Wed May 16 12:47:25 2012 : Info: FreeRADIUS Version 2.1.10, for host x86_64-redhat-linux-gnu, built on Oct 19 2010 at 19:44:32 Wed May 16 12:47:25 2012 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. Wed May 16 12:47:25 2012 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed May 16 12:47:25 2012 : Info: PARTICULAR PURPOSE. Wed May 16 12:47:25 2012 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed May 16 12:47:25 2012 : Info: GNU General Public License v2. Wed May 16 12:47:25 2012 : Info: Starting - reading configuration files ... Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/radiusd.conf Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/proxy.conf Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/clients.conf Wed May 16 12:47:25 2012 : Debug: including files in directory /etc/raddb/modules/ Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/expr Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/smsotp Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/detail.log Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/detail.example.com Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/perl Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/otp Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/expiration Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/sqlcounter_expire_on_login Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/smbpasswd Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/files Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/preprocess Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/attr_rewrite Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/pap Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/policy Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/wimax Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/logintime Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/linelog Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/checkval Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/cui Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/sradutmp Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/etc_group Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/sql_log Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/dynamic_clients Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/echo Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/mschap Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/ldap Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/opendirectory Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/acct_unique Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/realm Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/ippool Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/mac2ip Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/always Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/detail Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/passwd Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/exec Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/pam Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/attr_filter Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/chap Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/inner-eap Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/digest Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/mac2vlan Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/ntlm_auth Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/unix Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/counter Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/modules/radutmp Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/eap.conf Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/policy.conf Wed May 16 12:47:25 2012 : Debug: including files in directory /etc/raddb/sites-enabled/ Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/sites-enabled/metroplus Wed May 16 12:47:25 2012 : Debug: including configuration file /etc/raddb/sites-enabled/domain Wed May 16 12:47:25 2012 : Debug: main { Wed May 16 12:47:25 2012 : Debug: user = "radiusd" Wed May 16 12:47:25 2012 : Debug: group = "radiusd" Wed May 16 12:47:25 2012 : Debug: allow_core_dumps = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: including dictionary file /etc/raddb/dictionary Wed May 16 12:47:25 2012 : Debug: main { Wed May 16 12:47:25 2012 : Debug: prefix = "/usr" Wed May 16 12:47:25 2012 : Debug: localstatedir = "/var" Wed May 16 12:47:25 2012 : Debug: logdir = "/var/log/radius" Wed May 16 12:47:25 2012 : Debug: libdir = "/usr/lib64/freeradius" Wed May 16 12:47:25 2012 : Debug: radacctdir = "/var/log/radius/radacct" Wed May 16 12:47:25 2012 : Debug: hostname_lookups = no Wed May 16 12:47:25 2012 : Debug: max_request_time = 30 Wed May 16 12:47:25 2012 : Debug: cleanup_delay = 5 Wed May 16 12:47:25 2012 : Debug: max_requests = 1024 Wed May 16 12:47:25 2012 : Debug: pidfile = "/var/run/radiusd/radiusd.pid" Wed May 16 12:47:25 2012 : Debug: checkrad = "/usr/sbin/checkrad" Wed May 16 12:47:25 2012 : Debug: debug_level = 0 Wed May 16 12:47:25 2012 : Debug: proxy_requests = yes Wed May 16 12:47:25 2012 : Debug: log { Wed May 16 12:47:25 2012 : Debug: stripped_names = no Wed May 16 12:47:25 2012 : Debug: auth = no Wed May 16 12:47:25 2012 : Debug: auth_badpass = no Wed May 16 12:47:25 2012 : Debug: auth_goodpass = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: security { Wed May 16 12:47:25 2012 : Debug: max_attributes = 200 Wed May 16 12:47:25 2012 : Debug: reject_delay = 1 Wed May 16 12:47:25 2012 : Debug: status_server = yes Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: radiusd: #### Loading Realms and Home Servers #### Wed May 16 12:47:25 2012 : Debug: proxy server { Wed May 16 12:47:25 2012 : Debug: retry_delay = 5 Wed May 16 12:47:25 2012 : Debug: retry_count = 3 Wed May 16 12:47:25 2012 : Debug: default_fallback = no Wed May 16 12:47:25 2012 : Debug: dead_time = 120 Wed May 16 12:47:25 2012 : Debug: wake_all_if_all_dead = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: realm domain.com { Wed May 16 12:47:25 2012 : Debug: nostrip Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: home_server metroplus { Wed May 16 12:47:25 2012 : Debug: ipaddr = 192.168.201.22 Wed May 16 12:47:25 2012 : Debug: port = 1812 Wed May 16 12:47:25 2012 : Debug: type = "auth" Wed May 16 12:47:25 2012 : Debug: secret = "xxxxxxxxxxxx" Wed May 16 12:47:25 2012 : Debug: response_window = 30 Wed May 16 12:47:25 2012 : Debug: max_outstanding = 65536 Wed May 16 12:47:25 2012 : Debug: require_message_authenticator = yes Wed May 16 12:47:25 2012 : Debug: zombie_period = 40 Wed May 16 12:47:25 2012 : Debug: status_check = "none" Wed May 16 12:47:25 2012 : Debug: ping_interval = 30 Wed May 16 12:47:25 2012 : Debug: check_interval = 30 Wed May 16 12:47:25 2012 : Debug: num_answers_to_alive = 3 Wed May 16 12:47:25 2012 : Debug: num_pings_to_alive = 3 Wed May 16 12:47:25 2012 : Debug: revive_interval = 300 Wed May 16 12:47:25 2012 : Debug: status_check_timeout = 4 Wed May 16 12:47:25 2012 : Debug: irt = 2 Wed May 16 12:47:25 2012 : Debug: mrt = 16 Wed May 16 12:47:25 2012 : Debug: mrc = 5 Wed May 16 12:47:25 2012 : Debug: mrd = 30 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: home_server_pool metroplus_pool { Wed May 16 12:47:25 2012 : Debug: type = fail-over Wed May 16 12:47:25 2012 : Debug: virtual_server = metroplus Wed May 16 12:47:25 2012 : Debug: home_server = metroplus Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: realm poc.domain2.fqdn { Wed May 16 12:47:25 2012 : Debug: auth_pool = metroplus_pool Wed May 16 12:47:25 2012 : Debug: nostrip Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: realm LOCAL { Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: radiusd: #### Loading Clients #### Wed May 16 12:47:25 2012 : Debug: client localhost { Wed May 16 12:47:25 2012 : Debug: ipaddr = 127.0.0.1 Wed May 16 12:47:25 2012 : Debug: require_message_authenticator = no Wed May 16 12:47:25 2012 : Debug: secret = "xxxxxxxxxxxxxx" Wed May 16 12:47:25 2012 : Debug: nastype = "other" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: client aruba01 { Wed May 16 12:47:25 2012 : Debug: ipaddr = 172.30.20.47 Wed May 16 12:47:25 2012 : Debug: require_message_authenticator = no Wed May 16 12:47:25 2012 : Debug: secret = "xxxxxxxxxxxxxxx" Wed May 16 12:47:25 2012 : Debug: nastype = "other" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: client radius01 { Wed May 16 12:47:25 2012 : Debug: ipaddr = 172.30.20.16 Wed May 16 12:47:25 2012 : Debug: require_message_authenticator = no Wed May 16 12:47:25 2012 : Debug: secret = "xxxxxxxxxxxxxxx" Wed May 16 12:47:25 2012 : Debug: nastype = "other" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: client radius02 { Wed May 16 12:47:25 2012 : Debug: ipaddr = 172.30.20.17 Wed May 16 12:47:25 2012 : Debug: require_message_authenticator = no Wed May 16 12:47:25 2012 : Debug: secret = "xxxxxxxxxxxxxxx" Wed May 16 12:47:25 2012 : Debug: nastype = "other" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: radiusd: #### Instantiating modules #### Wed May 16 12:47:25 2012 : Debug: instantiate { Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_exec, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_exec Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "exec" from file /etc/raddb/modules/exec Wed May 16 12:47:25 2012 : Debug: exec { Wed May 16 12:47:25 2012 : Debug: wait = no Wed May 16 12:47:25 2012 : Debug: input_pairs = "request" Wed May 16 12:47:25 2012 : Debug: shell_escape = yes Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_expr, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_expr Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "expr" from file /etc/raddb/modules/expr Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_expiration, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_expiration Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "expiration" from file /etc/raddb/modules/expiration Wed May 16 12:47:25 2012 : Debug: expiration { Wed May 16 12:47:25 2012 : Debug: reply-message = "Password Has Expired " Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_logintime, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_logintime Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "logintime" from file /etc/raddb/modules/logintime Wed May 16 12:47:25 2012 : Debug: logintime { Wed May 16 12:47:25 2012 : Debug: reply-message = "You are calling outside your allowed timespan " Wed May 16 12:47:25 2012 : Debug: minimum-timeout = 60 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: radiusd: #### Loading Virtual Servers #### Wed May 16 12:47:25 2012 : Debug: server metroplus { # from file /etc/raddb/sites-enabled/metroplus Wed May 16 12:47:25 2012 : Debug: modules { Wed May 16 12:47:25 2012 : Debug: Module: Checking authorize {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Checking pre-proxy {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_files, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_files Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "files" from file /etc/raddb/modules/files Wed May 16 12:47:25 2012 : Debug: files { Wed May 16 12:47:25 2012 : Debug: usersfile = "/etc/raddb/users" Wed May 16 12:47:25 2012 : Debug: acctusersfile = "/etc/raddb/acct_users" Wed May 16 12:47:25 2012 : Debug: preproxy_usersfile = "/etc/raddb/preproxy_users" Wed May 16 12:47:25 2012 : Debug: compat = "no" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_attr_filter Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "attr_filter.pre-proxy" from file /etc/raddb/modules/attr_filter Wed May 16 12:47:25 2012 : Debug: attr_filter attr_filter.pre-proxy { Wed May 16 12:47:25 2012 : Debug: attrsfile = "/etc/raddb/attrs.pre-proxy" Wed May 16 12:47:25 2012 : Debug: key = "%{Realm}" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_detail, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_detail Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "pre_proxy_log" from file /etc/raddb/modules/detail.log Wed May 16 12:47:25 2012 : Debug: detail pre_proxy_log { Wed May 16 12:47:25 2012 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d" Wed May 16 12:47:25 2012 : Debug: header = "%t" Wed May 16 12:47:25 2012 : Debug: detailperm = 384 Wed May 16 12:47:25 2012 : Debug: dirperm = 493 Wed May 16 12:47:25 2012 : Debug: locking = no Wed May 16 12:47:25 2012 : Debug: log_packet_header = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking post-proxy {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Loading virtual module set_metroplus_vlan Wed May 16 12:47:25 2012 : Debug: } # modules Wed May 16 12:47:25 2012 : Debug: } # server Wed May 16 12:47:25 2012 : Debug: server inner-tunnel-domain { # from file /etc/raddb/sites-enabled/domain Wed May 16 12:47:25 2012 : Debug: modules { Wed May 16 12:47:25 2012 : Debug: Module: Checking authenticate {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_pap, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_pap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "pap" from file /etc/raddb/modules/pap Wed May 16 12:47:25 2012 : Debug: pap { Wed May 16 12:47:25 2012 : Debug: encryption_scheme = "auto" Wed May 16 12:47:25 2012 : Debug: auto_header = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_chap, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_chap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "chap" from file /etc/raddb/modules/chap Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_mschap, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_mschap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "mschap" from file /etc/raddb/modules/mschap Wed May 16 12:47:25 2012 : Debug: mschap { Wed May 16 12:47:25 2012 : Debug: use_mppe = yes Wed May 16 12:47:25 2012 : Debug: require_encryption = no Wed May 16 12:47:25 2012 : Debug: require_strong = no Wed May 16 12:47:25 2012 : Debug: with_ntdomain_hack = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_unix, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_unix Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "unix" from file /etc/raddb/modules/unix Wed May 16 12:47:25 2012 : Debug: unix { Wed May 16 12:47:25 2012 : Debug: radwtmp = "/var/log/radius/radwtmp" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_eap, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_eap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "eap_domain" from file /etc/raddb/eap.conf Wed May 16 12:47:25 2012 : Debug: eap eap_domain { Wed May 16 12:47:25 2012 : Debug: default_eap_type = "md5" Wed May 16 12:47:25 2012 : Debug: timer_expire = 60 Wed May 16 12:47:25 2012 : Debug: ignore_unknown_eap_types = no Wed May 16 12:47:25 2012 : Debug: cisco_accounting_username_bug = no Wed May 16 12:47:25 2012 : Debug: max_sessions = 4096 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_md5 Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-md5 Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_leap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-leap Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_gtc Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-gtc Wed May 16 12:47:25 2012 : Debug: gtc { Wed May 16 12:47:25 2012 : Debug: challenge = "Password: " Wed May 16 12:47:25 2012 : Debug: auth_type = "PAP" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_tls Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-tls Wed May 16 12:47:25 2012 : Debug: tls { Wed May 16 12:47:25 2012 : Debug: rsa_key_exchange = no Wed May 16 12:47:25 2012 : Debug: dh_key_exchange = yes Wed May 16 12:47:25 2012 : Debug: rsa_key_length = 512 Wed May 16 12:47:25 2012 : Debug: dh_key_length = 512 Wed May 16 12:47:25 2012 : Debug: verify_depth = 0 Wed May 16 12:47:25 2012 : Debug: CA_path = "/etc/raddb/certs" Wed May 16 12:47:25 2012 : Debug: pem_file_type = yes Wed May 16 12:47:25 2012 : Debug: private_key_file = "/etc/raddb/certs/server.pem" Wed May 16 12:47:25 2012 : Debug: certificate_file = "/etc/raddb/certs/server.pem" Wed May 16 12:47:25 2012 : Debug: CA_file = "/etc/raddb/certs/ca.pem" Wed May 16 12:47:25 2012 : Debug: private_key_password = "whatever" Wed May 16 12:47:25 2012 : Debug: dh_file = "/etc/raddb/certs/dh" Wed May 16 12:47:25 2012 : Debug: random_file = "/etc/raddb/certs/random" Wed May 16 12:47:25 2012 : Debug: fragment_size = 1024 Wed May 16 12:47:25 2012 : Debug: include_length = yes Wed May 16 12:47:25 2012 : Debug: check_crl = no Wed May 16 12:47:25 2012 : Debug: cipher_list = "DEFAULT" Wed May 16 12:47:25 2012 : Debug: cache { Wed May 16 12:47:25 2012 : Debug: enable = no Wed May 16 12:47:25 2012 : Debug: lifetime = 24 Wed May 16 12:47:25 2012 : Debug: max_entries = 255 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: verify { Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_ttls Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-ttls Wed May 16 12:47:25 2012 : Debug: ttls { Wed May 16 12:47:25 2012 : Debug: default_eap_type = "md5" Wed May 16 12:47:25 2012 : Debug: copy_request_to_tunnel = no Wed May 16 12:47:25 2012 : Debug: use_tunneled_reply = no Wed May 16 12:47:25 2012 : Debug: virtual_server = "inner-tunnel-domain" Wed May 16 12:47:25 2012 : Debug: include_length = yes Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_peap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-peap Wed May 16 12:47:25 2012 : Debug: peap { Wed May 16 12:47:25 2012 : Debug: default_eap_type = "mschapv2" Wed May 16 12:47:25 2012 : Debug: copy_request_to_tunnel = no Wed May 16 12:47:25 2012 : Debug: use_tunneled_reply = no Wed May 16 12:47:25 2012 : Debug: proxy_tunneled_request_as_eap = yes Wed May 16 12:47:25 2012 : Debug: virtual_server = "inner-tunnel-domain" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Linked to sub-module rlm_eap_mschapv2 Wed May 16 12:47:25 2012 : Debug: Module: Instantiating eap-mschapv2 Wed May 16 12:47:25 2012 : Debug: mschapv2 { Wed May 16 12:47:25 2012 : Debug: with_ntdomain_hack = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking authorize {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_realm, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_realm Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "suffix" from file /etc/raddb/modules/realm Wed May 16 12:47:25 2012 : Debug: realm suffix { Wed May 16 12:47:25 2012 : Debug: format = "suffix" Wed May 16 12:47:25 2012 : Debug: delimiter = "@" Wed May 16 12:47:25 2012 : Debug: ignore_default = no Wed May 16 12:47:25 2012 : Debug: ignore_null = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_ldap, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_ldap Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "ldap_domain" from file /etc/raddb/modules/ldap Wed May 16 12:47:25 2012 : Debug: ldap ldap_domain { Wed May 16 12:47:25 2012 : Debug: server = "ldap.svc.be.nl" Wed May 16 12:47:25 2012 : Debug: port = 389 Wed May 16 12:47:25 2012 : Debug: password = "" Wed May 16 12:47:25 2012 : Debug: identity = "" Wed May 16 12:47:25 2012 : Debug: net_timeout = 1 Wed May 16 12:47:25 2012 : Debug: timeout = 4 Wed May 16 12:47:25 2012 : Debug: timelimit = 3 Wed May 16 12:47:25 2012 : Debug: tls_mode = no Wed May 16 12:47:25 2012 : Debug: start_tls = no Wed May 16 12:47:25 2012 : Debug: tls_require_cert = "allow" Wed May 16 12:47:25 2012 : Debug: tls { Wed May 16 12:47:25 2012 : Debug: start_tls = no Wed May 16 12:47:25 2012 : Debug: require_cert = "allow" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: basedn = "ou=Users,ou=domain,dc=domain,dc=com" Wed May 16 12:47:25 2012 : Debug: filter = "(mailLocalAddress=%{%{Stripped-User-Name}:-%{User-Name}})" Wed May 16 12:47:25 2012 : Debug: base_filter = "(objectclass=radiusprofile)" Wed May 16 12:47:25 2012 : Debug: auto_header = no Wed May 16 12:47:25 2012 : Debug: access_attr_used_for_allow = yes Wed May 16 12:47:25 2012 : Debug: groupname_attribute = "cn" Wed May 16 12:47:25 2012 : Debug: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" Wed May 16 12:47:25 2012 : Debug: dictionary_mapping = "/etc/raddb/ldap.attrmap" Wed May 16 12:47:25 2012 : Debug: ldap_debug = 0 Wed May 16 12:47:25 2012 : Debug: ldap_connections_number = 5 Wed May 16 12:47:25 2012 : Debug: compare_check_items = no Wed May 16 12:47:25 2012 : Debug: do_xlat = yes Wed May 16 12:47:25 2012 : Debug: set_auth_type = yes Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Registering ldap_groupcmp for Ldap-Group Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Creating new attribute ldap_domain-Ldap-Group Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Registering ldap_groupcmp for ldap_domain-Ldap-Group Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Registering ldap_xlat with xlat_name ldap_domain Wed May 16 12:47:25 2012 : Debug: rlm_ldap: Over-riding set_auth_type, as there is no module ldap_domain listed in the "authenticate" section. Wed May 16 12:47:25 2012 : Debug: rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP userPassword mapped to RADIUS Password-With-Header Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusClass mapped to RADIUS Class Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type Wed May 16 12:47:25 2012 : Debug: rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id Wed May 16 12:47:25 2012 : Debug: conns: 0x238d3f0 Wed May 16 12:47:25 2012 : Debug: Module: Checking session {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_radutmp, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_radutmp Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "radutmp" from file /etc/raddb/modules/radutmp Wed May 16 12:47:25 2012 : Debug: radutmp { Wed May 16 12:47:25 2012 : Debug: filename = "/var/log/radius/radutmp" Wed May 16 12:47:25 2012 : Debug: username = "%{User-Name}" Wed May 16 12:47:25 2012 : Debug: case_sensitive = yes Wed May 16 12:47:25 2012 : Debug: check_with_nas = yes Wed May 16 12:47:25 2012 : Debug: perm = 384 Wed May 16 12:47:25 2012 : Debug: callerid = yes Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking pre-proxy {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Checking post-proxy {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "post_proxy_log" from file /etc/raddb/modules/detail.log Wed May 16 12:47:25 2012 : Debug: detail post_proxy_log { Wed May 16 12:47:25 2012 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d" Wed May 16 12:47:25 2012 : Debug: header = "%t" Wed May 16 12:47:25 2012 : Debug: detailperm = 384 Wed May 16 12:47:25 2012 : Debug: dirperm = 493 Wed May 16 12:47:25 2012 : Debug: locking = no Wed May 16 12:47:25 2012 : Debug: log_packet_header = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking post-auth {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "reply_log" from file /etc/raddb/modules/detail.log Wed May 16 12:47:25 2012 : Debug: detail reply_log { Wed May 16 12:47:25 2012 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d" Wed May 16 12:47:25 2012 : Debug: header = "%t" Wed May 16 12:47:25 2012 : Debug: detailperm = 384 Wed May 16 12:47:25 2012 : Debug: dirperm = 493 Wed May 16 12:47:25 2012 : Debug: locking = no Wed May 16 12:47:25 2012 : Debug: log_packet_header = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "attr_filter.access_reject" from file /etc/raddb/modules/attr_filter Wed May 16 12:47:25 2012 : Debug: attr_filter attr_filter.access_reject { Wed May 16 12:47:25 2012 : Debug: attrsfile = "/etc/raddb/attrs.access_reject" Wed May 16 12:47:25 2012 : Debug: key = "%{User-Name}" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: } # modules Wed May 16 12:47:25 2012 : Debug: } # server Wed May 16 12:47:25 2012 : Debug: server { # from file /etc/raddb/radiusd.conf Wed May 16 12:47:25 2012 : Debug: modules { Wed May 16 12:47:25 2012 : Debug: Module: Checking authenticate {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_digest, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_digest Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "digest" from file /etc/raddb/modules/digest Wed May 16 12:47:25 2012 : Debug: Module: Checking authorize {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_preprocess, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_preprocess Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "preprocess" from file /etc/raddb/modules/preprocess Wed May 16 12:47:25 2012 : Debug: preprocess { Wed May 16 12:47:25 2012 : Debug: huntgroups = "/etc/raddb/huntgroups" Wed May 16 12:47:25 2012 : Debug: hints = "/etc/raddb/hints" Wed May 16 12:47:25 2012 : Debug: with_ascend_hack = no Wed May 16 12:47:25 2012 : Debug: ascend_channels_per_line = 23 Wed May 16 12:47:25 2012 : Debug: with_ntdomain_hack = no Wed May 16 12:47:25 2012 : Debug: with_specialix_jetstream_hack = no Wed May 16 12:47:25 2012 : Debug: with_cisco_vsa_hack = no Wed May 16 12:47:25 2012 : Debug: with_alvarion_vsa_hack = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "auth_log" from file /etc/raddb/modules/detail.log Wed May 16 12:47:25 2012 : Debug: detail auth_log { Wed May 16 12:47:25 2012 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" Wed May 16 12:47:25 2012 : Debug: header = "%t" Wed May 16 12:47:25 2012 : Debug: detailperm = 384 Wed May 16 12:47:25 2012 : Debug: dirperm = 493 Wed May 16 12:47:25 2012 : Debug: locking = no Wed May 16 12:47:25 2012 : Debug: log_packet_header = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking preacct {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Wed May 16 12:47:25 2012 : Debug: Module: Linked to module rlm_acct_unique Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "acct_unique" from file /etc/raddb/modules/acct_unique Wed May 16 12:47:25 2012 : Debug: acct_unique { Wed May 16 12:47:25 2012 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking accounting {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "detail" from file /etc/raddb/modules/detail Wed May 16 12:47:25 2012 : Debug: detail { Wed May 16 12:47:25 2012 : Debug: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" Wed May 16 12:47:25 2012 : Debug: header = "%t" Wed May 16 12:47:25 2012 : Debug: detailperm = 384 Wed May 16 12:47:25 2012 : Debug: dirperm = 493 Wed May 16 12:47:25 2012 : Debug: locking = no Wed May 16 12:47:25 2012 : Debug: log_packet_header = no Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Instantiating module "attr_filter.accounting_response" from file /etc/raddb/modules/attr_filter Wed May 16 12:47:25 2012 : Debug: attr_filter attr_filter.accounting_response { Wed May 16 12:47:25 2012 : Debug: attrsfile = "/etc/raddb/attrs.accounting_response" Wed May 16 12:47:25 2012 : Debug: key = "%{User-Name}" Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Module: Checking session {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Checking pre-proxy {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Checking post-proxy {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Checking post-auth {...} for more modules to load Wed May 16 12:47:25 2012 : Debug: Module: Loading virtual module set_domain_vlan Wed May 16 12:47:25 2012 : Debug: } # modules Wed May 16 12:47:25 2012 : Debug: } # server Wed May 16 12:47:25 2012 : Debug: radiusd: #### Opening IP addresses and Ports #### Wed May 16 12:47:25 2012 : Debug: listen { Wed May 16 12:47:25 2012 : Debug: type = "auth" Wed May 16 12:47:25 2012 : Debug: ipaddr = * Wed May 16 12:47:25 2012 : Debug: port = 0 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: listen { Wed May 16 12:47:25 2012 : Debug: type = "acct" Wed May 16 12:47:25 2012 : Debug: ipaddr = * Wed May 16 12:47:25 2012 : Debug: port = 0 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: listen { Wed May 16 12:47:25 2012 : Debug: type = "auth" Wed May 16 12:47:25 2012 : Debug: ipaddr = 127.0.0.1 Wed May 16 12:47:25 2012 : Debug: port = 18120 Wed May 16 12:47:25 2012 : Debug: } Wed May 16 12:47:25 2012 : Debug: Listening on authentication address * port 1812 Wed May 16 12:47:25 2012 : Debug: Listening on accounting address * port 1813 Wed May 16 12:47:25 2012 : Debug: Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel-domain Wed May 16 12:47:25 2012 : Debug: Listening on proxy address * port 1814 Wed May 16 12:47:25 2012 : Info: Ready to process requests. rad_recv: Access-Request packet from host 172.30.20.16 port 34809, id=241, length=129 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.20.16 NAS-Port = 1812 MS-CHAP-Challenge = 0x57c171011e737fa4 MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000038394ec2dac9ab3d2e76d71779feccca5b80108550e82002 Wed May 16 12:50:44 2012 : Info: # Executing section authorize from file /etc/raddb/sites-enabled/domain Wed May 16 12:50:44 2012 : Info: +- entering group authorize {...} Wed May 16 12:50:44 2012 : Info: ++[preprocess] returns ok Wed May 16 12:50:44 2012 : Info: [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.16/auth-detail-20120516 Wed May 16 12:50:44 2012 : Info: [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.16/auth-detail-20120516 Wed May 16 12:50:44 2012 : Info: [auth_log] expand: %t -> Wed May 16 12:50:44 2012 Wed May 16 12:50:44 2012 : Info: ++[auth_log] returns ok Wed May 16 12:50:44 2012 : Info: ++[chap] returns noop Wed May 16 12:50:44 2012 : Info: [mschap] Found MS-CHAP attributes. Setting 'Auth-Type = mschap' Wed May 16 12:50:44 2012 : Info: ++[mschap] returns ok Wed May 16 12:50:44 2012 : Info: ++[digest] returns noop Wed May 16 12:50:44 2012 : Info: [suffix] Looking up realm "poc.domain2.fqdn" for User-Name = "user01@poc.domain2.fqdn" Wed May 16 12:50:44 2012 : Info: [suffix] Found realm "poc.domain2.fqdn" Wed May 16 12:50:44 2012 : Info: [suffix] Adding Realm = "poc.domain2.fqdn" Wed May 16 12:50:44 2012 : Info: [suffix] Proxying request from user user01 to realm poc.domain2.fqdn Wed May 16 12:50:44 2012 : Info: [suffix] Preparing to proxy authentication request to realm "poc.domain2.fqdn" Wed May 16 12:50:44 2012 : Info: ++[suffix] returns updated Wed May 16 12:50:44 2012 : Info: [eap_domain] No EAP-Message, not doing EAP Wed May 16 12:50:44 2012 : Info: ++[eap_domain] returns noop Wed May 16 12:50:44 2012 : Info: ++[files] returns noop Wed May 16 12:50:44 2012 : Info: [ldap_domain] performing user authorization for user01@poc.domain2.fqdn Wed May 16 12:50:44 2012 : Info: [ldap_domain] expand: %{Stripped-User-Name} -> Wed May 16 12:50:44 2012 : Info: [ldap_domain] ... expanding second conditional Wed May 16 12:50:44 2012 : Info: [ldap_domain] expand: %{User-Name} -> user01@poc.domain2.fqdn Wed May 16 12:50:44 2012 : Info: [ldap_domain] expand: (mailLocalAddress=%{%{Stripped-User-Name}:-%{User-Name}}) -> (mailLocalAddress=user01@poc.domain2.fqdn) Wed May 16 12:50:44 2012 : Info: [ldap_domain] expand: ou=Users,ou=domain,dc=domain,dc=com -> ou=Users,ou=domain,dc=domain,dc=com Wed May 16 12:50:44 2012 : Debug: [ldap_domain] ldap_get_conn: Checking Id: 0 Wed May 16 12:50:44 2012 : Debug: [ldap_domain] ldap_get_conn: Got Id: 0 Wed May 16 12:50:44 2012 : Debug: [ldap_domain] attempting LDAP reconnection Wed May 16 12:50:44 2012 : Debug: [ldap_domain] (re)connect to ldap.svc.be.nl:389, authentication 0 Wed May 16 12:50:44 2012 : Debug: [ldap_domain] bind as / to ldap.svc.be.nl:389 Wed May 16 12:50:44 2012 : Debug: [ldap_domain] waiting for bind result ... Wed May 16 12:50:44 2012 : Debug: [ldap_domain] Bind was successful Wed May 16 12:50:44 2012 : Debug: [ldap_domain] performing search in ou=Users,ou=domain,dc=domain,dc=com, with filter (mailLocalAddress=user01@poc.domain2.fqdn) Wed May 16 12:50:44 2012 : Debug: [ldap_domain] object not found Wed May 16 12:50:44 2012 : Info: [ldap_domain] search failed Wed May 16 12:50:44 2012 : Debug: [ldap_domain] ldap_release_conn: Release Id: 0 Wed May 16 12:50:44 2012 : Info: ++[ldap_domain] returns notfound Wed May 16 12:50:44 2012 : Info: ++[expiration] returns noop Wed May 16 12:50:44 2012 : Info: ++[logintime] returns noop Wed May 16 12:50:44 2012 : Info: ++[pap] returns noop Wed May 16 12:50:44 2012 : Info: server metroplus { Wed May 16 12:50:44 2012 : Info: # Executing section pre-proxy from file /etc/raddb/sites-enabled/metroplus Wed May 16 12:50:44 2012 : Info: +- entering group pre-proxy {...} Wed May 16 12:50:44 2012 : Info: ++[files] returns noop Wed May 16 12:50:44 2012 : Info: [attr_filter.pre-proxy] expand: %{Realm} -> poc.domain2.fqdn Wed May 16 12:50:44 2012 : Debug: attr_filter: Matched entry DEFAULT at line 50 Wed May 16 12:50:44 2012 : Info: ++[attr_filter.pre-proxy] returns updated Wed May 16 12:50:44 2012 : Info: [pre_proxy_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.16/pre-proxy-detail-20120516 Wed May 16 12:50:44 2012 : Info: [pre_proxy_log] /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.16/pre-proxy-detail-20120516 Wed May 16 12:50:44 2012 : Info: [pre_proxy_log] expand: %t -> Wed May 16 12:50:44 2012 Wed May 16 12:50:44 2012 : Info: ++[pre_proxy_log] returns ok Wed May 16 12:50:44 2012 : Info: } Sending Access-Request of id 236 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.20.16 MS-CHAP-Challenge = 0x57c171011e737fa4 MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000038394ec2dac9ab3d2e76d71779feccca5b80108550e82002 Message-Authenticator := 0x00000000000000000000000000000000 Proxy-State = 0x323431 Wed May 16 12:50:44 2012 : Info: Proxying request 0 to home server 192.168.201.22 port 1812 Sending Access-Request of id 236 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.20.16 MS-CHAP-Challenge = 0x57c171011e737fa4 MS-CHAP-Response = 0x000100000000000000000000000000000000000000000000000038394ec2dac9ab3d2e76d71779feccca5b80108550e82002 Message-Authenticator := 0x00000000000000000000000000000000 Proxy-State = 0x323431 Wed May 16 12:50:44 2012 : Debug: Going to the next request Wed May 16 12:50:44 2012 : Debug: Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 192.168.201.22 port 1812, id=236, length=147 Proxy-State = 0x323431 Class = 0x7e02069e0000013700010200c0a8c91600000000000000000000000001cd31e856b2bb200000000000000051 MS-CHAP-MPPE-Keys = 0x0000000000000000bd1380861c3ea33604446d6b3e05c99d57c171011e737fa4 MS-CHAP-Domain = "\000POC" MS-Link-Utilization-Threshold = 50 MS-Link-Drop-Time-Limit = 120 Wed May 16 12:50:44 2012 : Info: server metroplus { Wed May 16 12:50:44 2012 : Info: # Executing section post-proxy from file /etc/raddb/sites-enabled/metroplus Wed May 16 12:50:44 2012 : Info: +- entering group post-proxy {...} Wed May 16 12:50:44 2012 : Info: ++- entering policy set_metroplus_vlan {...} Wed May 16 12:50:44 2012 : Info: +++[reply] returns noop Wed May 16 12:50:44 2012 : Info: ++- policy set_metroplus_vlan returns noop Wed May 16 12:50:44 2012 : Info: } Wed May 16 12:50:44 2012 : Info: Found Auth-Type = MSCHAP Wed May 16 12:50:44 2012 : Info: Found Auth-Type = Accept Wed May 16 12:50:44 2012 : Error: Warning: Found 2 auth-types on request for user 'user01@poc.domain2.fqdn' Wed May 16 12:50:44 2012 : Info: Auth-Type = Accept, accepting the user Wed May 16 12:50:44 2012 : Info: # Executing section post-auth from file /etc/raddb/sites-enabled/domain Wed May 16 12:50:44 2012 : Info: +- entering group post-auth {...} Wed May 16 12:50:44 2012 : Info: ++- entering policy set_domain_vlan {...} Wed May 16 12:50:44 2012 : Info: +++[reply] returns noop Wed May 16 12:50:44 2012 : Info: ++- policy set_domain_vlan returns noop Wed May 16 12:50:44 2012 : Info: [reply_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.16/reply-detail-20120516 Wed May 16 12:50:44 2012 : Info: [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.16/reply-detail-20120516 Wed May 16 12:50:44 2012 : Info: [reply_log] expand: %t -> Wed May 16 12:50:44 2012 Wed May 16 12:50:44 2012 : Info: ++[reply_log] returns ok Wed May 16 12:50:44 2012 : Info: ++[exec] returns noop Sending Access-Accept of id 241 to 172.30.20.16 port 34809 Aruba-User-Vlan = 2268 Aruba-User-Role = "authenticated" Class = 0x7e02069e0000013700010200c0a8c91600000000000000000000000001cd31e856b2bb200000000000000051 MS-CHAP-MPPE-Keys = 0x0000000000000000bd1380861c3ea33604446d6b3e05c99d57c171011e737fa4 MS-CHAP-Domain = "\000POC" MS-Link-Utilization-Threshold = 50 MS-Link-Drop-Time-Limit = 120 Wed May 16 12:50:44 2012 : Info: Finished request 0. Wed May 16 12:50:44 2012 : Debug: Going to the next request Wed May 16 12:50:44 2012 : Debug: Waking up in 4.9 seconds. Wed May 16 12:50:49 2012 : Info: Cleaning up request 0 ID 241 with timestamp +199 Wed May 16 12:50:49 2012 : Info: Ready to process requests. rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.27.1 NAS-Port = 0 NAS-Identifier = "172.30.27.1" NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "0023144E6060" Called-Station-Id = "000B866DB51C" Service-Type = Login-User Framed-MTU = 1100 EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262 Aruba-Essid-Name = "BBTest" Aruba-Location-Id = "d8:c7:c8:cb:67:0a" Aruba-Attr-10 = 0x544330332d566c6f657232 Message-Authenticator = 0x07c360094bb24b4a422377fb836f21d3 Wed May 16 12:50:59 2012 : Info: # Executing section authorize from file /etc/raddb/sites-enabled/domain Wed May 16 12:50:59 2012 : Info: +- entering group authorize {...} Wed May 16 12:50:59 2012 : Info: ++[preprocess] returns ok Wed May 16 12:50:59 2012 : Info: [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.47/auth-detail-20120516 Wed May 16 12:50:59 2012 : Info: [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.47/auth-detail-20120516 Wed May 16 12:50:59 2012 : Info: [auth_log] expand: %t -> Wed May 16 12:50:59 2012 Wed May 16 12:50:59 2012 : Info: ++[auth_log] returns ok Wed May 16 12:50:59 2012 : Info: ++[chap] returns noop Wed May 16 12:50:59 2012 : Info: ++[mschap] returns noop Wed May 16 12:50:59 2012 : Info: ++[digest] returns noop Wed May 16 12:50:59 2012 : Info: [suffix] Looking up realm "poc.domain2.fqdn" for User-Name = "user01@poc.domain2.fqdn" Wed May 16 12:50:59 2012 : Info: [suffix] Found realm "poc.domain2.fqdn" Wed May 16 12:50:59 2012 : Info: [suffix] Adding Realm = "poc.domain2.fqdn" Wed May 16 12:50:59 2012 : Info: [suffix] Proxying request from user user01 to realm poc.domain2.fqdn Wed May 16 12:50:59 2012 : Info: [suffix] Preparing to proxy authentication request to realm "poc.domain2.fqdn" Wed May 16 12:50:59 2012 : Info: ++[suffix] returns updated Wed May 16 12:50:59 2012 : Info: [eap_domain] Request is supposed to be proxied to Realm poc.domain2.fqdn. Not doing EAP. Wed May 16 12:50:59 2012 : Info: ++[eap_domain] returns noop Wed May 16 12:50:59 2012 : Info: ++[files] returns noop Wed May 16 12:50:59 2012 : Info: [ldap_domain] performing user authorization for user01@poc.domain2.fqdn Wed May 16 12:50:59 2012 : Info: [ldap_domain] expand: %{Stripped-User-Name} -> Wed May 16 12:50:59 2012 : Info: [ldap_domain] ... expanding second conditional Wed May 16 12:50:59 2012 : Info: [ldap_domain] expand: %{User-Name} -> user01@poc.domain2.fqdn Wed May 16 12:50:59 2012 : Info: [ldap_domain] expand: (mailLocalAddress=%{%{Stripped-User-Name}:-%{User-Name}}) -> (mailLocalAddress=user01@poc.domain2.fqdn) Wed May 16 12:50:59 2012 : Info: [ldap_domain] expand: ou=Users,ou=domain,dc=domain,dc=com -> ou=Users,ou=domain,dc=domain,dc=com Wed May 16 12:50:59 2012 : Debug: [ldap_domain] ldap_get_conn: Checking Id: 0 Wed May 16 12:50:59 2012 : Debug: [ldap_domain] ldap_get_conn: Got Id: 0 Wed May 16 12:50:59 2012 : Debug: [ldap_domain] performing search in ou=Users,ou=domain,dc=domain,dc=com, with filter (mailLocalAddress=user01@poc.domain2.fqdn) Wed May 16 12:50:59 2012 : Debug: [ldap_domain] object not found Wed May 16 12:50:59 2012 : Info: [ldap_domain] search failed Wed May 16 12:50:59 2012 : Debug: [ldap_domain] ldap_release_conn: Release Id: 0 Wed May 16 12:50:59 2012 : Info: ++[ldap_domain] returns notfound Wed May 16 12:50:59 2012 : Info: ++[expiration] returns noop Wed May 16 12:50:59 2012 : Info: ++[logintime] returns noop Wed May 16 12:50:59 2012 : Info: ++[pap] returns noop Wed May 16 12:50:59 2012 : Info: server metroplus { Wed May 16 12:50:59 2012 : Info: # Executing section pre-proxy from file /etc/raddb/sites-enabled/metroplus Wed May 16 12:50:59 2012 : Info: +- entering group pre-proxy {...} Wed May 16 12:50:59 2012 : Info: ++[files] returns noop Wed May 16 12:50:59 2012 : Info: [attr_filter.pre-proxy] expand: %{Realm} -> poc.domain2.fqdn Wed May 16 12:50:59 2012 : Debug: attr_filter: Matched entry DEFAULT at line 50 Wed May 16 12:50:59 2012 : Info: ++[attr_filter.pre-proxy] returns updated Wed May 16 12:50:59 2012 : Info: [pre_proxy_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /var/log/radius/radacct/172.30.20.47/pre-proxy-detail-20120516 Wed May 16 12:50:59 2012 : Info: [pre_proxy_log] /var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /var/log/radius/radacct/172.30.20.47/pre-proxy-detail-20120516 Wed May 16 12:50:59 2012 : Info: [pre_proxy_log] expand: %t -> Wed May 16 12:50:59 2012 Wed May 16 12:50:59 2012 : Info: ++[pre_proxy_log] returns ok Wed May 16 12:50:59 2012 : Info: } Sending Access-Request of id 120 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.27.1 NAS-Identifier = "172.30.27.1" EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Wed May 16 12:50:59 2012 : Info: Proxying request 1 to home server 192.168.201.22 port 1812 Sending Access-Request of id 120 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.27.1 NAS-Identifier = "172.30.27.1" EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Wed May 16 12:50:59 2012 : Debug: Going to the next request Wed May 16 12:50:59 2012 : Debug: Waking up in 0.9 seconds. Wed May 16 12:51:00 2012 : Debug: Waking up in 28.9 seconds. rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218 Wed May 16 12:51:04 2012 : Info: Sending duplicate proxied request to home server 192.168.201.22 port 1812 - ID: 120 Sending Access-Request of id 120 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.27.1 NAS-Identifier = "172.30.27.1" EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Wed May 16 12:51:04 2012 : Debug: Waking up in 25.0 seconds. rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218 Wed May 16 12:51:09 2012 : Info: Sending duplicate proxied request to home server 192.168.201.22 port 1812 - ID: 120 Sending Access-Request of id 120 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.27.1 NAS-Identifier = "172.30.27.1" EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Wed May 16 12:51:09 2012 : Debug: Waking up in 20.0 seconds. rad_recv: Access-Request packet from host 172.30.20.47 port 32795, id=172, length=218 Wed May 16 12:51:14 2012 : Info: Sending duplicate proxied request to home server 192.168.201.22 port 1812 - ID: 120 Sending Access-Request of id 120 to 192.168.201.22 port 1812 User-Name = "user01@poc.domain2.fqdn" NAS-IP-Address = 172.30.27.1 NAS-Identifier = "172.30.27.1" EAP-Message = 0x0201001a0175736572303140706f632e7068696c6970732e6262 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Wed May 16 12:51:14 2012 : Debug: Waking up in 15.0 seconds. Wed May 16 12:51:29 2012 : Info: WARNING: Internal sanity check failed in event handler for request 1: Discarding the request! Wed May 16 12:51:29 2012 : Info: Ready to process requests.