Phil Mayers thanks it works !!! But after auth radius going down with message Segmentation fault. AS-IP-Address = 172.100.50.24 NAS-Port = 1 Framed-MTU = 1388 NAS-Port-Type = Wireless-802.11 Service-Type = Authenticate-Only Called-Station-Id = "00-18-25-10-2b-20:SOME" Calling-Station-Id = "0c-60-76-7c-af-d0" NAS-Port-Id = "0c-60-76-7c-af-d0" State = 0xa1759ecfa772878fdc8ea6894bd21bdb User-Name = "testuser" EAP-Message = 0x0207009019001703010020e2682cb330a2b26327dbdf5b0f75ff4cc88263dc762230422137cf3c31a862831703010060c6fc24cf2bc03974380904eaadcf3ec855144dce86f9f0ab43321d1bd29990f4a0c80d2b5e7acddd7dd14e6350e16d5d8deb92c9c7ea672c934b04325afe61998aa7afec350bdd7cb2d5bcc8e46bd1af866fa8c051662d89a8bcb1fdd3a11dac Message-Authenticator = 0x416646a7c9bf61e87f0a523ea2ab38b5 Thu Nov 4 19:42:55 2010 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Thu Nov 4 19:42:55 2010 : Info: +- entering group authorize {...} Thu Nov 4 19:42:55 2010 : Info: ++[preprocess] returns ok Thu Nov 4 19:42:55 2010 : Info: ++[chap] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[mschap] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[digest] returns noop Thu Nov 4 19:42:55 2010 : Info: [eap] EAP packet type response id 7 length 144 Thu Nov 4 19:42:55 2010 : Info: [eap] Continuing tunnel setup. Thu Nov 4 19:42:55 2010 : Info: ++[eap] returns ok Thu Nov 4 19:42:55 2010 : Info: Found Auth-Type = EAP Thu Nov 4 19:42:55 2010 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/default Thu Nov 4 19:42:55 2010 : Info: +- entering group authenticate {...} Thu Nov 4 19:42:55 2010 : Info: [eap] Request found, released from the list Thu Nov 4 19:42:55 2010 : Info: [eap] EAP/peap Thu Nov 4 19:42:55 2010 : Info: [eap] processing type peap Thu Nov 4 19:42:55 2010 : Info: [peap] processing EAP-TLS Thu Nov 4 19:42:55 2010 : Info: [peap] eaptls_verify returned 7 Thu Nov 4 19:42:55 2010 : Info: [peap] Done initial handshake Thu Nov 4 19:42:55 2010 : Info: [peap] eaptls_process returned 7 Thu Nov 4 19:42:55 2010 : Info: [peap] EAPTLS_OK Thu Nov 4 19:42:55 2010 : Info: [peap] Session established. Decoding tunneled attributes. Thu Nov 4 19:42:55 2010 : Info: [peap] Peap state phase2 Thu Nov 4 19:42:55 2010 : Info: [peap] EAP type mschapv2 Thu Nov 4 19:42:55 2010 : Info: [peap] Got tunneled request EAP-Message = 0x020700421a0207003d319efde001465e794686be86bbd699982f0000000000000000ba5cbf47e1f74caa982438716a3d0b0764c999d747b37b7f006e635f766c6164 server { Thu Nov 4 19:42:55 2010 : Debug: PEAP: Setting User-Name to testuser Sending tunneled request EAP-Message = 0x020700421a0207003d319efde001465e794686be86bbd699982f0000000000000000ba5cbf47e1f74caa982438716a3d0b0764c999d747b37b7f006e635f766c6164 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "testuser" State = 0x6a0cdd0a6a0bc75fe06fe99ae32a7b2d server inner-tunnel { Thu Nov 4 19:42:55 2010 : Info: # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/inner-tunnel Thu Nov 4 19:42:55 2010 : Info: +- entering group authorize {...} Thu Nov 4 19:42:55 2010 : Info: ++[chap] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[mschap] returns noop Thu Nov 4 19:42:55 2010 : Info: [suffix] No '@' in User-Name = "testuser", looking up realm NULL Thu Nov 4 19:42:55 2010 : Info: [suffix] Found realm "DEFAULT" Thu Nov 4 19:42:55 2010 : Info: [suffix] Adding Stripped-User-Name = "testuser" Thu Nov 4 19:42:55 2010 : Info: [suffix] Adding Realm = "DEFAULT" Thu Nov 4 19:42:55 2010 : Info: [suffix] Proxying request from user testuser to realm DEFAULT Thu Nov 4 19:42:55 2010 : Info: [suffix] Preparing to proxy authentication request to realm "DEFAULT" Thu Nov 4 19:42:55 2010 : Info: ++[suffix] returns updated Thu Nov 4 19:42:55 2010 : Info: [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. Thu Nov 4 19:42:55 2010 : Info: ++[eap] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[files] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[expiration] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[logintime] returns noop Thu Nov 4 19:42:55 2010 : Info: ++[pap] returns noop } # server inner-tunnel Thu Nov 4 19:42:55 2010 : Info: [peap] Got tunneled reply code 0 Thu Nov 4 19:42:55 2010 : Debug: PEAP: Calling authenticate in order to initiate tunneled EAP session. Thu Nov 4 19:42:55 2010 : Info: # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel Thu Nov 4 19:42:55 2010 : Info: +- entering group authenticate {...} Thu Nov 4 19:42:55 2010 : Info: modsingle[authenticate]: calling eap (rlm_eap) for request 7 Thu Nov 4 19:42:55 2010 : Info: [eap] Request found, released from the list Thu Nov 4 19:42:55 2010 : Info: [eap] EAP/mschapv2 Thu Nov 4 19:42:55 2010 : Info: [eap] processing type mschapv2 Thu Nov 4 19:42:55 2010 : Info: [eap] Not-EAP proxy set. Not composing EAP Thu Nov 4 19:42:55 2010 : Info: modsingle[authenticate]: returned from eap (rlm_eap) for request 7 Thu Nov 4 19:42:55 2010 : Info: ++[eap] returns handled Thu Nov 4 19:42:55 2010 : Debug: PEAP: Tunneled authentication will be proxied to DEFAULT Thu Nov 4 19:42:55 2010 : Debug: PEAP: Remembering to do EAP-MS-CHAP-V2 post-proxy. Thu Nov 4 19:42:55 2010 : Info: [eap] Tunneled session will be proxied. Not doing EAP. Thu Nov 4 19:42:55 2010 : Info: ++[eap] returns handled Thu Nov 4 19:42:55 2010 : Info: WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 7 to 172.10.10.1 port 1812 User-Name = "testuser" MS-CHAP-Challenge = 0x49b10b08bf688efd213da2dfe2c0ee37 MS-CHAP2-Response = 0x07639efde001465e794686be86bbd699982f0000000000000000ba5cbf47e1f74caa982438716a3d0b0764c999d747b37b7f Proxy-State = 0x30 Thu Nov 4 19:42:55 2010 : Info: Proxying request 7 to home server 172.10.10.1 port 1812 Sending Access-Request of id 7 to 172.10.10.1 port 1812 User-Name = "testuser" MS-CHAP-Challenge = 0x49b10b08bf688efd213da2dfe2c0ee37 MS-CHAP2-Response = 0x07639efde001465e794686be86bbd699982f0000000000000000ba5cbf47e1f74caa982438716a3d0b0764c999d747b37b7f Proxy-State = 0x30 Thu Nov 4 19:42:55 2010 : Debug: Going to the next request Thu Nov 4 19:42:55 2010 : Debug: Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 172.10.10.1 port 1812, id=7, length=203 Service-Type = Framed-User Framed-Protocol = PPP Session-Timeout = 864000 Acct-Interim-Interval = 180 MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006 MS-MPPE-Send-Key = 0x15cd1e3f591a3cea38108b5deacae079 MS-MPPE-Recv-Key = 0x2f8000c9000217f94bba2673f2c3b711 MS-CHAP2-Success = 0x81533d32444636394345313934363538303844323846303231363431333043364536373737444137394535 Thu Nov 4 19:42:55 2010 : Info: # Executing section post-proxy from file /usr/local/etc/raddb/sites-enabled/default Thu Nov 4 19:42:55 2010 : Info: +- entering group post-proxy {...} Thu Nov 4 19:42:55 2010 : Info: [eap] Doing post-proxy callback Thu Nov 4 19:42:55 2010 : Info: [eap] Passing reply from proxy back into the tunnel. server inner-tunnel { Thu Nov 4 19:42:55 2010 : Info: [eap] Passing reply back for EAP-MS-CHAP-V2 Thu Nov 4 19:42:55 2010 : Info: # Executing section post-proxy from file /usr/local/etc/raddb/sites-enabled/inner-tunnel Thu Nov 4 19:42:55 2010 : Info: +- entering group post-proxy {...} Thu Nov 4 19:42:55 2010 : Info: ++[eap] returns noop Thu Nov 4 19:42:55 2010 : Info: WARNING: Empty post-auth section. Using default return values. Thu Nov 4 19:42:55 2010 : Info: # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/inner-tunnel } # server inner-tunnel Thu Nov 4 19:42:55 2010 : Info: [eap] Final reply from tunneled session code 2 Service-Type = Framed-User Framed-Protocol = PPP Session-Timeout = 864000 Acct-Interim-Interval = 180 MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006 MS-MPPE-Send-Key = 0x15cd1e3f591a3cea38108b5deacae079 MS-MPPE-Recv-Key = 0x2f8000c9000217f94bba2673f2c3b711 MS-CHAP2-Success = 0x81533d32444636394345313934363538303844323846303231363431333043364536373737444137394535 Thu Nov 4 19:42:55 2010 : Info: [eap] Got reply 2 Segmentation fault: 11