rad_recv: Access-Request packet from host 192.168.0.1:49152, id=29, length=171 NAS-IP-Address = 169.254.1.3 NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Framed-MTU = 1400 User-Name = "aricent" Calling-Station-Id = "00-90-4B-0A-D5-EF" Called-Station-Id = "00-19-E1-F0-9B-CE" NAS-Identifier = "Enterprise Wireless AP" EAP-Message = 0x0201000c0161726963656e74 Message-Authenticator = 0x57c85b81701129495162f36aef069549 Proxy-State = 0x0402a9fe01031b272cc14c1336040fc84dcd0a33456e Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' modcall[authorize]: module "preprocess" returns ok for request 0 rlm_eap: EAP packet type response id 1 length 12 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 rlm_realm: No '@' in User-Name = "aricent", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 users: Matched entry aricent at line 117 modcall[authorize]: module "files" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group EAP for request 0 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group EAP (returns handled) for request 0 Sending Access-Challenge of id 29 to 192.168.0.1 port 49152 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x0bc65ca2c6ba57161ed09aee31beac1e Proxy-State = 0x0402a9fe01031b272cc14c1336040fc84dcd0a33456e Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:49152, id=30, length=285 NAS-IP-Address = 169.254.1.3 NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Framed-MTU = 1400 User-Name = "aricent" Calling-Station-Id = "00-90-4B-0A-D5-EF" Called-Station-Id = "00-19-E1-F0-9B-CE" NAS-Identifier = "Enterprise Wireless AP" State = 0x0bc65ca2c6ba57161ed09aee31beac1e EAP-Message = 0x0202006c150016030100610100005d030147a099a9aacb7733a0315ee297e024c11643628f748158c38b0efaab8f612aaf00003600390038003500160013000a00330032002f0007006600050004006300620061001500120009006500640060001400110008000600030100 Message-Authenticator = 0x4e99a74d77d87576c4c7fe527d93f38d Proxy-State = 0x0402a9fe01035ced6f644c91240b7b6a21a92568154c Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' modcall[authorize]: module "preprocess" returns ok for request 1 rlm_eap: EAP packet type response id 2 length 108 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 rlm_realm: No '@' in User-Name = "aricent", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 users: Matched entry aricent at line 117 modcall[authorize]: module "files" returns ok for request 1 modcall[authorize]: module "mschap" returns noop for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group EAP for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0061], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 05d7], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0004], ServerHelloDone TLS_accept: SSLv3 write server done A TLS_accept: SSLv3 flush data TLS_accept: Need to read more data: SSLv3 read client certificate A In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 1 modcall: leaving group EAP (returns handled) for request 1 Sending Access-Challenge of id 30 to 192.168.0.1 port 49152 EAP-Message = 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 EAP-Message = 0x0109011613737570706f72744061726963656e742e636f6d301e170d3038303131343134303233375a170d3039303131333134303233375a30819f310b300906035504061302494e311630140603550408130d416e64687261507261646573683112301006035504071309487964657261626164312a3028060355040a132141726963656e7420546563686e6f6c6f6769657320486f6c64696e6773204c7464311430120603550403130b61726963656e742e636f6d3122302006092a864886f70d0109011613737570706f72744061726963656e742e636f6d30819f300d06092a864886f70d010101050003818d0030818902818100a841843a1fde EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x5a30818b310b300906035504061302494e3116301406 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xd1350e459ec5897073bcc1e1dfd602e3 Proxy-State = 0x0402a9fe01035ced6f644c91240b7b6a21a92568154c Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:49152, id=31, length=183 NAS-IP-Address = 169.254.1.3 NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Framed-MTU = 1400 User-Name = "aricent" Calling-Station-Id = "00-90-4B-0A-D5-EF" Called-Station-Id = "00-19-E1-F0-9B-CE" NAS-Identifier = "Enterprise Wireless AP" State = 0xd1350e459ec5897073bcc1e1dfd602e3 EAP-Message = 0x020300061500 Message-Authenticator = 0xd988df4a33e5308aa7e0e6a14115d3c9 Proxy-State = 0x0402a9fe01032240374c4e0a6e1e3e4e1d3e770804e6 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' modcall[authorize]: module "preprocess" returns ok for request 2 rlm_eap: EAP packet type response id 3 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 rlm_realm: No '@' in User-Name = "aricent", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 users: Matched entry aricent at line 117 modcall[authorize]: module "files" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 modcall: leaving group authorize (returns updated) for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group EAP for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: leaving group EAP (returns handled) for request 2 Sending Access-Challenge of id 31 to 192.168.0.1 port 49152 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x02b1a1670131aaf7f65160a2783bed9c9b3c960a500790317cd323f800c3eca7978df10551bf7d47353b62b61164a7909b977281415f88ea23bd2516030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcc9cdb1c4d40f75283e7d31fe913b487 Proxy-State = 0x0402a9fe01032240374c4e0a6e1e3e4e1d3e770804e6 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:49152, id=32, length=381 NAS-IP-Address = 169.254.1.3 NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Framed-MTU = 1400 User-Name = "aricent" Calling-Station-Id = "00-90-4B-0A-D5-EF" Called-Station-Id = "00-19-E1-F0-9B-CE" NAS-Identifier = "Enterprise Wireless AP" State = 0xcc9cdb1c4d40f75283e7d31fe913b487 EAP-Message = 0x020400cc15001603010086100000820080298d9c452e473a8689182e7f3d41e2a74d85eb7ec940086b836d78bbe2028211c3a2078fb153965cf8fb87f7ddd485a6bfad1d23b16c6a9083da19d4c748783c1b6c2141f18ba1643be0d6458042c648adbe2574afc25ea12425cfec80d23fc83625129890f3db11b6e528bbf8ae52a51344d144357fca26e6b6e161c9ac33671403010001011603010030a54510919a04c27a9a3e8aff08cb3ac752ed6315a92d83199c0e4bd395b031ff21f711d91c71cc6e7828ec243291deee Message-Authenticator = 0xbe88eb6a57813dee97eaa1ad42d301df Proxy-State = 0x0402a9fe010325cd3c914f054a2b159044f72d7324a2 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' modcall[authorize]: module "preprocess" returns ok for request 3 rlm_eap: EAP packet type response id 4 length 204 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 rlm_realm: No '@' in User-Name = "aricent", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 3 users: Matched entry aricent at line 117 modcall[authorize]: module "files" returns ok for request 3 modcall[authorize]: module "mschap" returns noop for request 3 modcall: leaving group authorize (returns updated) for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group EAP for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake rlm_eap_tls: <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange TLS_accept: SSLv3 read client key exchange A rlm_eap_tls: <<< TLS 1.0 ChangeCipherSpec [length 0001] rlm_eap_tls: <<< TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 read finished A rlm_eap_tls: >>> TLS 1.0 ChangeCipherSpec [length 0001] TLS_accept: SSLv3 write change cipher spec A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0010], Finished TLS_accept: SSLv3 write finished A TLS_accept: SSLv3 flush data (other): SSL negotiation finished successfully SSL Connection Established eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: leaving group EAP (returns handled) for request 3 Sending Access-Challenge of id 32 to 192.168.0.1 port 49152 EAP-Message = 0x0105004515800000003b140301000101160301003075a2c51f196cd25cb1d7b38f1e1cc91e799da31987f5e7d5235b2796eee25f9687d9136d19f9e994abc42acf796e9d50 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe2cf75fe7b371e389029b6e5c4b253db Proxy-State = 0x0402a9fe010325cd3c914f054a2b159044f72d7324a2 Finished request 3 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 29 with timestamp 47a17263 Cleaning up request 1 ID 30 with timestamp 47a17263 Cleaning up request 2 ID 31 with timestamp 47a17263 Cleaning up request 3 ID 32 with timestamp 47a17263 Nothing to do. Sleeping until we see a request.