (1) authenticate { Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Expiring EAP session with state 0xad310c0fad3301b5 Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Finished EAP session with state 0xad310c0fad3301b5 Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Previous EAP request found for state 0xad310c0fad3301b5, released from the list Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: Peer sent flags --L Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: Peer indicated complete TLS record size will be 103 bytes Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: Got complete TLS record (103 bytes) Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: [eaptls verify] = length included Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: (other): before/accept initialization Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: before/accept initialization Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: <<< recv TLS 1.0 Handshake [length 0062], ClientHello Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 read client hello A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 0059], ServerHello Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write server hello A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 0a16], Certificate Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write certificate A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 014b], ServerKeyExchange Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write key exchange A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 00ab], CertificateRequest Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write certificate request A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 flush data Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: Need to read more data: SSLv3 read client certificate A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: TLS_accept: Need to read more data: SSLv3 read client certificate A Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: In SSL Handshake Phase Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: In SSL Accept mode Mon Nov 7 09:29:00 2016 : Debug: (1) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: Sending EAP Request (code 1) ID 3 length 1014 Mon Nov 7 09:29:00 2016 : Debug: (1) EAP: EAP session adding &reply:State = 0xad310c0fac3201b5 Mon Nov 7 09:29:00 2016 : Debug: (1) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (1) [EAP] = handled Mon Nov 7 09:29:00 2016 : Debug: (1) } # authenticate = handled Mon Nov 7 09:29:00 2016 : Debug: (1) Using Post-Auth-Type Challenge Mon Nov 7 09:29:00 2016 : Debug: (1) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:00 2016 : Debug: (1) session-state: Nothing to cache Mon Nov 7 09:29:00 2016 : Debug: (1) Sent Access-Challenge Id 34 from ip:1812 to ip:53266 length 0 Mon Nov 7 09:29:00 2016 : Debug: (1) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:00 2016 : Debug: (1) Tunnel-Type = VLAN Mon Nov 7 09:29:00 2016 : Debug: (1) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:00 2016 : Debug: (1) EAP-Message = 0x010303f60dc000000c7916030100590200005503019d2a3530cdfeb103453a4aca6d6d2b74406b6b3baab1348803d4f33064e0fe6020d6c207bf0b9b3371bd4da4967fdc7e9cd6b495edd679ef092abf616201a40234c01400000dff01000100000b0004030001021603010a160b000a12000a0f0005a8 Mon Nov 7 09:29:00 2016 : Debug: (1) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:00 2016 : Debug: (1) State = 0xad310c0fac3201b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (1) Proxy-State = 0x8b16a4ad00000357 Mon Nov 7 09:29:00 2016 : Debug: (1) Finished request Mon Nov 7 09:29:00 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:00 2016 : Debug: (2) Received Access-Request Id 35 from ip:53266 to ip:1812 length 294 Mon Nov 7 09:29:00 2016 : Debug: (2) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:00 2016 : Debug: (2) Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: (2) Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: (2) Called-Station-Id = "mac" Mon Nov 7 09:29:00 2016 : Debug: (2) Calling-Station-Id = "Emac" Mon Nov 7 09:29:00 2016 : Debug: (2) EAP-Message = 0x020300060d00 Mon Nov 7 09:29:00 2016 : Debug: (2) Message-Authenticator = 0x0ff4aeb9811220a5ba7853536d2654e2 Mon Nov 7 09:29:00 2016 : Debug: (2) NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: (2) NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: (2) NAS-Port-Id = "int" Mon Nov 7 09:29:00 2016 : Debug: (2) NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: (2) State = 0xad310c0fac3201b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (2) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:00 2016 : Debug: (2) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:00 2016 : Debug: (2) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:00 2016 : Debug: (2) Proxy-State = 0x8b16a4ad00000358 Mon Nov 7 09:29:00 2016 : Debug: (2) session-state: No cached attributes Mon Nov 7 09:29:00 2016 : Debug: (2) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (2) authorize { Mon Nov 7 09:29:00 2016 : Debug: (2) policy filter_username { Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name) -> TRUE Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ / /) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (2) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (2) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (2) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (2) } # if (&User-Name) = notfound Mon Nov 7 09:29:00 2016 : Debug: (2) } # policy filter_username = notfound Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (2) [preprocess] = ok Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:00 2016 : Debug: if { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: else { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:00 2016 : Debug: percent --> Y Mon Nov 7 09:29:00 2016 : Debug: percent --> m Mon Nov 7 09:29:00 2016 : Debug: percent --> d Mon Nov 7 09:29:00 2016 : Debug: (2) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: (2) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: (2) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: %t Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: percent --> t Mon Nov 7 09:29:00 2016 : Debug: (2) auth_log: EXPAND %t Mon Nov 7 09:29:00 2016 : Debug: (2) auth_log: --> Mon Nov 7 09:29:00 2016 Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: (2) [auth_log] = ok Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xad310c0fac3201b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4ad00000358' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020300060d00' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x0ff4aeb9811220a5ba7853536d2654e2' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:00 CET Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x0ff4aeb9811220a5ba7853536d2654e2 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4ad00000358 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020300060d00 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xad310c0fac3201b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x0ff4aeb9811220a5ba7853536d2654e2' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4ad00000358' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020300060d00' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xad310c0fac3201b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:00 2016 : Debug: (2) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (2) [GoPerl] = ok Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Peer sent EAP Response (code 2) ID 3 length 6 Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (2) [EAP] = updated Mon Nov 7 09:29:00 2016 : Debug: (2) } # authorize = updated Mon Nov 7 09:29:00 2016 : Debug: (2) Found Auth-Type = EAP Mon Nov 7 09:29:00 2016 : Debug: (2) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (2) authenticate { Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Expiring EAP session with state 0xad310c0fac3201b5 Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Finished EAP session with state 0xad310c0fac3201b5 Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Previous EAP request found for state 0xad310c0fac3201b5, released from the list Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:00 2016 : Debug: (2) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:00 2016 : Debug: (2) eap_tls: Peer sent flags --- Mon Nov 7 09:29:00 2016 : Debug: (2) eap_tls: Peer ACKed our handshake fragment Mon Nov 7 09:29:00 2016 : Debug: (2) eap_tls: [eaptls verify] = request Mon Nov 7 09:29:00 2016 : Debug: (2) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: Sending EAP Request (code 1) ID 4 length 1014 Mon Nov 7 09:29:00 2016 : Debug: (2) EAP: EAP session adding &reply:State = 0xad310c0faf3501b5 Mon Nov 7 09:29:00 2016 : Debug: (2) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (2) [EAP] = handled Mon Nov 7 09:29:00 2016 : Debug: (2) } # authenticate = handled Mon Nov 7 09:29:00 2016 : Debug: (2) Using Post-Auth-Type Challenge Mon Nov 7 09:29:00 2016 : Debug: (2) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:00 2016 : Debug: (2) session-state: Nothing to cache Mon Nov 7 09:29:00 2016 : Debug: (2) Sent Access-Challenge Id 35 from ip:1812 to ip:53266 length 0 Mon Nov 7 09:29:00 2016 : Debug: (2) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:00 2016 : Debug: (2) Tunnel-Type = VLAN Mon Nov 7 09:29:00 2016 : Debug: (2) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:00 2016 : Debug: (2) EAP-Message = 0x010403f60dc000000c794e3d53657276696365732c434e3d436f6e66696775726174696f6e2c44433d65766f736f66742c44433d636f6d3f63657274696669636174655265766f636174696f6e4c6973743f626173653f6f626a656374436c6173733d63524c446973747269627574696f6e506f696e74 Mon Nov 7 09:29:00 2016 : Debug: (2) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:00 2016 : Debug: (2) State = 0xad310c0faf3501b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (2) Proxy-State = 0x8b16a4ad00000358 Mon Nov 7 09:29:00 2016 : Debug: (2) Finished request Mon Nov 7 09:29:00 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:00 2016 : Debug: (3) Received Access-Request Id 36 from ip:53266 to ip:1812 length 294 Mon Nov 7 09:29:00 2016 : Debug: (3) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:00 2016 : Debug: (3) Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: (3) Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: (3) Called-Station-Id = "mac" Mon Nov 7 09:29:00 2016 : Debug: (3) Calling-Station-Id = "Emac" Mon Nov 7 09:29:00 2016 : Debug: (3) EAP-Message = 0x020400060d00 Mon Nov 7 09:29:00 2016 : Debug: (3) Message-Authenticator = 0xcc91a81de87ddd92509949ad76a58aa2 Mon Nov 7 09:29:00 2016 : Debug: (3) NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: (3) NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: (3) NAS-Port-Id = "int" Mon Nov 7 09:29:00 2016 : Debug: (3) NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: (3) State = 0xad310c0faf3501b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (3) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:00 2016 : Debug: (3) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:00 2016 : Debug: (3) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:00 2016 : Debug: (3) Proxy-State = 0x8b16a4ad00000359 Mon Nov 7 09:29:00 2016 : Debug: (3) session-state: No cached attributes Mon Nov 7 09:29:00 2016 : Debug: (3) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (3) authorize { Mon Nov 7 09:29:00 2016 : Debug: (3) policy filter_username { Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name) -> TRUE Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ / /) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (3) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (3) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (3) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (3) } # if (&User-Name) = notfound Mon Nov 7 09:29:00 2016 : Debug: (3) } # policy filter_username = notfound Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (3) [preprocess] = ok Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:00 2016 : Debug: if { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: else { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:00 2016 : Debug: percent --> Y Mon Nov 7 09:29:00 2016 : Debug: percent --> m Mon Nov 7 09:29:00 2016 : Debug: percent --> d Mon Nov 7 09:29:00 2016 : Debug: (3) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: (3) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: (3) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: %t Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: percent --> t Mon Nov 7 09:29:00 2016 : Debug: (3) auth_log: EXPAND %t Mon Nov 7 09:29:00 2016 : Debug: (3) auth_log: --> Mon Nov 7 09:29:00 2016 Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: (3) [auth_log] = ok Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xad310c0faf3501b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4ad00000359' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020400060d00' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xcc91a81de87ddd92509949ad76a58aa2' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:00 CET Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xcc91a81de87ddd92509949ad76a58aa2 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4ad00000359 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020400060d00 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xad310c0faf3501b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xcc91a81de87ddd92509949ad76a58aa2' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4ad00000359' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020400060d00' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xad310c0faf3501b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:00 2016 : Debug: (3) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (3) [GoPerl] = ok Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Peer sent EAP Response (code 2) ID 4 length 6 Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (3) [EAP] = updated Mon Nov 7 09:29:00 2016 : Debug: (3) } # authorize = updated Mon Nov 7 09:29:00 2016 : Debug: (3) Found Auth-Type = EAP Mon Nov 7 09:29:00 2016 : Debug: (3) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (3) authenticate { Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Expiring EAP session with state 0xad310c0faf3501b5 Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Finished EAP session with state 0xad310c0faf3501b5 Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Previous EAP request found for state 0xad310c0faf3501b5, released from the list Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:00 2016 : Debug: (3) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:00 2016 : Debug: (3) eap_tls: Peer sent flags --- Mon Nov 7 09:29:00 2016 : Debug: (3) eap_tls: Peer ACKed our handshake fragment Mon Nov 7 09:29:00 2016 : Debug: (3) eap_tls: [eaptls verify] = request Mon Nov 7 09:29:00 2016 : Debug: (3) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: Sending EAP Request (code 1) ID 5 length 1014 Mon Nov 7 09:29:00 2016 : Debug: (3) EAP: EAP session adding &reply:State = 0xad310c0fae3401b5 Mon Nov 7 09:29:00 2016 : Debug: (3) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (3) [EAP] = handled Mon Nov 7 09:29:00 2016 : Debug: (3) } # authenticate = handled Mon Nov 7 09:29:00 2016 : Debug: (3) Using Post-Auth-Type Challenge Mon Nov 7 09:29:00 2016 : Debug: (3) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:00 2016 : Debug: (3) session-state: Nothing to cache Mon Nov 7 09:29:00 2016 : Debug: (3) Sent Access-Challenge Id 36 from ip:1812 to ip:53266 length 0 Mon Nov 7 09:29:00 2016 : Debug: (3) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:00 2016 : Debug: (3) Tunnel-Type = VLAN Mon Nov 7 09:29:00 2016 : Debug: (3) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:00 2016 : Debug: (3) EAP-Message = 0x010503f60dc000000c790c6c1e34324764e66e257415316409658bcbfd29f3cdf3a16fe9befd75656448718bd782ac5ae9003c7315927093292aae1a9cdec93b66443ae41e837a0334fac81c4db4286053d6baf1c9af72912d429e59f0778f757218e27aa81163b847c92f0203010001a38201a4308201 Mon Nov 7 09:29:00 2016 : Debug: (3) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:00 2016 : Debug: (3) State = 0xad310c0fae3401b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (3) Proxy-State = 0x8b16a4ad00000359 Mon Nov 7 09:29:00 2016 : Debug: (3) Finished request Mon Nov 7 09:29:00 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:00 2016 : Debug: (4) Received Access-Request Id 37 from ip:53266 to ip:1812 length 294 Mon Nov 7 09:29:00 2016 : Debug: (4) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:00 2016 : Debug: (4) Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: (4) Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: (4) Called-Station-Id = "mac" Mon Nov 7 09:29:00 2016 : Debug: (4) Calling-Station-Id = "Emac" Mon Nov 7 09:29:00 2016 : Debug: (4) EAP-Message = 0x020500060d00 Mon Nov 7 09:29:00 2016 : Debug: (4) Message-Authenticator = 0x4a177304fa751e90ce51820bee70ecc6 Mon Nov 7 09:29:00 2016 : Debug: (4) NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: (4) NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: (4) NAS-Port-Id = "int" Mon Nov 7 09:29:00 2016 : Debug: (4) NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: (4) State = 0xad310c0fae3401b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (4) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:00 2016 : Debug: (4) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:00 2016 : Debug: (4) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:00 2016 : Debug: (4) Proxy-State = 0x8b16a4ad0000035a Mon Nov 7 09:29:00 2016 : Debug: (4) session-state: No cached attributes Mon Nov 7 09:29:00 2016 : Debug: (4) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (4) authorize { Mon Nov 7 09:29:00 2016 : Debug: (4) policy filter_username { Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name) -> TRUE Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ / /) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (4) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (4) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (4) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (4) } # if (&User-Name) = notfound Mon Nov 7 09:29:00 2016 : Debug: (4) } # policy filter_username = notfound Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (4) [preprocess] = ok Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:00 2016 : Debug: if { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: else { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:00 2016 : Debug: percent --> Y Mon Nov 7 09:29:00 2016 : Debug: percent --> m Mon Nov 7 09:29:00 2016 : Debug: percent --> d Mon Nov 7 09:29:00 2016 : Debug: (4) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: (4) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: (4) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: %t Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: percent --> t Mon Nov 7 09:29:00 2016 : Debug: (4) auth_log: EXPAND %t Mon Nov 7 09:29:00 2016 : Debug: (4) auth_log: --> Mon Nov 7 09:29:00 2016 Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: (4) [auth_log] = ok Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xad310c0fae3401b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4ad0000035a' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020500060d00' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x4a177304fa751e90ce51820bee70ecc6' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:00 CET Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x4a177304fa751e90ce51820bee70ecc6 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4ad0000035a Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020500060d00 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xad310c0fae3401b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x4a177304fa751e90ce51820bee70ecc6' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4ad0000035a' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020500060d00' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xad310c0fae3401b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:00 2016 : Debug: (4) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (4) [GoPerl] = ok Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Peer sent EAP Response (code 2) ID 5 length 6 Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (4) [EAP] = updated Mon Nov 7 09:29:00 2016 : Debug: (4) } # authorize = updated Mon Nov 7 09:29:00 2016 : Debug: (4) Found Auth-Type = EAP Mon Nov 7 09:29:00 2016 : Debug: (4) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (4) authenticate { Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Expiring EAP session with state 0xad310c0fae3401b5 Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Finished EAP session with state 0xad310c0fae3401b5 Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Previous EAP request found for state 0xad310c0fae3401b5, released from the list Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:00 2016 : Debug: (4) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:00 2016 : Debug: (4) eap_tls: Peer sent flags --- Mon Nov 7 09:29:00 2016 : Debug: (4) eap_tls: Peer ACKed our handshake fragment Mon Nov 7 09:29:00 2016 : Debug: (4) eap_tls: [eaptls verify] = request Mon Nov 7 09:29:00 2016 : Debug: (4) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: Sending EAP Request (code 1) ID 6 length 191 Mon Nov 7 09:29:00 2016 : Debug: (4) EAP: EAP session adding &reply:State = 0xad310c0fa93701b5 Mon Nov 7 09:29:00 2016 : Debug: (4) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (4) [EAP] = handled Mon Nov 7 09:29:00 2016 : Debug: (4) } # authenticate = handled Mon Nov 7 09:29:00 2016 : Debug: (4) Using Post-Auth-Type Challenge Mon Nov 7 09:29:00 2016 : Debug: (4) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:00 2016 : Debug: (4) session-state: Nothing to cache Mon Nov 7 09:29:00 2016 : Debug: (4) Sent Access-Challenge Id 37 from ip:1812 to ip:53266 length 0 Mon Nov 7 09:29:00 2016 : Debug: (4) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:00 2016 : Debug: (4) Tunnel-Type = VLAN Mon Nov 7 09:29:00 2016 : Debug: (4) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:00 2016 : Debug: (4) EAP-Message = 0x010600bf0d8000000c79d8e7562e9e16030100ab0d0000a303010240009d009b308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b30090603550406130244453110300e060355040813074261766172696131123010060355040713094e7572656d6265726731 Mon Nov 7 09:29:00 2016 : Debug: (4) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:00 2016 : Debug: (4) State = 0xad310c0fa93701b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (4) Proxy-State = 0x8b16a4ad0000035a Mon Nov 7 09:29:00 2016 : Debug: (4) Finished request Mon Nov 7 09:29:00 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:00 2016 : Debug: (5) Received Access-Request Id 38 from ip:53266 to ip:1812 length 1790 Mon Nov 7 09:29:00 2016 : Debug: (5) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:00 2016 : Debug: (5) Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: (5) Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: (5) Called-Station-Id = "mac" Mon Nov 7 09:29:00 2016 : Debug: (5) Calling-Station-Id = "Emac" Mon Nov 7 09:29:00 2016 : Debug: (5) EAP-Message = 0x020605d40dc00000073016030106f00b0005a000059d00059a30820596308204ffa0030201020213160000d0096957d9bd45cc808400060000d009300d06092a864886f70d01010b0500308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b3009060355040613 Mon Nov 7 09:29:00 2016 : Debug: (5) Message-Authenticator = 0xb6bccbe97059521b307cfdc6155905d4 Mon Nov 7 09:29:00 2016 : Debug: (5) NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: (5) NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: (5) NAS-Port-Id = "int" Mon Nov 7 09:29:00 2016 : Debug: (5) NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: (5) State = 0xad310c0fa93701b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: (5) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:00 2016 : Debug: (5) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:00 2016 : Debug: (5) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:00 2016 : Debug: (5) Proxy-State = 0x8b16a4ad0000035b Mon Nov 7 09:29:00 2016 : Debug: (5) session-state: No cached attributes Mon Nov 7 09:29:00 2016 : Debug: (5) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:00 2016 : Debug: (5) authorize { Mon Nov 7 09:29:00 2016 : Debug: (5) policy filter_username { Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name) -> TRUE Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name) { Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ / /) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (5) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (5) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:00 2016 : Debug: No matches Mon Nov 7 09:29:00 2016 : Debug: (5) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:00 2016 : Debug: (5) } # if (&User-Name) = notfound Mon Nov 7 09:29:00 2016 : Debug: (5) } # policy filter_username = notfound Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:00 2016 : Debug: (5) [preprocess] = ok Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:00 2016 : Debug: if { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: else { Mon Nov 7 09:29:00 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:00 2016 : Debug: } Mon Nov 7 09:29:00 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:00 2016 : Debug: percent --> Y Mon Nov 7 09:29:00 2016 : Debug: percent --> m Mon Nov 7 09:29:00 2016 : Debug: percent --> d Mon Nov 7 09:29:00 2016 : Debug: (5) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:00 2016 : Debug: (5) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: (5) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:00 2016 : Debug: %t Mon Nov 7 09:29:00 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:00 2016 : Debug: percent --> t Mon Nov 7 09:29:00 2016 : Debug: (5) auth_log: EXPAND %t Mon Nov 7 09:29:00 2016 : Debug: (5) auth_log: --> Mon Nov 7 09:29:00 2016 Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:00 2016 : Debug: (5) [auth_log] = ok Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xad310c0fa93701b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4ad0000035b' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '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' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xb6bccbe97059521b307cfdc6155905d4' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:00 CET Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xb6bccbe97059521b307cfdc6155905d4 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4ad0000035b Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020605d40dc00000073016030106f00b0005a000059d00059a30820596308204ffa0030201020213160000d0096957d9bd45cc808400060000d009300d06092a864886f70d01010b0500308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b30090603550406130244453110300e060355040813074261766172696131123010060355040713094e7572656d6265726731153013060355040a130c45766f736f667420476d624831153013060355040b130c45766f736f667420476d6248311530130603550403130c45766f736f667420476d6248301e170d3136303831353134303134305a170d3138303831353134303134305a301f311d301b0603550403131445564f30323130302e65766f736f66742e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afc52515cdb53d2173c492869d2fdf296c2afde310c301240746d2140f93482d2a08c4cda93eed450533635c932804c1776fd15f69ac8942a15a529b4689adf2a0f9db8613f250e91601a964e7611e0815e10d225df9e22ca0119c58f9dede6cc8775ef0f5add475325cd3ad87a93065a1948f9a53d01f10e66ec141fc83a32b571b5ad910a98a016044c39c8832e40fcf6d88cbb5b11a4173877464016d1fc786c28c5d2a04a215e8eecaa6b62241d88bf6d0ca789def Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xad310c0fa93701b58a2efb042a732cc3 Mon Nov 7 09:29:00 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:00 CET' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xb6bccbe97059521b307cfdc6155905d4' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4ad0000035b' Mon Nov 7 09:29:00 2016 : ERROR: (5) GoPerl: Failed to create pair - Length of Hex String is not even, got 1021 bytes Mon Nov 7 09:29:00 2016 : ERROR: (5) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020605d40dc00000073016030106f00b0005a000059d00059a30820596308204ffa0030201020213160000d0096957d9bd45cc808400060000d009300d06092a864886f70d01010b0500308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b30090603550406130244453110300e060355040813074261766172696131123010060355040713094e7572656d6265726731153013060355040a130c45766f736f667420476d624831153013060355040b130c45766f736f667420476d6248311530130603550403130c45766f736f667420476d6248301e170d3136303831353134303134305a170d3138303831353134303134305a301f311d301b0603550403131445564f30323130302e65766f736f66742e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afc52515cdb53d2173c492869d2fdf296c2afde310c301240746d2140f93482d2a08c4cda93eed450533635c932804c1776fd15f69ac8942a15a529b4689adf2a0f9db8613f250e91601a964e7611e0815e10d225df9e22ca0119c58f9dede6cc8775ef0f5add475325cd3ad87a93065a1948f9a53d01f10e66ec141fc83a32b571b5ad910a98a016044c39c8832e40fcf6d88cbb5b11a4173877464016d1fc786c28c5d2a04a215e8eecaa6b62241d88bf6d0ca789def' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xad310c0fa93701b58a2efb042a732cc3' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:00 2016 : Debug: (5) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:00 2016 : Debug: (5) [GoPerl] = ok Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (5) EAP: Got EAP_START message Mon Nov 7 09:29:00 2016 : Debug: (5) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:00 2016 : Debug: (5) [EAP] = handled Mon Nov 7 09:29:00 2016 : Debug: (5) } # authorize = handled Mon Nov 7 09:29:00 2016 : Debug: (5) There was no response configured: rejecting request Mon Nov 7 09:29:00 2016 : Debug: (5) Using Post-Auth-Type Reject Mon Nov 7 09:29:00 2016 : Debug: (5) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:00 2016 : Debug: (5) Delaying response for 1.000000 seconds Mon Nov 7 09:29:00 2016 : Debug: Waking up in 0.3 seconds. Mon Nov 7 09:29:00 2016 : Debug: Waking up in 0.6 seconds. Mon Nov 7 09:29:01 2016 : Debug: (5) Sending delayed response Mon Nov 7 09:29:01 2016 : Debug: (5) Sent Access-Reject Id 38 from ip:1812 to ip:53266 length 52 Mon Nov 7 09:29:01 2016 : Debug: (5) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:01 2016 : Debug: (5) Tunnel-Type = VLAN Mon Nov 7 09:29:01 2016 : Debug: (5) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:01 2016 : Debug: (5) EAP-Message = 0x0100000501 Mon Nov 7 09:29:01 2016 : Debug: (5) Proxy-State = 0x8b16a4ad0000035b Mon Nov 7 09:29:01 2016 : Debug: Waking up in 3.9 seconds. Mon Nov 7 09:29:05 2016 : Debug: (0) Cleaning up request packet ID 33 with timestamp +15 Mon Nov 7 09:29:05 2016 : Debug: (1) Cleaning up request packet ID 34 with timestamp +15 Mon Nov 7 09:29:05 2016 : Debug: (2) Cleaning up request packet ID 35 with timestamp +15 Mon Nov 7 09:29:05 2016 : Debug: (3) Cleaning up request packet ID 36 with timestamp +15 Mon Nov 7 09:29:05 2016 : Debug: (4) Cleaning up request packet ID 37 with timestamp +15 Mon Nov 7 09:29:05 2016 : Debug: (5) Cleaning up request packet ID 38 with timestamp +15 Mon Nov 7 09:29:05 2016 : Info: Ready to process requests Mon Nov 7 09:29:05 2016 : Debug: (6) Received Access-Request Id 191 from ip:62065 to ip:1812 length 300 Mon Nov 7 09:29:05 2016 : Debug: (6) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:05 2016 : Debug: (6) Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: (6) Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: (6) Called-Station-Id = "mac" Mon Nov 7 09:29:05 2016 : Debug: (6) Calling-Station-Id = "Emac" Mon Nov 7 09:29:05 2016 : Debug: (6) EAP-Message = 0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d Mon Nov 7 09:29:05 2016 : Debug: (6) Message-Authenticator = 0xda701e1460ad59a5bef7b468d424fdf5 Mon Nov 7 09:29:05 2016 : Debug: (6) NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: (6) NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: (6) NAS-Port-Id = "int" Mon Nov 7 09:29:05 2016 : Debug: (6) NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: (6) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:05 2016 : Debug: (6) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:05 2016 : Debug: (6) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:05 2016 : Debug: (6) Proxy-State = 0x8b16a477000013bc Mon Nov 7 09:29:05 2016 : Debug: (6) session-state: No State attribute Mon Nov 7 09:29:05 2016 : Debug: (6) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (6) authorize { Mon Nov 7 09:29:05 2016 : Debug: (6) policy filter_username { Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name) -> TRUE Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ / /) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (6) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (6) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (6) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (6) } # if (&User-Name) = notfound Mon Nov 7 09:29:05 2016 : Debug: (6) } # policy filter_username = notfound Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (6) [preprocess] = ok Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:05 2016 : Debug: if { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: else { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:05 2016 : Debug: percent --> Y Mon Nov 7 09:29:05 2016 : Debug: percent --> m Mon Nov 7 09:29:05 2016 : Debug: percent --> d Mon Nov 7 09:29:05 2016 : Debug: (6) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: (6) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: (6) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: %t Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: percent --> t Mon Nov 7 09:29:05 2016 : Debug: (6) auth_log: EXPAND %t Mon Nov 7 09:29:05 2016 : Debug: (6) auth_log: --> Mon Nov 7 09:29:05 2016 Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: (6) [auth_log] = ok Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a477000013bc' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xda701e1460ad59a5bef7b468d424fdf5' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:05 CET Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780a0) Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xda701e1460ad59a5bef7b468d424fdf5 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a477000013bc Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xda701e1460ad59a5bef7b468d424fdf5' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a477000013bc' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:05 2016 : Debug: (6) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (6) [GoPerl] = ok Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (6) EAP: Peer sent EAP Response (code 2) ID 1 length 30 Mon Nov 7 09:29:05 2016 : Debug: (6) EAP: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (6) [EAP] = ok Mon Nov 7 09:29:05 2016 : Debug: (6) } # authorize = ok Mon Nov 7 09:29:05 2016 : Debug: (6) Found Auth-Type = EAP Mon Nov 7 09:29:05 2016 : Debug: (6) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (6) authenticate { Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (6) EAP: Peer sent packet with method EAP Identity (1) Mon Nov 7 09:29:05 2016 : Debug: (6) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:05 2016 : Debug: (6) eap_tls: Initiating new EAP-TLS session Mon Nov 7 09:29:05 2016 : Debug: (6) eap_tls: Setting verify mode to require certificate from client Mon Nov 7 09:29:05 2016 : Debug: (6) eap_tls: [eaptls start] = request Mon Nov 7 09:29:05 2016 : Debug: (6) EAP: Sending EAP Request (code 1) ID 2 length 6 Mon Nov 7 09:29:05 2016 : Debug: (6) EAP: EAP session adding &reply:State = 0xbc991612bc9b1b1c Mon Nov 7 09:29:05 2016 : Debug: (6) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (6) [EAP] = handled Mon Nov 7 09:29:05 2016 : Debug: (6) } # authenticate = handled Mon Nov 7 09:29:05 2016 : Debug: (6) Using Post-Auth-Type Challenge Mon Nov 7 09:29:05 2016 : Debug: (6) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:05 2016 : Debug: (6) session-state: Nothing to cache Mon Nov 7 09:29:05 2016 : Debug: (6) Sent Access-Challenge Id 191 from ip:1812 to ip:62065 length 0 Mon Nov 7 09:29:05 2016 : Debug: (6) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:05 2016 : Debug: (6) Tunnel-Type = VLAN Mon Nov 7 09:29:05 2016 : Debug: (6) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:05 2016 : Debug: (6) EAP-Message = 0x010200060d20 Mon Nov 7 09:29:05 2016 : Debug: (6) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:05 2016 : Debug: (6) State = 0xbc991612bc9b1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (6) Proxy-State = 0x8b16a477000013bc Mon Nov 7 09:29:05 2016 : Debug: (6) Finished request Mon Nov 7 09:29:05 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:05 2016 : Debug: (7) Received Access-Request Id 192 from ip:62065 to ip:1812 length 401 Mon Nov 7 09:29:05 2016 : Debug: (7) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:05 2016 : Debug: (7) Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: (7) Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: (7) Called-Station-Id = "mac" Mon Nov 7 09:29:05 2016 : Debug: (7) Calling-Station-Id = "Emac" Mon Nov 7 09:29:05 2016 : Debug: (7) EAP-Message = 0x020200710d800000006716030100620100005e030158203b55802445e611f65fa1ce6dce2aaad2bd4fa6efcd8fbc39a82ec67ba7df00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100 Mon Nov 7 09:29:05 2016 : Debug: (7) Message-Authenticator = 0xfb422f536de99a914b06f1d84895b993 Mon Nov 7 09:29:05 2016 : Debug: (7) NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: (7) NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: (7) NAS-Port-Id = "int" Mon Nov 7 09:29:05 2016 : Debug: (7) NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: (7) State = 0xbc991612bc9b1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (7) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:05 2016 : Debug: (7) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:05 2016 : Debug: (7) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:05 2016 : Debug: (7) Proxy-State = 0x8b16a477000013be Mon Nov 7 09:29:05 2016 : Debug: (7) session-state: No cached attributes Mon Nov 7 09:29:05 2016 : Debug: (7) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (7) authorize { Mon Nov 7 09:29:05 2016 : Debug: (7) policy filter_username { Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name) -> TRUE Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ / /) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (7) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (7) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (7) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (7) } # if (&User-Name) = notfound Mon Nov 7 09:29:05 2016 : Debug: (7) } # policy filter_username = notfound Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (7) [preprocess] = ok Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:05 2016 : Debug: if { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: else { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:05 2016 : Debug: percent --> Y Mon Nov 7 09:29:05 2016 : Debug: percent --> m Mon Nov 7 09:29:05 2016 : Debug: percent --> d Mon Nov 7 09:29:05 2016 : Debug: (7) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: (7) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: (7) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: %t Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: percent --> t Mon Nov 7 09:29:05 2016 : Debug: (7) auth_log: EXPAND %t Mon Nov 7 09:29:05 2016 : Debug: (7) auth_log: --> Mon Nov 7 09:29:05 2016 Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: (7) [auth_log] = ok Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xbc991612bc9b1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a477000013be' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020200710d800000006716030100620100005e030158203b55802445e611f65fa1ce6dce2aaad2bd4fa6efcd8fbc39a82ec67ba7df00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xfb422f536de99a914b06f1d84895b993' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:05 CET Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xfb422f536de99a914b06f1d84895b993 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a477000013be Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020200710d800000006716030100620100005e030158203b55802445e611f65fa1ce6dce2aaad2bd4fa6efcd8fbc39a82ec67ba7df00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xbc991612bc9b1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xfb422f536de99a914b06f1d84895b993' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a477000013be' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020200710d800000006716030100620100005e030158203b55802445e611f65fa1ce6dce2aaad2bd4fa6efcd8fbc39a82ec67ba7df00001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xbc991612bc9b1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:05 2016 : Debug: (7) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (7) [GoPerl] = ok Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Peer sent EAP Response (code 2) ID 2 length 113 Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (7) [EAP] = updated Mon Nov 7 09:29:05 2016 : Debug: (7) } # authorize = updated Mon Nov 7 09:29:05 2016 : Debug: (7) Found Auth-Type = EAP Mon Nov 7 09:29:05 2016 : Debug: (7) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (7) authenticate { Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Expiring EAP session with state 0xad310c0fa93701b5 Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Finished EAP session with state 0xbc991612bc9b1b1c Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Previous EAP request found for state 0xbc991612bc9b1b1c, released from the list Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: Peer sent flags --L Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: Peer indicated complete TLS record size will be 103 bytes Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: Got complete TLS record (103 bytes) Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: [eaptls verify] = length included Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: (other): before/accept initialization Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: before/accept initialization Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: <<< recv TLS 1.0 Handshake [length 0062], ClientHello Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: SSLv3 read client hello A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: >>> send TLS 1.0 Handshake [length 0059], ServerHello Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: SSLv3 write server hello A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: >>> send TLS 1.0 Handshake [length 0a16], Certificate Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: SSLv3 write certificate A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: >>> send TLS 1.0 Handshake [length 014b], ServerKeyExchange Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: SSLv3 write key exchange A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: >>> send TLS 1.0 Handshake [length 00ab], CertificateRequest Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: SSLv3 write certificate request A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: SSLv3 flush data Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: Need to read more data: SSLv3 read client certificate A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: TLS_accept: Need to read more data: SSLv3 read client certificate A Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: In SSL Handshake Phase Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: In SSL Accept mode Mon Nov 7 09:29:05 2016 : Debug: (7) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: Sending EAP Request (code 1) ID 3 length 1014 Mon Nov 7 09:29:05 2016 : Debug: (7) EAP: EAP session adding &reply:State = 0xbc991612bd9a1b1c Mon Nov 7 09:29:05 2016 : Debug: (7) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (7) [EAP] = handled Mon Nov 7 09:29:05 2016 : Debug: (7) } # authenticate = handled Mon Nov 7 09:29:05 2016 : Debug: (7) Using Post-Auth-Type Challenge Mon Nov 7 09:29:05 2016 : Debug: (7) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:05 2016 : Debug: (7) session-state: Nothing to cache Mon Nov 7 09:29:05 2016 : Debug: (7) Sent Access-Challenge Id 192 from ip:1812 to ip:62065 length 0 Mon Nov 7 09:29:05 2016 : Debug: (7) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:05 2016 : Debug: (7) Tunnel-Type = VLAN Mon Nov 7 09:29:05 2016 : Debug: (7) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:05 2016 : Debug: (7) EAP-Message = 0x010303f60dc000000c7916030100590200005503017405ece3a76979c6423606db8bbc8e89338f5930242c2e2df1dbb77821a5ce762059d307fd3729f8a99a84071ff173ec9fb8e07c2f0c3bec035ee2471ee4517792c01400000dff01000100000b0004030001021603010a160b000a12000a0f0005a8 Mon Nov 7 09:29:05 2016 : Debug: (7) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:05 2016 : Debug: (7) State = 0xbc991612bd9a1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (7) Proxy-State = 0x8b16a477000013be Mon Nov 7 09:29:05 2016 : Debug: (7) Finished request Mon Nov 7 09:29:05 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:05 2016 : Debug: (8) Received Access-Request Id 193 from ip:62065 to ip:1812 length 294 Mon Nov 7 09:29:05 2016 : Debug: (8) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:05 2016 : Debug: (8) Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: (8) Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: (8) Called-Station-Id = "mac" Mon Nov 7 09:29:05 2016 : Debug: (8) Calling-Station-Id = "Emac" Mon Nov 7 09:29:05 2016 : Debug: (8) EAP-Message = 0x020300060d00 Mon Nov 7 09:29:05 2016 : Debug: (8) Message-Authenticator = 0xc778e271e85c68ff85689be787355d8d Mon Nov 7 09:29:05 2016 : Debug: (8) NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: (8) NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: (8) NAS-Port-Id = "int" Mon Nov 7 09:29:05 2016 : Debug: (8) NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: (8) State = 0xbc991612bd9a1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (8) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:05 2016 : Debug: (8) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:05 2016 : Debug: (8) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:05 2016 : Debug: (8) Proxy-State = 0x8b16a477000013bf Mon Nov 7 09:29:05 2016 : Debug: (8) session-state: No cached attributes Mon Nov 7 09:29:05 2016 : Debug: (8) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (8) authorize { Mon Nov 7 09:29:05 2016 : Debug: (8) policy filter_username { Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name) -> TRUE Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ / /) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (8) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (8) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (8) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (8) } # if (&User-Name) = notfound Mon Nov 7 09:29:05 2016 : Debug: (8) } # policy filter_username = notfound Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (8) [preprocess] = ok Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:05 2016 : Debug: if { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: else { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:05 2016 : Debug: percent --> Y Mon Nov 7 09:29:05 2016 : Debug: percent --> m Mon Nov 7 09:29:05 2016 : Debug: percent --> d Mon Nov 7 09:29:05 2016 : Debug: (8) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: (8) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: (8) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: %t Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: percent --> t Mon Nov 7 09:29:05 2016 : Debug: (8) auth_log: EXPAND %t Mon Nov 7 09:29:05 2016 : Debug: (8) auth_log: --> Mon Nov 7 09:29:05 2016 Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: (8) [auth_log] = ok Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xbc991612bd9a1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a477000013bf' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020300060d00' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xc778e271e85c68ff85689be787355d8d' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:05 CET Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xc778e271e85c68ff85689be787355d8d Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a477000013bf Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020300060d00 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xbc991612bd9a1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xc778e271e85c68ff85689be787355d8d' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a477000013bf' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020300060d00' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xbc991612bd9a1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:05 2016 : Debug: (8) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (8) [GoPerl] = ok Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Peer sent EAP Response (code 2) ID 3 length 6 Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (8) [EAP] = updated Mon Nov 7 09:29:05 2016 : Debug: (8) } # authorize = updated Mon Nov 7 09:29:05 2016 : Debug: (8) Found Auth-Type = EAP Mon Nov 7 09:29:05 2016 : Debug: (8) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (8) authenticate { Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Expiring EAP session with state 0xad310c0fa93701b5 Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Finished EAP session with state 0xbc991612bd9a1b1c Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Previous EAP request found for state 0xbc991612bd9a1b1c, released from the list Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:05 2016 : Debug: (8) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:05 2016 : Debug: (8) eap_tls: Peer sent flags --- Mon Nov 7 09:29:05 2016 : Debug: (8) eap_tls: Peer ACKed our handshake fragment Mon Nov 7 09:29:05 2016 : Debug: (8) eap_tls: [eaptls verify] = request Mon Nov 7 09:29:05 2016 : Debug: (8) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: Sending EAP Request (code 1) ID 4 length 1014 Mon Nov 7 09:29:05 2016 : Debug: (8) EAP: EAP session adding &reply:State = 0xbc991612be9d1b1c Mon Nov 7 09:29:05 2016 : Debug: (8) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (8) [EAP] = handled Mon Nov 7 09:29:05 2016 : Debug: (8) } # authenticate = handled Mon Nov 7 09:29:05 2016 : Debug: (8) Using Post-Auth-Type Challenge Mon Nov 7 09:29:05 2016 : Debug: (8) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:05 2016 : Debug: (8) session-state: Nothing to cache Mon Nov 7 09:29:05 2016 : Debug: (8) Sent Access-Challenge Id 193 from ip:1812 to ip:62065 length 0 Mon Nov 7 09:29:05 2016 : Debug: (8) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:05 2016 : Debug: (8) Tunnel-Type = VLAN Mon Nov 7 09:29:05 2016 : Debug: (8) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:05 2016 : Debug: (8) EAP-Message = 0x010403f60dc000000c794e3d53657276696365732c434e3d436f6e66696775726174696f6e2c44433d65766f736f66742c44433d636f6d3f63657274696669636174655265766f636174696f6e4c6973743f626173653f6f626a656374436c6173733d63524c446973747269627574696f6e506f696e74 Mon Nov 7 09:29:05 2016 : Debug: (8) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:05 2016 : Debug: (8) State = 0xbc991612be9d1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (8) Proxy-State = 0x8b16a477000013bf Mon Nov 7 09:29:05 2016 : Debug: (8) Finished request Mon Nov 7 09:29:05 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:05 2016 : Debug: (9) Received Access-Request Id 194 from ip:62065 to ip:1812 length 294 Mon Nov 7 09:29:05 2016 : Debug: (9) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:05 2016 : Debug: (9) Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: (9) Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: (9) Called-Station-Id = "mac" Mon Nov 7 09:29:05 2016 : Debug: (9) Calling-Station-Id = "Emac" Mon Nov 7 09:29:05 2016 : Debug: (9) EAP-Message = 0x020400060d00 Mon Nov 7 09:29:05 2016 : Debug: (9) Message-Authenticator = 0x1348d93d3baa2a73fabeb96bb7956e6e Mon Nov 7 09:29:05 2016 : Debug: (9) NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: (9) NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: (9) NAS-Port-Id = "int" Mon Nov 7 09:29:05 2016 : Debug: (9) NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: (9) State = 0xbc991612be9d1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (9) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:05 2016 : Debug: (9) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:05 2016 : Debug: (9) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:05 2016 : Debug: (9) Proxy-State = 0x8b16a477000013c0 Mon Nov 7 09:29:05 2016 : Debug: (9) session-state: No cached attributes Mon Nov 7 09:29:05 2016 : Debug: (9) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (9) authorize { Mon Nov 7 09:29:05 2016 : Debug: (9) policy filter_username { Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name) -> TRUE Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ / /) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (9) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (9) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (9) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (9) } # if (&User-Name) = notfound Mon Nov 7 09:29:05 2016 : Debug: (9) } # policy filter_username = notfound Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (9) [preprocess] = ok Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:05 2016 : Debug: if { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: else { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:05 2016 : Debug: percent --> Y Mon Nov 7 09:29:05 2016 : Debug: percent --> m Mon Nov 7 09:29:05 2016 : Debug: percent --> d Mon Nov 7 09:29:05 2016 : Debug: (9) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: (9) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: (9) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: %t Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: percent --> t Mon Nov 7 09:29:05 2016 : Debug: (9) auth_log: EXPAND %t Mon Nov 7 09:29:05 2016 : Debug: (9) auth_log: --> Mon Nov 7 09:29:05 2016 Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: (9) [auth_log] = ok Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xbc991612be9d1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a477000013c0' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020400060d00' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x1348d93d3baa2a73fabeb96bb7956e6e' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:05 CET Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x1348d93d3baa2a73fabeb96bb7956e6e Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a477000013c0 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020400060d00 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xbc991612be9d1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x1348d93d3baa2a73fabeb96bb7956e6e' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a477000013c0' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020400060d00' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xbc991612be9d1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:05 2016 : Debug: (9) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (9) [GoPerl] = ok Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Peer sent EAP Response (code 2) ID 4 length 6 Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (9) [EAP] = updated Mon Nov 7 09:29:05 2016 : Debug: (9) } # authorize = updated Mon Nov 7 09:29:05 2016 : Debug: (9) Found Auth-Type = EAP Mon Nov 7 09:29:05 2016 : Debug: (9) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (9) authenticate { Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Expiring EAP session with state 0xad310c0fa93701b5 Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Finished EAP session with state 0xbc991612be9d1b1c Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Previous EAP request found for state 0xbc991612be9d1b1c, released from the list Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:05 2016 : Debug: (9) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:05 2016 : Debug: (9) eap_tls: Peer sent flags --- Mon Nov 7 09:29:05 2016 : Debug: (9) eap_tls: Peer ACKed our handshake fragment Mon Nov 7 09:29:05 2016 : Debug: (9) eap_tls: [eaptls verify] = request Mon Nov 7 09:29:05 2016 : Debug: (9) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: Sending EAP Request (code 1) ID 5 length 1014 Mon Nov 7 09:29:05 2016 : Debug: (9) EAP: EAP session adding &reply:State = 0xbc991612bf9c1b1c Mon Nov 7 09:29:05 2016 : Debug: (9) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (9) [EAP] = handled Mon Nov 7 09:29:05 2016 : Debug: (9) } # authenticate = handled Mon Nov 7 09:29:05 2016 : Debug: (9) Using Post-Auth-Type Challenge Mon Nov 7 09:29:05 2016 : Debug: (9) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:05 2016 : Debug: (9) session-state: Nothing to cache Mon Nov 7 09:29:05 2016 : Debug: (9) Sent Access-Challenge Id 194 from ip:1812 to ip:62065 length 0 Mon Nov 7 09:29:05 2016 : Debug: (9) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:05 2016 : Debug: (9) Tunnel-Type = VLAN Mon Nov 7 09:29:05 2016 : Debug: (9) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:05 2016 : Debug: (9) EAP-Message = 0x010503f60dc000000c790c6c1e34324764e66e257415316409658bcbfd29f3cdf3a16fe9befd75656448718bd782ac5ae9003c7315927093292aae1a9cdec93b66443ae41e837a0334fac81c4db4286053d6baf1c9af72912d429e59f0778f757218e27aa81163b847c92f0203010001a38201a4308201 Mon Nov 7 09:29:05 2016 : Debug: (9) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:05 2016 : Debug: (9) State = 0xbc991612bf9c1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (9) Proxy-State = 0x8b16a477000013c0 Mon Nov 7 09:29:05 2016 : Debug: (9) Finished request Mon Nov 7 09:29:05 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:05 2016 : Debug: (10) Received Access-Request Id 195 from ip:62065 to ip:1812 length 294 Mon Nov 7 09:29:05 2016 : Debug: (10) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:05 2016 : Debug: (10) Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: (10) Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: (10) Called-Station-Id = "mac" Mon Nov 7 09:29:05 2016 : Debug: (10) Calling-Station-Id = "Emac" Mon Nov 7 09:29:05 2016 : Debug: (10) EAP-Message = 0x020500060d00 Mon Nov 7 09:29:05 2016 : Debug: (10) Message-Authenticator = 0x9ecb0b95cd210dec1ad700b2ed4dca30 Mon Nov 7 09:29:05 2016 : Debug: (10) NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: (10) NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: (10) NAS-Port-Id = "int" Mon Nov 7 09:29:05 2016 : Debug: (10) NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: (10) State = 0xbc991612bf9c1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (10) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:05 2016 : Debug: (10) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:05 2016 : Debug: (10) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:05 2016 : Debug: (10) Proxy-State = 0x8b16a477000013c1 Mon Nov 7 09:29:05 2016 : Debug: (10) session-state: No cached attributes Mon Nov 7 09:29:05 2016 : Debug: (10) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (10) authorize { Mon Nov 7 09:29:05 2016 : Debug: (10) policy filter_username { Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name) -> TRUE Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ / /) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (10) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (10) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (10) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (10) } # if (&User-Name) = notfound Mon Nov 7 09:29:05 2016 : Debug: (10) } # policy filter_username = notfound Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (10) [preprocess] = ok Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:05 2016 : Debug: if { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: else { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:05 2016 : Debug: percent --> Y Mon Nov 7 09:29:05 2016 : Debug: percent --> m Mon Nov 7 09:29:05 2016 : Debug: percent --> d Mon Nov 7 09:29:05 2016 : Debug: (10) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: (10) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: (10) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: %t Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: percent --> t Mon Nov 7 09:29:05 2016 : Debug: (10) auth_log: EXPAND %t Mon Nov 7 09:29:05 2016 : Debug: (10) auth_log: --> Mon Nov 7 09:29:05 2016 Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: (10) [auth_log] = ok Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xbc991612bf9c1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a477000013c1' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020500060d00' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x9ecb0b95cd210dec1ad700b2ed4dca30' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:05 CET Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x9ecb0b95cd210dec1ad700b2ed4dca30 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a477000013c1 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020500060d00 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xbc991612bf9c1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x9ecb0b95cd210dec1ad700b2ed4dca30' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a477000013c1' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020500060d00' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xbc991612bf9c1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:05 2016 : Debug: (10) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (10) [GoPerl] = ok Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Peer sent EAP Response (code 2) ID 5 length 6 Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: No EAP Start, assuming it's an on-going EAP conversation Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (10) [EAP] = updated Mon Nov 7 09:29:05 2016 : Debug: (10) } # authorize = updated Mon Nov 7 09:29:05 2016 : Debug: (10) Found Auth-Type = EAP Mon Nov 7 09:29:05 2016 : Debug: (10) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (10) authenticate { Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authenticate]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Expiring EAP session with state 0xad310c0fa93701b5 Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Finished EAP session with state 0xbc991612bf9c1b1c Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Previous EAP request found for state 0xbc991612bf9c1b1c, released from the list Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Peer sent packet with method EAP TLS (13) Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Calling submodule eap_tls to process data Mon Nov 7 09:29:05 2016 : Debug: (10) eap_tls: Continuing EAP-TLS Mon Nov 7 09:29:05 2016 : Debug: (10) eap_tls: Peer sent flags --- Mon Nov 7 09:29:05 2016 : Debug: (10) eap_tls: Peer ACKed our handshake fragment Mon Nov 7 09:29:05 2016 : Debug: (10) eap_tls: [eaptls verify] = request Mon Nov 7 09:29:05 2016 : Debug: (10) eap_tls: [eaptls process] = handled Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: Sending EAP Request (code 1) ID 6 length 191 Mon Nov 7 09:29:05 2016 : Debug: (10) EAP: EAP session adding &reply:State = 0xbc991612b89f1b1c Mon Nov 7 09:29:05 2016 : Debug: (10) modsingle[authenticate]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (10) [EAP] = handled Mon Nov 7 09:29:05 2016 : Debug: (10) } # authenticate = handled Mon Nov 7 09:29:05 2016 : Debug: (10) Using Post-Auth-Type Challenge Mon Nov 7 09:29:05 2016 : Debug: (10) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:05 2016 : Debug: (10) session-state: Nothing to cache Mon Nov 7 09:29:05 2016 : Debug: (10) Sent Access-Challenge Id 195 from ip:1812 to ip:62065 length 0 Mon Nov 7 09:29:05 2016 : Debug: (10) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:05 2016 : Debug: (10) Tunnel-Type = VLAN Mon Nov 7 09:29:05 2016 : Debug: (10) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:05 2016 : Debug: (10) EAP-Message = 0x010600bf0d8000000c79f9f05ad8b916030100ab0d0000a303010240009d009b308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b30090603550406130244453110300e060355040813074261766172696131123010060355040713094e7572656d6265726731 Mon Nov 7 09:29:05 2016 : Debug: (10) Message-Authenticator = 0x00000000000000000000000000000000 Mon Nov 7 09:29:05 2016 : Debug: (10) State = 0xbc991612b89f1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (10) Proxy-State = 0x8b16a477000013c1 Mon Nov 7 09:29:05 2016 : Debug: (10) Finished request Mon Nov 7 09:29:05 2016 : Debug: Waking up in 4.9 seconds. Mon Nov 7 09:29:05 2016 : Debug: (11) Received Access-Request Id 196 from ip:62065 to ip:1812 length 1790 Mon Nov 7 09:29:05 2016 : Debug: (11) User-Name = "host/PC1.company.com" Mon Nov 7 09:29:05 2016 : Debug: (11) Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: (11) Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: (11) Called-Station-Id = "mac" Mon Nov 7 09:29:05 2016 : Debug: (11) Calling-Station-Id = "Emac" Mon Nov 7 09:29:05 2016 : Debug: (11) EAP-Message = 0x020605d40dc00000073016030106f00b0005a000059d00059a30820596308204ffa0030201020213160000d0096957d9bd45cc808400060000d009300d06092a864886f70d01010b0500308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b3009060355040613 Mon Nov 7 09:29:05 2016 : Debug: (11) Message-Authenticator = 0x739c3b1e84126711f01592bf9d6e016a Mon Nov 7 09:29:05 2016 : Debug: (11) NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: (11) NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: (11) NAS-Port-Id = "int" Mon Nov 7 09:29:05 2016 : Debug: (11) NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: (11) State = 0xbc991612b89f1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: (11) Cisco-AVPair = "service-type=Framed" Mon Nov 7 09:29:05 2016 : Debug: (11) Cisco-AVPair = "audit-session-id=0A016E02000227DD56CD715C" Mon Nov 7 09:29:05 2016 : Debug: (11) Cisco-AVPair = "method=dot1x" Mon Nov 7 09:29:05 2016 : Debug: (11) Proxy-State = 0x8b16a477000013c2 Mon Nov 7 09:29:05 2016 : Debug: (11) session-state: No cached attributes Mon Nov 7 09:29:05 2016 : Debug: (11) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Mon Nov 7 09:29:05 2016 : Debug: (11) authorize { Mon Nov 7 09:29:05 2016 : Debug: (11) policy filter_username { Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name) -> TRUE Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name) { Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ / /) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ / /) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /@[^@]*@/ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /\.\./ ) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /\.\./ ) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (11) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (11) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /\.$/) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /\.$/) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /@\./) { Mon Nov 7 09:29:05 2016 : Debug: No matches Mon Nov 7 09:29:05 2016 : Debug: (11) if (&User-Name =~ /@\./) -> FALSE Mon Nov 7 09:29:05 2016 : Debug: (11) } # if (&User-Name) = notfound Mon Nov 7 09:29:05 2016 : Debug: (11) } # policy filter_username = notfound Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: calling preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: returned from preprocess (rlm_preprocess) Mon Nov 7 09:29:05 2016 : Debug: (11) [preprocess] = ok Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: calling auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Mon Nov 7 09:29:05 2016 : Debug: if { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IP-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: else { Mon Nov 7 09:29:05 2016 : Debug: attribute --> Packet-Src-IPv6-Address Mon Nov 7 09:29:05 2016 : Debug: } Mon Nov 7 09:29:05 2016 : Debug: literal --> /auth-detail- Mon Nov 7 09:29:05 2016 : Debug: percent --> Y Mon Nov 7 09:29:05 2016 : Debug: percent --> m Mon Nov 7 09:29:05 2016 : Debug: percent --> d Mon Nov 7 09:29:05 2016 : Debug: (11) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Mon Nov 7 09:29:05 2016 : Debug: (11) auth_log: --> /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: (11) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ip/auth-detail-20161107 Mon Nov 7 09:29:05 2016 : Debug: %t Mon Nov 7 09:29:05 2016 : Debug: Parsed xlat tree: Mon Nov 7 09:29:05 2016 : Debug: percent --> t Mon Nov 7 09:29:05 2016 : Debug: (11) auth_log: EXPAND %t Mon Nov 7 09:29:05 2016 : Debug: (11) auth_log: --> Mon Nov 7 09:29:05 2016 Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: returned from auth_log (rlm_detail) Mon Nov 7 09:29:05 2016 : Debug: (11) [auth_log] = ok Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: calling GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xbc991612b89f1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a477000013c2' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020605d40dc00000073016030106f00b0005a000059d00059a30820596308204ffa0030201020213160000d0096957d9bd45cc808400060000d009300d06092a864886f70d01010b0500308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b30090603550406130244453110300e060355040813074261766172696131123010060355040713094e7572656d6265726731153013060355040a130c45766f736f667420476d624831153013060355040b130c45766f736f667420476d6248311530130603550403130c45766f736f667420476d6248301e170d3136303831353134303134305a170d3138303831353134303134305a301f311d301b0603550403131445564f30323130302e65766f736f66742e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100afc52515cdb53d2173c492869d2fdf296c2afde310c301240746d2140f93482d2a08c4cda93eed450533635c932804c1776fd15f69ac8942a15a529b4689adf2a0f9db8613f250e91601a964e7611e0815e10d225df9e22ca0119c58f9dede6cc8775ef0f5add475325cd3ad87a93065a1948f9a53d01f10e66ec141fc83a32b571b5ad910a98a016044c39c8832e40fcf6d88cbb5b11a4173877464016d1fc786c28c5d2a04a215e8eecaa6b62241d88bf6d0ca789def' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x739c3b1e84126711f01592bf9d6e016a' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 7 2016 09:29:05 CET Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x11780b8) Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x739c3b1e84126711f01592bf9d6e016a Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = mac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = Emac Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a477000013c2 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 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 Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC1.company.com Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xbc991612b89f1b1c610e12c96949bf3e Mon Nov 7 09:29:05 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = int Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 7 2016 09:29:05 CET' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000227DD56CD715C' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x739c3b1e84126711f01592bf9d6e016a' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'mac' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'Emac' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a477000013c2' Mon Nov 7 09:29:05 2016 : ERROR: (11) GoPerl: Failed to create pair - Length of Hex String is not even, got 1021 bytes Mon Nov 7 09:29:05 2016 : ERROR: (11) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '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' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC1.company.com' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xbc991612b89f1b1c610e12c96949bf3e' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'int' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Mon Nov 7 09:29:05 2016 : Debug: (11) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: returned from GoPerl (rlm_perl) Mon Nov 7 09:29:05 2016 : Debug: (11) [GoPerl] = ok Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: calling EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (11) EAP: Got EAP_START message Mon Nov 7 09:29:05 2016 : Debug: (11) modsingle[authorize]: returned from EAP (rlm_eap) Mon Nov 7 09:29:05 2016 : Debug: (11) [EAP] = handled Mon Nov 7 09:29:05 2016 : Debug: (11) } # authorize = handled Mon Nov 7 09:29:05 2016 : Debug: (11) There was no response configured: rejecting request Mon Nov 7 09:29:05 2016 : Debug: (11) Using Post-Auth-Type Reject Mon Nov 7 09:29:05 2016 : Debug: (11) Post-Auth-Type sub-section not found. Ignoring. Mon Nov 7 09:29:05 2016 : Debug: (11) Delaying response for 1.000000 seconds Mon Nov 7 09:29:05 2016 : Debug: Waking up in 0.3 seconds. Mon Nov 7 09:29:05 2016 : Debug: Waking up in 0.6 seconds. Mon Nov 7 09:29:06 2016 : Debug: (11) Sending delayed response Mon Nov 7 09:29:06 2016 : Debug: (11) Sent Access-Reject Id 196 from ip:1812 to ip:62065 length 52 Mon Nov 7 09:29:06 2016 : Debug: (11) Tunnel-Medium-Type = IEEE-802 Mon Nov 7 09:29:06 2016 : Debug: (11) Tunnel-Type = VLAN Mon Nov 7 09:29:06 2016 : Debug: (11) Tunnel-Private-Group-Id = "2" Mon Nov 7 09:29:06 2016 : Debug: (11) EAP-Message = 0x0100000501 Mon Nov 7 09:29:06 2016 : Debug: (11) Proxy-State = 0x8b16a477000013c2 Mon Nov 7 09:29:06 2016 : Debug: Waking up in 3.9 seconds. ^C