tnt@kalik.net wrote:
debug? It could be that they just haven't been copied from inner to outer reply.
Ivan Kalik Kalik Informatika ISP
Ok, here I attached the debug file of radiusd. Thanks. -- Mustapha BOUIKHIF Service Syste`mes d'Information CNRS - DR4 tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=170, length=175 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x111dafa8ccc8e078366fa74cd8a0e237 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 148 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313730 Proxying request 0 to home server 157.136.124.25 port 1812 Sending Access-Request of id 148 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313730 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=148, length=69 EAP-Message = 0x010200061520 Message-Authenticator = 0xef5707bb181aadc8286d5294f248d3fc State = 0x8994ef708996fa914393563198f302a5 Proxy-State = 0x313730 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 170 to 157.136.122.46 port 20000 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708996fa914393563198f302a5 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=171, length=227 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xdbcedf4455a05bfe7b12d4be3ba0b444 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 43 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313731 Proxying request 1 to home server 157.136.124.25 port 1812 Sending Access-Request of id 43 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313731 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=43, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x71bb5fbcc097c8528cb5eb78702c0c27 State = 0x8994ef708897fa914393563198f302a5 Proxy-State = 0x313731 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 171 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708897fa914393563198f302a5 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=172, length=173 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x9ac5d42d98a65a6d32d21131959cbcaa server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Proxying request 2 to home server 157.136.124.25 port 1812 Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=207, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x29162638cb7d7f04a5c5d083281e38ff State = 0x8994ef708b90fa914393563198f302a5 Proxy-State = 0x313732 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 172 to 157.136.122.46 port 20000 EAP-Message = 0x0104040015c000000b2f5666987a84fc75eb0a7efebf768264180db21954ab6ef5f43c252f519eb27c458f9c5309f6844c18c289d48e22e44e53b54ae20fb20e9d66bfc784a8906507a117422ade3a69da37e41d98f7a4e1ab1fc20003713082036d30820255a003020102020102300d06092a864886f70d0101040500302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253301e170d3031303432373035343634395a170d3131303432353035343634395a3034310b3009060355040613024652310d300b060355040a1304434e5253311630140603550403130d434e52532d5374616e64 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x4ba7262365c2ea069a72bbb88ccb8a5fef7936257e00d7f30694fb8344292637c7eee987ce6c86801b713dd262aff6cd626c530fe67a93008c7b2e33e0411daabe659876f1950774b3e63f5375d54b06364b29c4f6dc8e138040107382ad157b047150b53733f2c864bba1107e36c6adaf6f7052a6d1aeccccbab0e859128f620dad03dd4b2ae8893988512fed61e8b73087db27556d6687a351098061715105be131dd94130fc755f0a969b18ffbe9081b413c0721108fd6a9a6a07bdf4832cb460366407fa3d6aa7b090047683dd33cb34e21798040ba1000368308203643082024ca003020102020100300d06092a864886f70d0101040500302b31 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708b90fa914393563198f302a5 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=173, length=173 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x348ec3932736f498d2eb984b101ce83b server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 240 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313733 Proxying request 3 to home server 157.136.124.25 port 1812 Sending Access-Request of id 240 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313733 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=240, length=914 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0xdce053b312feabb1d0aad0206c1999d8 State = 0x8994ef708a91fa914393563198f302a5 Proxy-State = 0x313733 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 173 to 157.136.122.46 port 20000 EAP-Message = 0x0105034d158000000b2f310d300b060355040a1304434e5253310d300b06035504031304434e5253301e170d3031303432373035343433365a170d3231303432323035343433365a302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e525330820122300d06092a864886f70d01010105000382010f003082010a0282010100dd77abf1eafc78b514a1dc776256978c2fb754c24c54a6d47d22477b74a9f7e3ad7c55b214f0485d988f02bd9211b6884fc415f56f585bf789b527eaafa0fca08e88868f9f24b6904e24dc67d04f8f7e562d1b280772b11767a00edb424ec37cb425a2f88c04b1 EAP-Message = 0xa9825d8c8fd4837beeaa9fd7d2dbf65b6ec28110d69aab5d881c36ca0564684b8b9ec0509423fdb628b5af5da4dda6c5d3d8572b3ef8b5bac4d8ff12225f24690762e4344a0877ca30bbecd3ed759068a28c717227de15262c2521842a9e5718817223bd661f0fe3b7bd17da12ba1954f41c2d8f715233b1b628b67a68cb9a4d5238fa488cc14b89968fc6175bcbb90e0e815c1ac7343957bd0203010001a3819230818f300c0603551d13040530030101ff301d0603551d0e0416041456eb68b9d25c7e98b5a553c3916f6358c4f96bb730530603551d23044c304a801456eb68b9d25c7e98b5a553c3916f6358c4f96bb7a12fa42d302b310b300906 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708a91fa914393563198f302a5 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=174, length=367 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x9161d478c80610965e422626ce1d55cd server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 103 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313734 Proxying request 4 to home server 157.136.124.25 port 1812 Sending Access-Request of id 103 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313734 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=103, length=124 EAP-Message = 0x0106003d15800000003314030100010116030100288ec389ae7aec2ea8b4a731625a8cf45c2a52a86fa10386e1c5b1cbeaafa68e2cd48a611483c43405 Message-Authenticator = 0x284e02e4c36061fdc70a9e54ad89e723 State = 0x8994ef708d92fa914393563198f302a5 Proxy-State = 0x313734 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 174 to 157.136.122.46 port 20000 EAP-Message = 0x0106003d15800000003314030100010116030100288ec389ae7aec2ea8b4a731625a8cf45c2a52a86fa10386e1c5b1cbeaafa68e2cd48a611483c43405 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708d92fa914393563198f302a5 Finished request 4. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=175, length=270 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xcea6df25f9a700127c6ba38dc26e8187 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 210 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313735 Proxying request 5 to home server 157.136.124.25 port 1812 Sending Access-Request of id 210 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313735 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 157.136.124.25 port 1812, id=210, length=234 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Trapeze-VLAN-Name = "VISITEUR" Tunnel-Private-Group-Id:0 = "VISITEUR" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0xa0171fce3435a454a90e8b5c0f72147ff38677ab4117d5f2d6cb818d3263054b MS-MPPE-Send-Key = 0xb65e0e65033432a40fca267262c58d030b77580619084fa4239f49820752916e EAP-Message = 0x03060004 Message-Authenticator = 0x813fd9f78d66a742972f50a992ff0b70 Proxy-State = 0x313735 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [anonymous@dr4.cnrs.fr] (from client MX200 port 1273 cli 00-13-CE-89-BC-8A) +- entering group post-auth {...} [reply_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[reply_log] returns ok } # server radius.cnrs-gif.fr Sending Access-Accept of id 175 to 157.136.122.46 port 20000 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0xa0171fce3435a454a90e8b5c0f72147ff38677ab4117d5f2d6cb818d3263054b MS-MPPE-Send-Key = 0xb65e0e65033432a40fca267262c58d030b77580619084fa4239f49820752916e EAP-Message = 0x03060004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 5. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=176, length=176 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x375a1e5adf78fbb1fff2afd2cd72d58d server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 85 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313736 Proxying request 6 to home server 157.136.124.25 port 1812 Sending Access-Request of id 85 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313736 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=85, length=69 EAP-Message = 0x010200061520 Message-Authenticator = 0xd8ce20fc115fd701342a5aa20fe65f35 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb Proxy-State = 0x313736 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 176 to 157.136.122.46 port 20000 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb Finished request 6. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=177, length=228 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xa5585139c73179b43ca751d09a96e526 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313737 Proxying request 7 to home server 157.136.124.25 port 1812 Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313737 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=207, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x808b18134190ceb09c05def43a003376 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb Proxy-State = 0x313737 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 177 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0206c0300e0603551d0f0101ff0404030205e0301d0603551d250416301406082b0601050507030106082b06010505070302302f06096086480186f842010d0422162043657274696669636174207365727665757220434e52532d5374616e64617264301d0603551d0e041604145b7436fe42f81e869c44933d44123639aa64503d30530603551d23044c304a80146759a5e507744903ef05cfcc2ea418d510c89e3ca12fa42d302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e525382010230220603551d11041b301982176c6f63616c7261646975732e636e72732d6769662e66723046 EAP-Message = 0x0603551d1f043f303d303ba039a0378635687474703a2f2f63726c732e73657276696365732e636e72732e66722f434e52532d5374616e646172642f6765746465722e63726c300d06092a864886f70d010105050003820101003c9216cd17a4df131f508f72c34016229350a35201e99ec1d4268dd1a12e2e1923140c186421ef7f6db694f655cb3792d13fc897e08a99d6d328a22522d9a77a934b5564465c0a9f177c3b5afab50ea816bd2ccf2a5c31ac0fe3d377d6cd957e24bba0ede3b802ad84efc359c0641d65748151a76147feb8f971c191cce6c2b419aeaa03416f3f9b87a1023f67de0e2e5be7c6348f3ec077569471194287e350be3855 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb Finished request 7. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=178, length=174 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x00897a820652710e8ada51bcf1c64e83 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 138 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313738 Proxying request 8 to home server 157.136.124.25 port 1812 Sending Access-Request of id 138 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313738 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=138, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x09a4b4ee33cbd0839bb5b5b390de8e901e599c20d54b1eedd74c4f86fa1c3a2aa1e9ac05a09dbf0203010001a3819230818f300c0603551d13040530030101ff301d0603551d0e041604146759a5e507744903ef05cfcc2ea418d510c89e3c30530603551d23044c304a801456eb68b9d25c7e98b5a553c3916f6358c4f96bb7a12fa42d302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253820100300b0603551d0f040403020106300d06092a864886f70d0101040500038201010006034783724590c24ee121d7ab17a9015506ca406d55a21d5eebe2142359e409e290f63c8d36060f EAP-Message = 0x4ba7262365c2ea069a72bbb88ccb8a5fef7936257e00d7f30694fb8344292637c7eee987ce6c86801b713dd262aff6cd626c530fe67a93008c7b2e33e0411daabe659876f1950774b3e63f5375d54b06364b29c4f6dc8e138040107382ad157b047150b53733f2c864bba1107e36c6adaf6f7052a6d1aeccccbab0e859128f620dad03dd4b2ae8893988512fed61e8b73087db27556d6687a351098061715105be131dd94130fc755f0a969b18ffbe9081b413c0721108fd6a9a6a07bdf4832cb460366407fa3d6aa7b090047683dd33cb34e21798040ba1000368308203643082024ca003020102020100300d06092a864886f70d0101040500302b31 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x96da27aa03f43101e8e9199216fadbfa State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb Proxy-State = 0x313738 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 178 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb Finished request 8. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=179, length=174 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x016b83d1c5bbddeb4ad9ce9e6094c023 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 144 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313739 Proxying request 9 to home server 157.136.124.25 port 1812 Sending Access-Request of id 144 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313739 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=144, length=914 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253820100300b0603551d0f040403020106300d06092a864886f70d0101040500038201010038d7c329bc7a77a25e164749865ed019386ade810802b9a7a002a688b80de24935cee6aaa234d2f9a384379a15e9592bb7bdcc11ae29218f8f9139fa9d77e2e839eaec2ed6ca4847224c65b1d3b66f581b342e8a109d128474a4795257005314c898de816ec50b75a75ae7d335084588f5845098f0073ec5863e2e095aa2dcb6a06b7b37ab9f03706eddf59cc00e05ecb5845b23b489211088adfb2d08e400131c55b38f77be20acdc011c797c670c5a5f4fb9 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x9d7323cf47cb9dcca1918ca949b01065 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb Proxy-State = 0x313739 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 179 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb Finished request 9. Going to the next request Waking up in 4.5 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=180, length=368 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xc3570d11bf4ed8551e8302326c109ab4 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 64 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313830 Proxying request 10 to home server 157.136.124.25 port 1812 Sending Access-Request of id 64 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313830 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=64, length=124 EAP-Message = 0x0106003d15800000003314030100010116030100285454b07dcf8b87b46296188ab6b07aaa1b6b42b73118258e14e35c79671d48682c0da8f8c9cde840 Message-Authenticator = 0xb617e8a7ace9f224b715d70714f0f357 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb Proxy-State = 0x313830 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 180 to 157.136.122.46 port 20000 EAP-Message = 0x0106003d15800000003314030100010116030100285454b07dcf8b87b46296188ab6b07aaa1b6b42b73118258e14e35c79671d48682c0da8f8c9cde840 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb Finished request 10. Going to the next request Waking up in 4.4 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=181, length=271 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xa8f1085dad5399a5b4f32107bbd2ab07 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 46 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313831 Proxying request 11 to home server 157.136.124.25 port 1812 Sending Access-Request of id 46 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313831 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 157.136.124.25 port 1812, id=46, length=234 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Trapeze-VLAN-Name = "VISITEUR" Tunnel-Private-Group-Id:0 = "VISITEUR" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0x07864480f31b0a1026a3c323c074edb6322939cb89a0a80a3c8da3c780863b37 MS-MPPE-Send-Key = 0xe03096931feb575aa58d491a59338c2d2e565b7d9eb5435bce600c7a655defb5 EAP-Message = 0x03060004 Message-Authenticator = 0x20eed679ce104e6497c7f772823a6415 Proxy-State = 0x313831 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [anonymous@dr4.cnrs.fr] (from client MX200 port 1274 cli 00-13-CE-89-BC-8A) +- entering group post-auth {...} [reply_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[reply_log] returns ok } # server radius.cnrs-gif.fr Sending Access-Accept of id 181 to 157.136.122.46 port 20000 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0x07864480f31b0a1026a3c323c074edb6322939cb89a0a80a3c8da3c780863b37 MS-MPPE-Send-Key = 0xe03096931feb575aa58d491a59338c2d2e565b7d9eb5435bce600c7a655defb5 EAP-Message = 0x03060004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 11. Going to the next request Waking up in 4.4 seconds.