Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.









First request
-----------------------------------------------------------------------
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=246, length=118
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0xdea130c5f457800efa41f1341e7892c8
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        EAP-Message = 0x02ff001001686f73742f3235302d6974
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 0
  rlm_eap: EAP packet type response id 255 length 16
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 0
modcall: entering group redundant  for request 0
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to 10.0.0.31:389, authentication 0
rlm_ldap: bind as cn=billing,ou=admins,ou=radius,dc=meinedomain,dc=de/billing to 10.0.0.31:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 0
modcall: leaving group redundant  (returns ok) for request 0
modcall: leaving group authorize (returns updated) for request 0
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
  rlm_eap: EAP Identity
  rlm_eap: processing type tls
 rlm_eap_tls: Requiring client certificate
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
  modcall[authenticate]: module "eap" returns handled for request 0
modcall: leaving group authenticate (returns handled) for request 0
Sending Access-Challenge of id 246 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x010000060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x03d780ab2c32251b7b836f0099db072b
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 246 with timestamp 445b44ef
Nothing to do.  Sleeping until we see a request.















Second Request same machine after 30 Seconds without changing anything!!!!!
-----------------------------------------------------------------------


rad_recv: Access-Request packet from host 10.0.0.219:1024, id=247, length=118
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x6000d952d0c2217e93254bb6b0bfa449
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        EAP-Message = 0x0202001001686f73742f3235302d6974
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module "preprocess" returns ok for request 1
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 1
  rlm_eap: EAP packet type response id 2 length 16
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 1
modcall: entering group redundant  for request 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 1
modcall: leaving group redundant  (returns ok) for request 1
modcall: leaving group authorize (returns updated) for request 1
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 1
  rlm_eap: EAP Identity
  rlm_eap: processing type tls
 rlm_eap_tls: Requiring client certificate
  rlm_eap_tls: Initiate
  rlm_eap_tls: Start returned 1
  modcall[authenticate]: module "eap" returns handled for request 1
modcall: leaving group authenticate (returns handled) for request 1
Sending Access-Challenge of id 247 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x010300060d20
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x0a4a1ece167e7799df77020267d2c94c
Finished request 1
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=248, length=200
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0xa6cb4cd941f606e52dbfd74b01fc7a96
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x0a4a1ece167e7799df77020267d2c94c
        EAP-Message = 0x020300500d800000004616030100410100003d0301445b453688927d9aecd053c78587543f046acc8b04db7b4571ec3c8e2535a81400001600040005000a000900640062000300060013001200630100
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2
  modcall[authorize]: module "preprocess" returns ok for request 2
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 2
  rlm_eap: EAP packet type response id 3 length 80
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 2
modcall: entering group redundant  for request 2
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 2
modcall: leaving group redundant  (returns ok) for request 2
modcall: leaving group authorize (returns updated) for request 2
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 2
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Length Included
  eaptls_verify returned 11
    (other): before/accept initialization
    TLS_accept: before/accept initialization
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello
    TLS_accept: SSLv3 read client hello A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello
    TLS_accept: SSLv3 write server hello A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0f1c], Certificate
    TLS_accept: SSLv3 write certificate A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 00c9], CertificateRequest
    TLS_accept: SSLv3 write certificate request A
    TLS_accept: SSLv3 flush data
    TLS_accept:error in SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 2
modcall: leaving group authenticate (returns handled) for request 2
Sending Access-Challenge of id 248 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x0104040a0dc00000103e160301004a020000460301445b4513ae66f6170ad19da357d064d4a724d117964565e0c510bea36fe0117b203603fe44572e62ff6246ac6982095cb4f0870d9b4e64196dc706ff528efab2aa0004001603010f1c0b000f18000f150007a7308207a33082058ba003020102020105300d06092a864886f70d01010505003081b7310b3009060355040613024445311b301906035504081312426164656e20577565727474656d62657267311c301a060355040713135a656c6c20616d204861726d6572736261636831243022060355040a141b4d6574616c64796e65205a656c6c20476d6248202620436f2e4b47310b300906
        EAP-Message = 0x0355040b13024954311830160603550403130f63612e6d6574616c64796e652e64653120301e06092a864886f70d0109011611726f6f74406d6574616c64796e652e6465301e170d3036303330323135343835345a170d3136303232383135343835345a3081bc310b3009060355040613024445311b301906035504081312426164656e20577565727474656d62657267311c301a060355040713135a656c6c20616d204861726d6572736261636831243022060355040a141b4d6574616c64796e65205a656c6c20476d6248202620436f2e4b47310b3009060355040b13024954311d301b06035504031314726164697573312e6d6574616c64796e
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0xccf93a670c801e030be122b2f38acc4cf65de6e841bb
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xa7249fb449e6e8e9364b5ff05f432e99
Finished request 2
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=249, length=126
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x5e2547126d1dd7d5c6c8fe9f705c3b89
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0xa7249fb449e6e8e9364b5ff05f432e99
        EAP-Message = 0x020400060d00
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 3
  modcall[authorize]: module "preprocess" returns ok for request 3
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 3
  rlm_eap: EAP packet type response id 4 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 3
modcall: entering group redundant  for request 3
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 3
modcall: leaving group redundant  (returns ok) for request 3
modcall: leaving group authorize (returns updated) for request 3
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 3
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 3
modcall: leaving group authenticate (returns handled) for request 3
Sending Access-Challenge of id 249 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x0105040a0dc00000103e94509154cd6c431232893f61f45a2fa2a606e72bc7a4b44d103a7e54213c4a0348884f6a55e595f029b0353cf73906cae364459d6128190203010001a38201b1308201ad30090603551d1304023000301106096086480186f8420101040403020640302b06096086480186f842010d041e161c54696e7943412047656e657261746564204365727469666963617465301d0603551d0e041604143dfbd88891dded63be0cf88b63921fba1f063a513081ec0603551d230481e43081e1801438153150201217545098c7ca3e570f7b7595b0a1a181bda481ba3081b7310b3009060355040613024445311b301906035504081312
        EAP-Message = 0x426164656e20577565727474656d62657267311c301a060355040713135a656c6c20616d204861726d6572736261636831243022060355040a141b4d6574616c64796e65205a656c6c20476d6248202620436f2e4b47310b3009060355040b13024954311830160603550403130f63612e6d6574616c64796e652e64653120301e06092a864886f70d0109011611726f6f74406d6574616c64796e652e64658209009ad805ec41643ce9301c0603551d12041530138111726f6f74406d6574616c64796e652e6465301c0603551d11041530138111726f6f74406d6574616c64796e652e646530160603551d250101ff040c300a06082b060105050703
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0x402d10ecd2259a8bba094da3944c38f914c2346e9308
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x1a1111c3f331d797b97aba8fa59284b7
Finished request 3
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=250, length=126
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0xd9a5cf2f27380eca1a1153d266ea3e4b
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x1a1111c3f331d797b97aba8fa59284b7
        EAP-Message = 0x020500060d00
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 4
  modcall[authorize]: module "preprocess" returns ok for request 4
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 4
  rlm_eap: EAP packet type response id 5 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 4
modcall: entering group redundant  for request 4
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 4
modcall: leaving group redundant  (returns ok) for request 4
modcall: leaving group authorize (returns updated) for request 4
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 4
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 4
modcall: leaving group authenticate (returns handled) for request 4
Sending Access-Challenge of id 250 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x0106040a0dc00000103ea19f78b8ee000768308207643082054ca0030201020209009ad805ec41643ce9300d06092a864886f70d01010505003081b7310b3009060355040613024445311b301906035504081312426164656e20577565727474656d62657267311c301a060355040713135a656c6c20616d204861726d6572736261636831243022060355040a141b4d6574616c64796e65205a656c6c20476d6248202620436f2e4b47310b3009060355040b13024954311830160603550403130f63612e6d6574616c64796e652e64653120301e06092a864886f70d0109011611726f6f74406d6574616c64796e652e6465301e170d303630323137
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0x82016f3082016b301d0603551d0e0416041438153150
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x1b367fb2a46a9d1a1b763a0218837774
Finished request 4
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=251, length=126
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x42b883ae5b38a18a0e83c0403f966b25
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x1b367fb2a46a9d1a1b763a0218837774
        EAP-Message = 0x020600060d00
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 5
  modcall[authorize]: module "preprocess" returns ok for request 5
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 5
  rlm_eap: EAP packet type response id 6 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 5
modcall: entering group redundant  for request 5
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 5
modcall: leaving group redundant  (returns ok) for request 5
modcall: leaving group authorize (returns updated) for request 5
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 5
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 5
modcall: leaving group authenticate (returns handled) for request 5
Sending Access-Challenge of id 251 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x0107040a0dc00000103e201217545098c7ca3e570f7b7595b0a13081ec0603551d230481e43081e1801438153150201217545098c7ca3e570f7b7595b0a1a181bda481ba3081b7310b3009060355040613024445311b301906035504081312426164656e20577565727474656d62657267311c301a060355040713135a656c6c20616d204861726d6572736261636831243022060355040a141b4d6574616c64796e65205a656c6c20476d6248202620436f2e4b47310b3009060355040b13024954311830160603550403130f63612e6d6574616c64796e652e64653120301e06092a864886f70d0109011611726f6f74406d6574616c64796e652e64
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0x2620436f2e4b47310b3009060355040b130249543118
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x824c974be12a78ef41cee2a2d8b140d6
Finished request 5
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=252, length=126
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x464f1ee2d94324323dd66a5d127c72b8
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x824c974be12a78ef41cee2a2d8b140d6
        EAP-Message = 0x020700060d00
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 6
  modcall[authorize]: module "preprocess" returns ok for request 6
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 6
  rlm_eap: EAP packet type response id 7 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 6
modcall: entering group redundant  for request 6
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 6
modcall: leaving group redundant  (returns ok) for request 6
modcall: leaving group authorize (returns updated) for request 6
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 6
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake fragment handler
  eaptls_verify returned 1
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 6
modcall: leaving group authenticate (returns handled) for request 6
Sending Access-Challenge of id 252 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x010800480d800000103e30160603550403130f63612e6d6574616c64796e652e64653120301e06092a864886f70d0109011611726f6f74406d6574616c64796e652e64650e000000
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x249966f232f9bed2ea3a0a0a7cfe7230
Finished request 6
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=253, length=1620
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0xe7fc160f68807e285277779e825cb4e1
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x249966f232f9bed2ea3a0a0a7cfe7230
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0x7a832eb33f738b912d69910209003365a3fcd157feebc2baac9aa8bd057fef907bb66e355b01aa20ac29d0daa23c0e912682b0aacde57684edab7f3672aa0709a1ce6ac08ff6f11e75c18c999b4ed61e93c74b2b28e8d55ab586f3bf89805d093e3967a3ff3853f78b28818388cf9cc6b2119d341a784ab9b8be00eae6b42fa2e21922932792e33871c5c4e537da8211e9f7d1166ae5de257c67268400dccadba70547b21ea0aba66b63e19c5f665f395b14beeb3428985688b8d8f91db8b500aeac6a354433173913d78f410203010001a38201ba308201b630090603551d1304023000301106096086480186f84201010404030204b0302b06096086
        EAP-Message = 0x480186f842010d041e161c54696e7943412047656e657261746564204365727469666963617465301d0603551d0e041604140d85102b7a2ac6fd307495f66b6b58ae3fedbac53081ec0603551d230481e43081e1801438153150201217545098c7ca3e570f7b7595b0a1a181bda481ba3081b7310b3009060355040613024445311b301906035504081312426164656e20577565727474656d62657267311c301a060355040713135a656c6c20616d204861726d6572736261636831243022060355040a141b4d6574616c64796e65205a656c6c20476d6248202620436f2e4b47310b3009060355040b13024954311830160603550403130f63612e6d
        EAP-Message = 0x6574616c64796e652e64653120301e06092a864886f70d0109011611726f6f74406d6574616c64796e652e64658209009ad805ec41643ce9301c0603551d12041530138111726f6f74406d6574616c64796e652e646530090603551d1104023000300e0603551d0f0101ff0404030205a030220603551d250101ff0418301606082b06010505070302060a2b000601040182371102300d06092a864886f70d010105050003820201007831edfbbc6de5b9799a93fc8c6ae81d34136516c72e1c4d17f6ba7b1543f59fc57d57e6802a04264421724dbc3e53bca8701316472e8151
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 7
  modcall[authorize]: module "preprocess" returns ok for request 7
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 7
  rlm_eap: EAP packet type response id 8 length 253
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 7
modcall: entering group redundant  for request 7
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 7
modcall: leaving group redundant  (returns ok) for request 7
modcall: leaving group authorize (returns updated) for request 7
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 7
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  Received EAP-TLS First Fragment of the message
  eaptls_verify returned 9
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 7
modcall: leaving group authenticate (returns handled) for request 7
Sending Access-Challenge of id 253 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x010900060d00
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0xefb7bd3c8b3ac932b22a7152fbaaddbc
Finished request 7
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=254, length=1620
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x726c661f09267324e5114b2b86e7d7bd
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0xefb7bd3c8b3ac932b22a7152fbaaddbc
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0x2453685647d323c4bd46eb226991b9ed7f451b8678681aa143b18bf2bbbcf88389d818c447a5a20142219ae096d82cd64c45204039a2a0cdf4de99f898a4dead369d80737bffaccb9e4a50926eb322349f17178bc423953f9bbeb67bc14be5850f6014491cbfdd19aaa728366b89cfbc2ae4b6b975b2c6b760d01dc1b813fb56988b7826bdc0e0ceb43893825dfbd1bf22f3b94332309661263f061420242b80b4e88bf9c00310ec7a8b4c35ce6821e6b5043db6217528c5dde13fbd6f744adf10410d10ae3a5d99bb71dc456be3dc039e8bd06e1128dcffba024f3f78122e523db4d2084166a5500399440676a43aab6e4534e8e0c439af7bae3b6f02
        EAP-Message = 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
        EAP-Message = 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
        EAP-Message = 0x2a076769aa39b034ad60fb7e7a4c0de109ef4f9809728f1cbbe43f18e5c6b7c6a99551812cef83a156ab5b3508f74165295d46a3807bf2e7709b231b061c473339903db7abf55c4e1b4f8d6c595855a724afe439967a61e94b20f1566f0bf8e9597968101ba8939aceff5aaa27d0fd06050a5b3102201843ab22efb961d93045de8f40d0805bf587d268c2dea0b9bb70922e12341aa4e1fa49354b9a3e0aa5fe9684b98f273c15c469f3412f623ca43d83d053e86dc2f8085e381344c468a459294ec699050d448f262b18e1cf39e19db04a294669b1e4d400607e8f183967a124
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 8
  modcall[authorize]: module "preprocess" returns ok for request 8
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 8
  rlm_eap: EAP packet type response id 9 length 253
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 8
modcall: entering group redundant  for request 8
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 8
modcall: leaving group redundant  (returns ok) for request 8
modcall: leaving group authorize (returns updated) for request 8
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 8
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls:  More fragments to follow
  eaptls_verify returned 10
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 8
modcall: leaving group authenticate (returns handled) for request 8
Sending Access-Challenge of id 254 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x010a00060d00
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x4030a4dd91c5eff126bf6988e5f0d497
Finished request 8
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=255, length=177
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x9a6fa58e218b77a3172d1685a9879794
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x4030a4dd91c5eff126bf6988e5f0d497
        EAP-Message = 0x020a00390d00753399c0a950bba7140301000101160301002060a70b95ef3181b88852f7f3f278f9018ccc31626db23ddbf841c1fb970ee5db
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 9
  modcall[authorize]: module "preprocess" returns ok for request 9
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 9
  rlm_eap: EAP packet type response id 10 length 57
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 9
modcall: entering group redundant  for request 9
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 9
modcall: leaving group redundant  (returns ok) for request 9
modcall: leaving group authorize (returns updated) for request 9
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 9
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
  eaptls_verify returned 7
  rlm_eap_tls: Done initial handshake
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 078b], Certificate
chain-depth=1,
error=0
--> User-Name = host/250-it
--> BUF-Name = ca.meinedomain.de
--> subject = /C=DE/ST=Baden Wuerttemberg/L=Zell am Harmersbach/O=meinedomain Zell GmbH & Co.KG/OU=IT/CN=ca.meinedomain.de/emailAddress=root@meinedomain.de
--> issuer  = /C=DE/ST=Baden Wuerttemberg/L=Zell am Harmersbach/O=meinedomain Zell GmbH & Co.KG/OU=IT/CN=ca.meinedomain.de/emailAddress=root@meinedomain.de
--> verify return:1
chain-depth=0,
error=0
--> User-Name = host/250-it
--> BUF-Name = 250-it
--> subject = /C=DE/ST=Baden Wuerttemberg/L=Zell am Harmersbach/O=meinedomain Zell GmbH & Co.KG/OU=IT/CN=250-it
--> issuer  = /C=DE/ST=Baden Wuerttemberg/L=Zell am Harmersbach/O=meinedomain Zell GmbH & Co.KG/OU=IT/CN=ca.meinedomain.de/emailAddress=root@meinedomain.de
--> verify return:1
    TLS_accept: SSLv3 read client certificate A
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0206], ClientKeyExchange
    TLS_accept: SSLv3 read client key exchange A
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0206], CertificateVerify
    TLS_accept: SSLv3 read certificate verify A
  rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001]
  rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished
    TLS_accept: SSLv3 read finished A
  rlm_eap_tls: >>> TLS 1.0 ChangeCipherSpec [length 0001]
    TLS_accept: SSLv3 write change cipher spec A
  rlm_eap_tls: >>> TLS 1.0 Handshake [length 0010], Finished
    TLS_accept: SSLv3 write finished A
    TLS_accept: SSLv3 flush data
    (other): SSL negotiation finished successfully
SSL Connection Established
  eaptls_process returned 13
  modcall[authenticate]: module "eap" returns handled for request 9
modcall: leaving group authenticate (returns handled) for request 9
Sending Access-Challenge of id 255 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        EAP-Message = 0x010b00350d800000002b14030100010116030100204c6cd96234c1f96e1b46684749196b860a106fb7d14356c5b0f7c1efb483e439
        Message-Authenticator = 0x00000000000000000000000000000000
        State = 0x3431827efcb79ee63138f23bf6d462c8
Finished request 9
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 10.0.0.219:1024, id=0, length=126
        NAS-IP-Address = 10.0.0.219
        NAS-Port-Type = Ethernet
        Service-Type = Framed-User
        Message-Authenticator = 0x6f90efcc84b05750ebe4f1fb18acf961
        NAS-Port = 91
        Framed-MTU = 1490
        User-Name = "host/250-it"
        Calling-Station-Id = "00-12-3F-8C-CC-94"
        State = 0x3431827efcb79ee63138f23bf6d462c8
        EAP-Message = 0x020b00060d00
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 10
  modcall[authorize]: module "preprocess" returns ok for request 10
    rlm_realm: No '@' in User-Name = "host/250-it", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 10
  rlm_eap: EAP packet type response id 11 length 6
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module "eap" returns updated for request 10
modcall: entering group redundant  for request 10
rlm_ldap: - authorize
rlm_ldap: performing user authorization for host/250-it
radius_xlat:  '(&(uid=host/250-it)(objectclass=radiusprofile))'
radius_xlat:  'ou=users,ou=radius,dc=meinedomain,dc=de'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=meinedomain,dc=de, with filter (&(uid=host/250-it)(objectclass=radiusprofile))
rlm_ldap: performing search in uid=vlan_1,ou=profiles,ou=radius,dc=meinedomain,dc=de, with filter (objectclass=radiusprofile)
rlm_ldap: Adding radiusTunnelPrivateGroupId as Tunnel-Private-Group-Id, value 1 & op=11
rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value IEEE-802 & op=11
rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value VLAN & op=11
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user host/250-it authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 10
modcall: leaving group redundant  (returns ok) for request 10
modcall: leaving group authorize (returns updated) for request 10
  rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 10
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
rlm_eap_tls: Received EAP-TLS ACK message
  rlm_eap_tls: ack handshake is finished
  eaptls_verify returned 3
  eaptls_process returned 3
  rlm_eap: Freeing handler
  modcall[authenticate]: module "eap" returns ok for request 10
modcall: leaving group authenticate (returns ok) for request 10
Sending Access-Accept of id 0 to 10.0.0.219 port 1024
        Tunnel-Private-Group-Id:0 = "1"
        Tunnel-Medium-Type:0 = IEEE-802
        Tunnel-Type:0 = VLAN
        MS-MPPE-Recv-Key = 0x9c0204f8d21c44b765a903cc69e8f11752c9407b0d2a54826b740886e13627d5
        MS-MPPE-Send-Key = 0x5e9d58f368ce55c5c36f35acdcb0f54417d613a86410e08486f670468680e469
        EAP-Message = 0x030b0004
        Message-Authenticator = 0x00000000000000000000000000000000
        User-Name = "host/250-it"
Finished request 10
Going to the next request
--- Walking the entire request list ---
Waking up in 5 seconds...
--- Walking the entire request list ---
Cleaning up request 1 ID 247 with timestamp 445b4513
Cleaning up request 2 ID 248 with timestamp 445b4513
Cleaning up request 3 ID 249 with timestamp 445b4513
Cleaning up request 4 ID 250 with timestamp 445b4513
Cleaning up request 5 ID 251 with timestamp 445b4513
Cleaning up request 6 ID 252 with timestamp 445b4513
Cleaning up request 7 ID 253 with timestamp 445b4513
Cleaning up request 8 ID 254 with timestamp 445b4513
Cleaning up request 9 ID 255 with timestamp 445b4513
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 10 ID 0 with timestamp 445b4514
Nothing to do.  Sleeping until we see a request.
-------------------------------------------------------------------------  