Mon Dec 2 10:41:25 2013 : Info: FreeRADIUS Version 2.1.10, for host x86_64-pc-linux-gnu, built on Sep 24 2012 at 17:58:57 Mon Dec 2 10:41:25 2013 : Info: Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. Mon Dec 2 10:41:25 2013 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Mon Dec 2 10:41:25 2013 : Info: PARTICULAR PURPOSE. Mon Dec 2 10:41:25 2013 : Info: You may redistribute copies of FreeRADIUS under the terms of the Mon Dec 2 10:41:25 2013 : Info: GNU General Public License v2. Mon Dec 2 10:41:25 2013 : Info: Starting - reading configuration files ... Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/radiusd.conf Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/clients.conf Mon Dec 2 10:41:25 2013 : Debug: including files in directory /etc/freeradius/modules/ Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/cui Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/acct_unique Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/ntlm_auth Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/chap Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/always Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/ldap Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/pam Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/wimax Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/dynamic_clients Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/passwd Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/perl Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/exec Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/sradutmp Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/ippool Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/unix Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/linelog Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/smbpasswd Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/detail.example.com Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/radutmp Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/detail Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/logintime Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/preprocess Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/krb5 Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/expiration Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/mschap Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/attr_filter Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/detail.log Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/policy Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/checkval Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/echo Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/counter Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/mac2ip Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/smsotp Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/inner-eap Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/digest Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/pap Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/realm Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/attr_rewrite Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/otp Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/opendirectory Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/sql_log Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/files Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/mac2vlan Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/etc_group Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/modules/expr Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/eap.conf Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/policy.conf Mon Dec 2 10:41:25 2013 : Debug: including files in directory /etc/freeradius/sites-enabled/ Mon Dec 2 10:41:25 2013 : Debug: including configuration file /etc/freeradius/sites-enabled/your_ap_name_default Mon Dec 2 10:41:25 2013 : Debug: main { Mon Dec 2 10:41:25 2013 : Debug: user = "freerad" Mon Dec 2 10:41:25 2013 : Debug: group = "freerad" Mon Dec 2 10:41:25 2013 : Debug: allow_core_dumps = no Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: including dictionary file /etc/freeradius/dictionary Mon Dec 2 10:41:25 2013 : Debug: main { Mon Dec 2 10:41:25 2013 : Debug: prefix = "/usr" Mon Dec 2 10:41:25 2013 : Debug: localstatedir = "/var" Mon Dec 2 10:41:25 2013 : Debug: logdir = "/var/log/freeradius" Mon Dec 2 10:41:25 2013 : Debug: libdir = "/usr/lib/freeradius" Mon Dec 2 10:41:25 2013 : Debug: radacctdir = "/var/log/freeradius/radacct" Mon Dec 2 10:41:25 2013 : Debug: hostname_lookups = no Mon Dec 2 10:41:25 2013 : Debug: max_request_time = 300 Mon Dec 2 10:41:25 2013 : Debug: cleanup_delay = 5 Mon Dec 2 10:41:25 2013 : Debug: max_requests = 1024 Mon Dec 2 10:41:25 2013 : Debug: pidfile = "/var/run/freeradius/freeradius.pid" Mon Dec 2 10:41:25 2013 : Debug: checkrad = "/usr/sbin/checkrad" Mon Dec 2 10:41:25 2013 : Debug: debug_level = 0 Mon Dec 2 10:41:25 2013 : Debug: proxy_requests = yes Mon Dec 2 10:41:25 2013 : Debug: log { Mon Dec 2 10:41:25 2013 : Debug: stripped_names = no Mon Dec 2 10:41:25 2013 : Debug: auth = no Mon Dec 2 10:41:25 2013 : Debug: auth_badpass = no Mon Dec 2 10:41:25 2013 : Debug: auth_goodpass = no Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: security { Mon Dec 2 10:41:25 2013 : Debug: max_attributes = 200 Mon Dec 2 10:41:25 2013 : Debug: reject_delay = 1 Mon Dec 2 10:41:25 2013 : Debug: status_server = yes Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: radiusd: #### Loading Realms and Home Servers #### Mon Dec 2 10:41:25 2013 : Debug: radiusd: #### Loading Clients #### Mon Dec 2 10:41:25 2013 : Debug: client your_router_name { Mon Dec 2 10:41:25 2013 : Debug: ipaddr = 10.0.1.172 Mon Dec 2 10:41:25 2013 : Debug: require_message_authenticator = yes Mon Dec 2 10:41:25 2013 : Debug: secret = "testkey1" Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: radiusd: #### Instantiating modules #### Mon Dec 2 10:41:25 2013 : Debug: instantiate { Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_exec, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_exec Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "exec" from file /etc/freeradius/modules/exec Mon Dec 2 10:41:25 2013 : Debug: exec { Mon Dec 2 10:41:25 2013 : Debug: wait = no Mon Dec 2 10:41:25 2013 : Debug: input_pairs = "request" Mon Dec 2 10:41:25 2013 : Debug: shell_escape = yes Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_expr, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_expr Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "expr" from file /etc/freeradius/modules/expr Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_expiration, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_expiration Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "expiration" from file /etc/freeradius/modules/expiration Mon Dec 2 10:41:25 2013 : Debug: expiration { Mon Dec 2 10:41:25 2013 : Debug: reply-message = "Password Has Expired " Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_logintime, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_logintime Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "logintime" from file /etc/freeradius/modules/logintime Mon Dec 2 10:41:25 2013 : Debug: logintime { Mon Dec 2 10:41:25 2013 : Debug: reply-message = "You are calling outside your allowed timespan " Mon Dec 2 10:41:25 2013 : Debug: minimum-timeout = 60 Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: radiusd: #### Loading Virtual Servers #### Mon Dec 2 10:41:25 2013 : Debug: server { # from file /etc/freeradius/radiusd.conf Mon Dec 2 10:41:25 2013 : Debug: modules { Mon Dec 2 10:41:25 2013 : Debug: Module: Checking authenticate {...} for more modules to load Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_eap, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_eap Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "eap" from file /etc/freeradius/eap.conf Mon Dec 2 10:41:25 2013 : Debug: eap { Mon Dec 2 10:41:25 2013 : Debug: default_eap_type = "tls" Mon Dec 2 10:41:25 2013 : Debug: timer_expire = 60 Mon Dec 2 10:41:25 2013 : Debug: ignore_unknown_eap_types = no Mon Dec 2 10:41:25 2013 : Debug: cisco_accounting_username_bug = no Mon Dec 2 10:41:25 2013 : Debug: max_sessions = 4096 Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to sub-module rlm_eap_tls Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating eap-tls Mon Dec 2 10:41:25 2013 : Debug: tls { Mon Dec 2 10:41:25 2013 : Debug: rsa_key_exchange = no Mon Dec 2 10:41:25 2013 : Debug: dh_key_exchange = yes Mon Dec 2 10:41:25 2013 : Debug: rsa_key_length = 512 Mon Dec 2 10:41:25 2013 : Debug: dh_key_length = 512 Mon Dec 2 10:41:25 2013 : Debug: verify_depth = 0 Mon Dec 2 10:41:25 2013 : Debug: CA_path = "/var/certs/freeradius/" Mon Dec 2 10:41:25 2013 : Debug: pem_file_type = yes Mon Dec 2 10:41:25 2013 : Debug: private_key_file = "/var/certs/freeradius/server.pem" Mon Dec 2 10:41:25 2013 : Debug: certificate_file = "/var/certs/freeradius/server.pem" Mon Dec 2 10:41:25 2013 : Debug: CA_file = "/var/certs/freeradius/ca.pem" Mon Dec 2 10:41:25 2013 : Debug: private_key_password = "whatever" Mon Dec 2 10:41:25 2013 : Debug: dh_file = "/var/certs/freeradius/dh" Mon Dec 2 10:41:25 2013 : Debug: random_file = "/var/certs/freeradius/random" Mon Dec 2 10:41:25 2013 : Debug: fragment_size = 1024 Mon Dec 2 10:41:25 2013 : Debug: include_length = yes Mon Dec 2 10:41:25 2013 : Debug: check_crl = no Mon Dec 2 10:41:25 2013 : Debug: cipher_list = "HIGH" Mon Dec 2 10:41:25 2013 : Debug: cache { Mon Dec 2 10:41:25 2013 : Debug: enable = no Mon Dec 2 10:41:25 2013 : Debug: lifetime = 24 Mon Dec 2 10:41:25 2013 : Debug: max_entries = 255 Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: verify { Mon Dec 2 10:41:25 2013 : Debug: tmpdir = "/var/tmp/radiusd" Mon Dec 2 10:41:25 2013 : Debug: client = "/usr/bin/openssl verify -CApath /var/certs/freeradius/ %{TLS-Client-Cert-Filename}" Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: Module: Checking authorize {...} for more modules to load Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_preprocess, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_preprocess Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "preprocess" from file /etc/freeradius/modules/preprocess Mon Dec 2 10:41:25 2013 : Debug: preprocess { Mon Dec 2 10:41:25 2013 : Debug: huntgroups = "/etc/freeradius/huntgroups" Mon Dec 2 10:41:25 2013 : Debug: hints = "/etc/freeradius/hints" Mon Dec 2 10:41:25 2013 : Debug: with_ascend_hack = no Mon Dec 2 10:41:25 2013 : Debug: ascend_channels_per_line = 23 Mon Dec 2 10:41:25 2013 : Debug: with_ntdomain_hack = no Mon Dec 2 10:41:25 2013 : Debug: with_specialix_jetstream_hack = no Mon Dec 2 10:41:25 2013 : Debug: with_cisco_vsa_hack = no Mon Dec 2 10:41:25 2013 : Debug: with_alvarion_vsa_hack = no Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_realm, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_realm Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "suffix" from file /etc/freeradius/modules/realm Mon Dec 2 10:41:25 2013 : Debug: realm suffix { Mon Dec 2 10:41:25 2013 : Debug: format = "suffix" Mon Dec 2 10:41:25 2013 : Debug: delimiter = "@" Mon Dec 2 10:41:25 2013 : Debug: ignore_default = no Mon Dec 2 10:41:25 2013 : Debug: ignore_null = no Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: Module: Checking preacct {...} for more modules to load Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_acct_unique, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_acct_unique Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "acct_unique" from file /etc/freeradius/modules/acct_unique Mon Dec 2 10:41:25 2013 : Debug: acct_unique { Mon Dec 2 10:41:25 2013 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_files, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_files Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "files" from file /etc/freeradius/modules/files Mon Dec 2 10:41:25 2013 : Debug: files { Mon Dec 2 10:41:25 2013 : Debug: usersfile = "/etc/freeradius/users" Mon Dec 2 10:41:25 2013 : Debug: acctusersfile = "/etc/freeradius/acct_users" Mon Dec 2 10:41:25 2013 : Debug: preproxy_usersfile = "/etc/freeradius/preproxy_users" Mon Dec 2 10:41:25 2013 : Debug: compat = "no" Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: Module: Checking session {...} for more modules to load Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_radutmp, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_radutmp Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "radutmp" from file /etc/freeradius/modules/radutmp Mon Dec 2 10:41:25 2013 : Debug: radutmp { Mon Dec 2 10:41:25 2013 : Debug: filename = "/var/log/freeradius/radutmp" Mon Dec 2 10:41:25 2013 : Debug: username = "%{User-Name}" Mon Dec 2 10:41:25 2013 : Debug: case_sensitive = yes Mon Dec 2 10:41:25 2013 : Debug: check_with_nas = yes Mon Dec 2 10:41:25 2013 : Debug: perm = 384 Mon Dec 2 10:41:25 2013 : Debug: callerid = yes Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: Module: Checking post-proxy {...} for more modules to load Mon Dec 2 10:41:25 2013 : Debug: Module: Checking post-auth {...} for more modules to load Mon Dec 2 10:41:25 2013 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Mon Dec 2 10:41:25 2013 : Debug: Module: Linked to module rlm_attr_filter Mon Dec 2 10:41:25 2013 : Debug: Module: Instantiating module "attr_filter.access_reject" from file /etc/freeradius/modules/attr_filter Mon Dec 2 10:41:25 2013 : Debug: attr_filter attr_filter.access_reject { Mon Dec 2 10:41:25 2013 : Debug: attrsfile = "/etc/freeradius/attrs.access_reject" Mon Dec 2 10:41:25 2013 : Debug: key = "%{User-Name}" Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: } # modules Mon Dec 2 10:41:25 2013 : Debug: } # server Mon Dec 2 10:41:25 2013 : Debug: radiusd: #### Opening IP addresses and Ports #### Mon Dec 2 10:41:25 2013 : Debug: listen { Mon Dec 2 10:41:25 2013 : Debug: type = "auth" Mon Dec 2 10:41:25 2013 : Debug: ipaddr = 13.24.29.16 Mon Dec 2 10:41:25 2013 : Debug: port = 8280 Mon Dec 2 10:41:25 2013 : Debug: } Mon Dec 2 10:41:25 2013 : Debug: Listening on authentication interface eth0 address 193.234.219.146 port 8280 Mon Dec 2 10:41:25 2013 : Debug: Listening on proxy address 193.234.219.146 port 8282 Mon Dec 2 10:41:25 2013 : Info: Ready to process requests. rad_recv: Access-Request packet from host 10.0.0.172 port 41002, id=61, length=176 User-Name = "testuser@test.com" NAS-IP-Address = 10.0.0.172 NAS-Port = 1 Called-Station-Id = "10-6F-3F-DB-59-E1:NOMADICL" Calling-Station-Id = "00-1B-77-20-AF-B0" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x023a001601746573747573657240746573742e636f6d Message-Authenticator = 0xd60a5b98f06d4518125b99cb5ac42fb7 Mon Dec 2 10:45:43 2013 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/your_ap_name_default Mon Dec 2 10:45:43 2013 : Info: +- entering group authorize {...} Mon Dec 2 10:45:43 2013 : Info: ++[preprocess] returns ok Mon Dec 2 10:45:43 2013 : Info: [suffix] Looking up realm "test.com" for User-Name = "testuser@test.com" Mon Dec 2 10:45:43 2013 : Info: [suffix] No such realm "test.com" Mon Dec 2 10:45:43 2013 : Info: ++[suffix] returns noop Mon Dec 2 10:45:43 2013 : Info: [eap] EAP packet type response id 58 length 22 Mon Dec 2 10:45:43 2013 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Mon Dec 2 10:45:43 2013 : Info: ++[eap] returns updated Mon Dec 2 10:45:43 2013 : Info: ++[expiration] returns noop Mon Dec 2 10:45:43 2013 : Info: ++[logintime] returns noop Mon Dec 2 10:45:43 2013 : Info: Found Auth-Type = EAP Mon Dec 2 10:45:43 2013 : Info: # Executing group from file /etc/freeradius/sites-enabled/your_ap_name_default Mon Dec 2 10:45:43 2013 : Info: +- entering group authenticate {...} Mon Dec 2 10:45:43 2013 : Info: [eap] EAP Identity Mon Dec 2 10:45:43 2013 : Info: [eap] processing type tls Mon Dec 2 10:45:43 2013 : Info: [tls] Requiring client certificate Mon Dec 2 10:45:43 2013 : Info: [tls] Initiate Mon Dec 2 10:45:43 2013 : Info: [tls] Start returned 1 Mon Dec 2 10:45:43 2013 : Info: ++[eap] returns handled Sending Access-Challenge of id 61 to 10.0.0.172 port 41002 EAP-Message = 0x013b00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe1fe58dde1c5552a8d4dce16845adeeb Mon Dec 2 10:45:43 2013 : Info: Finished request 0. Mon Dec 2 10:45:43 2013 : Debug: Going to the next request Mon Dec 2 10:45:43 2013 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.0.0.172 port 41002, id=62, length=178 User-Name = "testuser@test.com" NAS-IP-Address = 10.0.0.172 NAS-Port = 1 Called-Station-Id = "10-6F-3F-DB-59-E1:NOMADICL" Calling-Station-Id = "00-1B-77-20-AF-B0" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x023b0006035a State = 0xe1fe58dde1c5552a8d4dce16845adeeb Message-Authenticator = 0x3823ea570194b629a078fe00c3219668 Mon Dec 2 10:45:43 2013 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/your_ap_name_default Mon Dec 2 10:45:43 2013 : Info: +- entering group authorize {...} Mon Dec 2 10:45:43 2013 : Info: ++[preprocess] returns ok Mon Dec 2 10:45:43 2013 : Info: [suffix] Looking up realm "test.com" for User-Name = "testuser@test.com" Mon Dec 2 10:45:43 2013 : Info: [suffix] No such realm "test.com" Mon Dec 2 10:45:43 2013 : Info: ++[suffix] returns noop Mon Dec 2 10:45:43 2013 : Info: [eap] EAP packet type response id 59 length 6 Mon Dec 2 10:45:43 2013 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Mon Dec 2 10:45:43 2013 : Info: ++[eap] returns updated Mon Dec 2 10:45:43 2013 : Info: ++[expiration] returns noop Mon Dec 2 10:45:43 2013 : Info: ++[logintime] returns noop Mon Dec 2 10:45:43 2013 : Info: Found Auth-Type = EAP Mon Dec 2 10:45:43 2013 : Info: # Executing group from file /etc/freeradius/sites-enabled/your_ap_name_default Mon Dec 2 10:45:43 2013 : Info: +- entering group authenticate {...} Mon Dec 2 10:45:43 2013 : Info: [eap] Request found, released from the list Mon Dec 2 10:45:43 2013 : Info: [eap] EAP NAK Mon Dec 2 10:45:43 2013 : Info: [eap] NAK asked for unsupported type 90 Mon Dec 2 10:45:43 2013 : Info: [eap] No common EAP types found. Mon Dec 2 10:45:43 2013 : Info: [eap] Failed in EAP select Mon Dec 2 10:45:43 2013 : Info: ++[eap] returns invalid Mon Dec 2 10:45:43 2013 : Info: Failed to authenticate the user. Mon Dec 2 10:45:43 2013 : Info: Using Post-Auth-Type Reject Mon Dec 2 10:45:43 2013 : Info: # Executing group from file /etc/freeradius/sites-enabled/your_ap_name_default Mon Dec 2 10:45:43 2013 : Info: +- entering group REJECT {...} Mon Dec 2 10:45:43 2013 : Info: [attr_filter.access_reject] expand: %{User-Name} -> testuser@test.com Mon Dec 2 10:45:43 2013 : Debug: attr_filter: Matched entry DEFAULT at line 11 Mon Dec 2 10:45:43 2013 : Info: ++[attr_filter.access_reject] returns updated Mon Dec 2 10:45:43 2013 : Info: Delaying reject of request 1 for 1 seconds Mon Dec 2 10:45:43 2013 : Debug: Going to the next request Mon Dec 2 10:45:43 2013 : Debug: Waking up in 0.9 seconds. Mon Dec 2 10:45:44 2013 : Info: Sending delayed reject for request 1 I see that radiusd: #### Loading Realms and Home Servers #### is empty but I don't understand why? I have defined a realm in proxy.conf realm test.com { type = radius authhost = 13.24.29.16:8180 <http://193.234.219.146:8180/> secret = my_secret_with_other_radius_server nostrip } Thanks Alan!! On Mon, Dec 2, 2013 at 9:27 AM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Full debug log please
alan -- Sent from my Android device with K-9 Mail. Please excuse my brevity.