radiusd -XXX Fri Nov 4 20:06:47 2016 : Debug: Server was built with: Fri Nov 4 20:06:47 2016 : Debug: accounting : yes Fri Nov 4 20:06:47 2016 : Debug: authentication : yes Fri Nov 4 20:06:47 2016 : Debug: ascend-binary-attributes : yes Fri Nov 4 20:06:47 2016 : Debug: coa : yes Fri Nov 4 20:06:47 2016 : Debug: control-socket : yes Fri Nov 4 20:06:47 2016 : Debug: detail : yes Fri Nov 4 20:06:47 2016 : Debug: dhcp : yes Fri Nov 4 20:06:47 2016 : Debug: dynamic-clients : yes Fri Nov 4 20:06:47 2016 : Debug: osfc2 : no Fri Nov 4 20:06:47 2016 : Debug: proxy : yes Fri Nov 4 20:06:47 2016 : Debug: regex-pcre : no Fri Nov 4 20:06:47 2016 : Debug: regex-posix : yes Fri Nov 4 20:06:47 2016 : Debug: regex-posix-extended : yes Fri Nov 4 20:06:47 2016 : Debug: session-management : yes Fri Nov 4 20:06:47 2016 : Debug: stats : yes Fri Nov 4 20:06:47 2016 : Debug: tcp : yes Fri Nov 4 20:06:47 2016 : Debug: threads : yes Fri Nov 4 20:06:47 2016 : Debug: tls : yes Fri Nov 4 20:06:47 2016 : Debug: unlang : yes Fri Nov 4 20:06:47 2016 : Debug: vmps : yes Fri Nov 4 20:06:47 2016 : Debug: developer : no Fri Nov 4 20:06:47 2016 : Debug: Server core libs: Fri Nov 4 20:06:47 2016 : Debug: freeradius-server : 3.0.13 Fri Nov 4 20:06:47 2016 : Debug: talloc : 2.0.* Fri Nov 4 20:06:47 2016 : Debug: ssl : 1.0.1i release Fri Nov 4 20:06:47 2016 : Debug: Endianness: Fri Nov 4 20:06:47 2016 : Debug: little Fri Nov 4 20:06:47 2016 : Debug: Compilation flags: Fri Nov 4 20:06:47 2016 : Debug: cppflags : Fri Nov 4 20:06:47 2016 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -g -O2 -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 Fri Nov 4 20:06:47 2016 : Debug: ldflags : Fri Nov 4 20:06:47 2016 : Debug: libs : -lcrypto -lssl -ltalloc -lnsl -lresolv -ldl -lpthread Fri Nov 4 20:06:47 2016 : Debug: Fri Nov 4 20:06:47 2016 : Info: FreeRADIUS Version 3.0.13 Fri Nov 4 20:06:47 2016 : Info: Copyright (C) 1999-2016 The FreeRADIUS server project and contributors Fri Nov 4 20:06:47 2016 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Fri Nov 4 20:06:47 2016 : Info: PARTICULAR PURPOSE Fri Nov 4 20:06:47 2016 : Info: You may redistribute copies of FreeRADIUS under the terms of the Fri Nov 4 20:06:47 2016 : Info: GNU General Public License Fri Nov 4 20:06:47 2016 : Info: For more information about these matters, see the file named COPYRIGHT Fri Nov 4 20:06:47 2016 : Info: Starting - reading configuration files ... Fri Nov 4 20:06:47 2016 : Debug: including dictionary file /usr/local/share/freeradius/dictionary Fri Nov 4 20:06:47 2016 : Debug: including dictionary file /usr/local/share/freeradius/dictionary.dhcp Fri Nov 4 20:06:47 2016 : Debug: including dictionary file /usr/local/share/freeradius/dictionary.vqp Fri Nov 4 20:06:47 2016 : Debug: including dictionary file /usr/local/etc/raddb/dictionary Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/radiusd.conf Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/proxy.conf Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/clients.conf Fri Nov 4 20:06:47 2016 : Debug: including files in directory /usr/local/etc/raddb/mods-enabled/ Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/perl Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/chap Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/detail Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/preprocess Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/mods-enabled/eap Fri Nov 4 20:06:47 2016 : Debug: including files in directory /usr/local/etc/raddb/policy.d/ Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/abfab-tr Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/accounting Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/canonicalization Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/control Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/cui Fri Nov 4 20:06:47 2016 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Fri Nov 4 20:06:47 2016 : Debug: OPTIMIZING (no == yes) --> FALSE Fri Nov 4 20:06:47 2016 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Fri Nov 4 20:06:47 2016 : Debug: OPTIMIZING (no == yes) --> FALSE Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/debug Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/dhcp Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/eap Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/filter Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/moonshot-targeted-ids Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/policy.d/operator-name Fri Nov 4 20:06:47 2016 : Debug: including files in directory /usr/local/etc/raddb/sites-enabled/ Fri Nov 4 20:06:47 2016 : Debug: including configuration file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:06:47 2016 : Debug: main { Fri Nov 4 20:06:47 2016 : Debug: security { Fri Nov 4 20:06:47 2016 : Debug: allow_core_dumps = no Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[462]: The item 'max_attributes' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[480]: The item 'reject_delay' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[500]: The item 'status_server' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[510]: The item 'allow_vulnerable_openssl' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: name = "radiusd" Fri Nov 4 20:06:47 2016 : Debug: prefix = "/usr/local" Fri Nov 4 20:06:47 2016 : Debug: localstatedir = "/usr/local/var" Fri Nov 4 20:06:47 2016 : Debug: logdir = "/usr/local/var/log/radius" Fri Nov 4 20:06:47 2016 : Debug: run_dir = "/usr/local/var/run/radiusd" Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[67]: The item 'confdir' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[74]: The item 'db_dir' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[108]: The item 'libdir' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[119]: The item 'pidfile' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[140]: The item 'correct_escapes' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[194]: The item 'max_request_time' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[213]: The item 'cleanup_delay' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[250]: The item 'hostname_lookups' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[372]: The item 'checkrad' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[529]: The item 'proxy_requests' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: main { Fri Nov 4 20:06:47 2016 : Debug: name = "radiusd" Fri Nov 4 20:06:47 2016 : Debug: prefix = "/usr/local" Fri Nov 4 20:06:47 2016 : Debug: localstatedir = "/usr/local/var" Fri Nov 4 20:06:47 2016 : Debug: sbindir = "/usr/local/sbin" Fri Nov 4 20:06:47 2016 : Debug: logdir = "/usr/local/var/log/radius" Fri Nov 4 20:06:47 2016 : Debug: run_dir = "/usr/local/var/run/radiusd" Fri Nov 4 20:06:47 2016 : Debug: libdir = "/usr/local/lib" Fri Nov 4 20:06:47 2016 : Debug: radacctdir = "/usr/local/var/log/radius/radacct" Fri Nov 4 20:06:47 2016 : Debug: hostname_lookups = no Fri Nov 4 20:06:47 2016 : Debug: max_request_time = 30 Fri Nov 4 20:06:47 2016 : Debug: cleanup_delay = 5 Fri Nov 4 20:06:47 2016 : Debug: max_requests = 16384 Fri Nov 4 20:06:47 2016 : Debug: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" Fri Nov 4 20:06:47 2016 : Debug: checkrad = "/usr/local/sbin/checkrad" Fri Nov 4 20:06:47 2016 : Debug: debug_level = 0 Fri Nov 4 20:06:47 2016 : Debug: proxy_requests = yes Fri Nov 4 20:06:47 2016 : Debug: log { Fri Nov 4 20:06:47 2016 : Debug: stripped_names = no Fri Nov 4 20:06:47 2016 : Debug: auth = no Fri Nov 4 20:06:47 2016 : Debug: auth_badpass = no Fri Nov 4 20:06:47 2016 : Debug: auth_goodpass = no Fri Nov 4 20:06:47 2016 : Debug: colourise = yes Fri Nov 4 20:06:47 2016 : Debug: msg_denied = "You are already logged in - access denied" Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[268]: The item 'destination' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[285]: The item 'file' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[331]: The item 'syslog_facility' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: resources { Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: security { Fri Nov 4 20:06:47 2016 : Debug: max_attributes = 200 Fri Nov 4 20:06:47 2016 : Debug: reject_delay = 1.000000 Fri Nov 4 20:06:47 2016 : Debug: status_server = yes Fri Nov 4 20:06:47 2016 : Debug: allow_vulnerable_openssl = "CVE-2016-6304" Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[67]: The item 'confdir' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[74]: The item 'db_dir' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Warning: /usr/local/etc/raddb/radiusd.conf[140]: The item 'correct_escapes' is defined, but is unused by the configuration Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: radiusd: #### Loading Realms and Home Servers #### Fri Nov 4 20:06:47 2016 : Debug: proxy server { Fri Nov 4 20:06:47 2016 : Debug: retry_delay = 5 Fri Nov 4 20:06:47 2016 : Debug: retry_count = 3 Fri Nov 4 20:06:47 2016 : Debug: default_fallback = no Fri Nov 4 20:06:47 2016 : Debug: dead_time = 120 Fri Nov 4 20:06:47 2016 : Debug: wake_all_if_all_dead = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: home_server localhost { Fri Nov 4 20:06:47 2016 : Debug: ipaddr = 127.0.0.1 Fri Nov 4 20:06:47 2016 : Debug: port = 1812 Fri Nov 4 20:06:47 2016 : Debug: type = "auth" Fri Nov 4 20:06:47 2016 : Debug: proto = "udp" Fri Nov 4 20:06:47 2016 : Debug: secret = "secret" Fri Nov 4 20:06:47 2016 : Debug: response_window = 20.000000 Fri Nov 4 20:06:47 2016 : Debug: response_timeouts = 1 Fri Nov 4 20:06:47 2016 : Debug: max_outstanding = 65536 Fri Nov 4 20:06:47 2016 : Debug: zombie_period = 40 Fri Nov 4 20:06:47 2016 : Debug: status_check = "status-server" Fri Nov 4 20:06:47 2016 : Debug: ping_interval = 30 Fri Nov 4 20:06:47 2016 : Debug: check_interval = 30 Fri Nov 4 20:06:47 2016 : Debug: check_timeout = 4 Fri Nov 4 20:06:47 2016 : Debug: num_answers_to_alive = 3 Fri Nov 4 20:06:47 2016 : Debug: revive_interval = 120 Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: max_requests = 0 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 0 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: coa { Fri Nov 4 20:06:47 2016 : Debug: irt = 2 Fri Nov 4 20:06:47 2016 : Debug: mrt = 16 Fri Nov 4 20:06:47 2016 : Debug: mrc = 5 Fri Nov 4 20:06:47 2016 : Debug: mrd = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: realm LOCAL { Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: radiusd: #### Loading Clients #### Fri Nov 4 20:06:47 2016 : Debug: client localhost { Fri Nov 4 20:06:47 2016 : Debug: ipaddr = 127.0.0.1 Fri Nov 4 20:06:47 2016 : Debug: require_message_authenticator = no Fri Nov 4 20:06:47 2016 : Debug: secret = "secret" Fri Nov 4 20:06:47 2016 : Debug: nas_type = "other" Fri Nov 4 20:06:47 2016 : Debug: proto = "*" Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32 Fri Nov 4 20:06:47 2016 : Debug: client S1 { Fri Nov 4 20:06:47 2016 : Debug: ipaddr = IP Fri Nov 4 20:06:47 2016 : Debug: require_message_authenticator = no Fri Nov 4 20:06:47 2016 : Debug: secret = "secret" Fri Nov 4 20:06:47 2016 : Debug: nas_type = "other" Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Adding client IP/32 (IP) to prefix tree 32 Fri Nov 4 20:06:47 2016 : Debug: client S2 { Fri Nov 4 20:06:47 2016 : Debug: ipaddr = IP Fri Nov 4 20:06:47 2016 : Debug: require_message_authenticator = no Fri Nov 4 20:06:47 2016 : Debug: secret = "secret" Fri Nov 4 20:06:47 2016 : Debug: nas_type = "other" Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Adding client IP/32 (IP) to prefix tree 32 Fri Nov 4 20:06:47 2016 : Debug: client S3 { Fri Nov 4 20:06:47 2016 : Debug: ipaddr = IP Fri Nov 4 20:06:47 2016 : Debug: require_message_authenticator = no Fri Nov 4 20:06:47 2016 : Debug: secret = "secret" Fri Nov 4 20:06:47 2016 : Debug: nas_type = "cisco" Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Adding client IP/32 (IP) to prefix tree 32 Fri Nov 4 20:06:47 2016 : Info: Debugger not attached Fri Nov 4 20:06:47 2016 : Debug: # Creating Auth-Type = EAP Fri Nov 4 20:06:47 2016 : Debug: radiusd: #### Instantiating modules #### Fri Nov 4 20:06:47 2016 : Debug: modules { Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_perl with path: /usr/local/lib/rlm_perl.so Fri Nov 4 20:06:47 2016 : Debug: Loaded rlm_perl, checking if it's valid Fri Nov 4 20:06:47 2016 : Debug: # Loaded module rlm_perl Fri Nov 4 20:06:47 2016 : Debug: # Loading module "GoPerl" from file /usr/local/etc/raddb/mods-enabled/perl Fri Nov 4 20:06:47 2016 : Debug: perl GoPerl { Fri Nov 4 20:06:47 2016 : Debug: filename = "/usr/local/etc/raddb/mods-config/perl/example.pl" Fri Nov 4 20:06:47 2016 : Debug: func_authorize = "authorize" Fri Nov 4 20:06:47 2016 : Debug: func_authenticate = "authenticate" Fri Nov 4 20:06:47 2016 : Debug: func_post_auth = "post_auth" Fri Nov 4 20:06:47 2016 : Debug: func_accounting = "accounting" Fri Nov 4 20:06:47 2016 : Debug: func_preacct = "preacct" Fri Nov 4 20:06:47 2016 : Debug: func_checksimul = "checksimul" Fri Nov 4 20:06:47 2016 : Debug: func_detach = "detach" Fri Nov 4 20:06:47 2016 : Debug: func_xlat = "xlat" Fri Nov 4 20:06:47 2016 : Debug: func_pre_proxy = "pre_proxy" Fri Nov 4 20:06:47 2016 : Debug: func_post_proxy = "post_proxy" Fri Nov 4 20:06:47 2016 : Debug: func_recv_coa = "recv_coa" Fri Nov 4 20:06:47 2016 : Debug: func_send_coa = "send_coa" Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_chap with path: /usr/local/lib/rlm_chap.so Fri Nov 4 20:06:47 2016 : Debug: Loaded rlm_chap, checking if it's valid Fri Nov 4 20:06:47 2016 : Debug: # Loaded module rlm_chap Fri Nov 4 20:06:47 2016 : Debug: # Loading module "chap" from file /usr/local/etc/raddb/mods-enabled/chap Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_always with path: /usr/local/lib/rlm_always.so Fri Nov 4 20:06:47 2016 : Debug: Loaded rlm_always, checking if it's valid Fri Nov 4 20:06:47 2016 : Debug: # Loaded module rlm_always Fri Nov 4 20:06:47 2016 : Debug: # Loading module "reject" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always reject { Fri Nov 4 20:06:47 2016 : Debug: rcode = "reject" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "fail" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always fail { Fri Nov 4 20:06:47 2016 : Debug: rcode = "fail" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "ok" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always ok { Fri Nov 4 20:06:47 2016 : Debug: rcode = "ok" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "handled" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always handled { Fri Nov 4 20:06:47 2016 : Debug: rcode = "handled" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "invalid" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always invalid { Fri Nov 4 20:06:47 2016 : Debug: rcode = "invalid" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "userlock" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always userlock { Fri Nov 4 20:06:47 2016 : Debug: rcode = "userlock" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "notfound" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always notfound { Fri Nov 4 20:06:47 2016 : Debug: rcode = "notfound" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "noop" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always noop { Fri Nov 4 20:06:47 2016 : Debug: rcode = "noop" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "updated" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: always updated { Fri Nov 4 20:06:47 2016 : Debug: rcode = "updated" Fri Nov 4 20:06:47 2016 : Debug: simulcount = 0 Fri Nov 4 20:06:47 2016 : Debug: mpp = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_detail with path: /usr/local/lib/rlm_detail.so Fri Nov 4 20:06:47 2016 : Debug: Loaded rlm_detail, checking if it's valid Fri Nov 4 20:06:47 2016 : Debug: # Loaded module rlm_detail Fri Nov 4 20:06:47 2016 : Debug: # Loading module "detail" from file /usr/local/etc/raddb/mods-enabled/detail Fri Nov 4 20:06:47 2016 : Debug: detail { Fri Nov 4 20:06:47 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Fri Nov 4 20:06:47 2016 : Debug: header = "%t" Fri Nov 4 20:06:47 2016 : Debug: permissions = 384 Fri Nov 4 20:06:47 2016 : Debug: locking = no Fri Nov 4 20:06:47 2016 : Debug: escape_filenames = no Fri Nov 4 20:06:47 2016 : Debug: log_packet_header = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: detail auth_log { Fri Nov 4 20:06:47 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Fri Nov 4 20:06:47 2016 : Debug: header = "%t" Fri Nov 4 20:06:47 2016 : Debug: permissions = 384 Fri Nov 4 20:06:47 2016 : Debug: locking = no Fri Nov 4 20:06:47 2016 : Debug: escape_filenames = no Fri Nov 4 20:06:47 2016 : Debug: log_packet_header = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: detail reply_log { Fri Nov 4 20:06:47 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Fri Nov 4 20:06:47 2016 : Debug: header = "%t" Fri Nov 4 20:06:47 2016 : Debug: permissions = 384 Fri Nov 4 20:06:47 2016 : Debug: locking = no Fri Nov 4 20:06:47 2016 : Debug: escape_filenames = no Fri Nov 4 20:06:47 2016 : Debug: log_packet_header = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: detail pre_proxy_log { Fri Nov 4 20:06:47 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Fri Nov 4 20:06:47 2016 : Debug: header = "%t" Fri Nov 4 20:06:47 2016 : Debug: permissions = 384 Fri Nov 4 20:06:47 2016 : Debug: locking = no Fri Nov 4 20:06:47 2016 : Debug: escape_filenames = no Fri Nov 4 20:06:47 2016 : Debug: log_packet_header = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Loading module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: detail post_proxy_log { Fri Nov 4 20:06:47 2016 : Debug: filename = "/usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Fri Nov 4 20:06:47 2016 : Debug: header = "%t" Fri Nov 4 20:06:47 2016 : Debug: permissions = 384 Fri Nov 4 20:06:47 2016 : Debug: locking = no Fri Nov 4 20:06:47 2016 : Debug: escape_filenames = no Fri Nov 4 20:06:47 2016 : Debug: log_packet_header = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_preprocess with path: /usr/local/lib/rlm_preprocess.so Fri Nov 4 20:06:47 2016 : Debug: Loaded rlm_preprocess, checking if it's valid Fri Nov 4 20:06:47 2016 : Debug: # Loaded module rlm_preprocess Fri Nov 4 20:06:47 2016 : Debug: # Loading module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess Fri Nov 4 20:06:47 2016 : Debug: preprocess { Fri Nov 4 20:06:47 2016 : Debug: huntgroups = "/usr/local/etc/raddb/mods-config/preprocess/huntgroups" Fri Nov 4 20:06:47 2016 : Debug: hints = "/usr/local/etc/raddb/mods-config/preprocess/hints" Fri Nov 4 20:06:47 2016 : Debug: with_ascend_hack = no Fri Nov 4 20:06:47 2016 : Debug: ascend_channels_per_line = 23 Fri Nov 4 20:06:47 2016 : Debug: with_ntdomain_hack = no Fri Nov 4 20:06:47 2016 : Debug: with_specialix_jetstream_hack = no Fri Nov 4 20:06:47 2016 : Debug: with_cisco_vsa_hack = no Fri Nov 4 20:06:47 2016 : Debug: with_alvarion_vsa_hack = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_eap with path: /usr/local/lib/rlm_eap.so Fri Nov 4 20:06:47 2016 : Debug: Loaded rlm_eap, checking if it's valid Fri Nov 4 20:06:47 2016 : Debug: # Loaded module rlm_eap Fri Nov 4 20:06:47 2016 : Debug: # Loading module "EAP" from file /usr/local/etc/raddb/mods-enabled/eap Fri Nov 4 20:06:47 2016 : Debug: eap EAP { Fri Nov 4 20:06:47 2016 : Debug: default_eap_type = "tls" Fri Nov 4 20:06:47 2016 : Debug: timer_expire = 60 Fri Nov 4 20:06:47 2016 : Debug: ignore_unknown_eap_types = no Fri Nov 4 20:06:47 2016 : Debug: cisco_accounting_username_bug = no Fri Nov 4 20:06:47 2016 : Debug: max_sessions = 16384 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: instantiate { Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "GoPerl" from file /usr/local/etc/raddb/mods-enabled/perl Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "reject" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "fail" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "ok" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "handled" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "invalid" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "userlock" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "notfound" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "noop" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "updated" from file /usr/local/etc/raddb/mods-enabled/always Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess Fri Nov 4 20:06:47 2016 : Debug: reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/huntgroups Fri Nov 4 20:06:47 2016 : Debug: reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/hints Fri Nov 4 20:06:47 2016 : Debug: # Instantiating module "EAP" from file /usr/local/etc/raddb/mods-enabled/eap Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_eap_tls with path: /usr/local/lib/rlm_eap_tls.so Fri Nov 4 20:06:47 2016 : Debug: # Linked to sub-module rlm_eap_tls Fri Nov 4 20:06:47 2016 : Debug: tls { Fri Nov 4 20:06:47 2016 : Debug: tls = "tls-common" Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: tls-config tls-common { Fri Nov 4 20:06:47 2016 : Debug: verify_depth = 0 Fri Nov 4 20:06:47 2016 : Debug: ca_path = "/usr/local/etc/raddb/certs" Fri Nov 4 20:06:47 2016 : Debug: pem_file_type = yes Fri Nov 4 20:06:47 2016 : Debug: private_key_file = "/usr/local/etc/raddb/certs/company/SERVER_private_cert.pem" Fri Nov 4 20:06:47 2016 : Debug: certificate_file = "/usr/local/etc/raddb/certs/company/SERVER_cert.pem" Fri Nov 4 20:06:47 2016 : Debug: ca_file = "/usr/local/etc/raddb/certs/company/companyCA.pem" Fri Nov 4 20:06:47 2016 : Debug: private_key_password = "secret" Fri Nov 4 20:06:47 2016 : Debug: dh_file = "/usr/local/etc/raddb/certs/dh" Fri Nov 4 20:06:47 2016 : Debug: fragment_size = 1024 Fri Nov 4 20:06:47 2016 : Debug: include_length = yes Fri Nov 4 20:06:47 2016 : Debug: auto_chain = yes Fri Nov 4 20:06:47 2016 : Debug: check_crl = no Fri Nov 4 20:06:47 2016 : Debug: check_all_crl = no Fri Nov 4 20:06:47 2016 : Debug: cipher_list = "DEFAULT" Fri Nov 4 20:06:47 2016 : Debug: ecdh_curve = "prime256v1" Fri Nov 4 20:06:47 2016 : Debug: cache { Fri Nov 4 20:06:47 2016 : Debug: enable = yes Fri Nov 4 20:06:47 2016 : Debug: lifetime = 24 Fri Nov 4 20:06:47 2016 : Debug: max_entries = 255 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: verify { Fri Nov 4 20:06:47 2016 : Debug: skip_if_ocsp_ok = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: ocsp { Fri Nov 4 20:06:47 2016 : Debug: enable = no Fri Nov 4 20:06:47 2016 : Debug: override_cert_url = yes Fri Nov 4 20:06:47 2016 : Debug: url = "http://127.0.0.1/ocsp/" Fri Nov 4 20:06:47 2016 : Debug: use_nonce = yes Fri Nov 4 20:06:47 2016 : Debug: timeout = 0 Fri Nov 4 20:06:47 2016 : Debug: softfail = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Loading rlm_eap_ttls with path: /usr/local/lib/rlm_eap_ttls.so Fri Nov 4 20:06:47 2016 : Debug: # Linked to sub-module rlm_eap_ttls Fri Nov 4 20:06:47 2016 : Debug: ttls { Fri Nov 4 20:06:47 2016 : Debug: tls = "tls-common" Fri Nov 4 20:06:47 2016 : Debug: default_eap_type = "md5" Fri Nov 4 20:06:47 2016 : Debug: copy_request_to_tunnel = no Fri Nov 4 20:06:47 2016 : Debug: use_tunneled_reply = no Fri Nov 4 20:06:47 2016 : Debug: virtual_server = "inner-tunnel" Fri Nov 4 20:06:47 2016 : Debug: include_length = yes Fri Nov 4 20:06:47 2016 : Debug: require_client_cert = no Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: tls: Using cached TLS configuration from previous invocation Fri Nov 4 20:06:47 2016 : Debug: } # modules Fri Nov 4 20:06:47 2016 : Debug: radiusd: #### Loading Virtual Servers #### Fri Nov 4 20:06:47 2016 : Debug: server { # from file /usr/local/etc/raddb/radiusd.conf Fri Nov 4 20:06:47 2016 : Debug: } # server Fri Nov 4 20:06:47 2016 : Debug: server default { # from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:06:47 2016 : Debug: authenticate { Fri Nov 4 20:06:47 2016 : Debug: EAP Fri Nov 4 20:06:47 2016 : Debug: } # authenticate Fri Nov 4 20:06:47 2016 : Debug: authorize { Fri Nov 4 20:06:47 2016 : Debug: policy filter_username { Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name) { Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name =~ / /) { Fri Nov 4 20:06:47 2016 : Debug: update { Fri Nov 4 20:06:47 2016 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: reject Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name =~ /@[^@]*@/) { Fri Nov 4 20:06:47 2016 : Debug: update { Fri Nov 4 20:06:47 2016 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: reject Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name =~ /\.\./) { Fri Nov 4 20:06:47 2016 : Debug: update { Fri Nov 4 20:06:47 2016 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: reject Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Fri Nov 4 20:06:47 2016 : Debug: update { Fri Nov 4 20:06:47 2016 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: reject Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name =~ /\.$/) { Fri Nov 4 20:06:47 2016 : Debug: update { Fri Nov 4 20:06:47 2016 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: reject Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: if (&User-Name =~ /@\./) { Fri Nov 4 20:06:47 2016 : Debug: update { Fri Nov 4 20:06:47 2016 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: reject Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: preprocess Fri Nov 4 20:06:47 2016 : Debug: auth_log Fri Nov 4 20:06:47 2016 : Debug: GoPerl Fri Nov 4 20:06:47 2016 : Debug: EAP Fri Nov 4 20:06:47 2016 : Debug: } # authorize Fri Nov 4 20:06:47 2016 : Debug: accounting { Fri Nov 4 20:06:47 2016 : Debug: detail Fri Nov 4 20:06:47 2016 : Debug: } # accounting Fri Nov 4 20:06:47 2016 : Debug: } # server default Fri Nov 4 20:06:47 2016 : Debug: Created signal pipe. Read end FD 5, write end FD 6 Fri Nov 4 20:06:47 2016 : Debug: radiusd: #### Opening IP addresses and Ports #### Fri Nov 4 20:06:47 2016 : Debug: Loading proto_auth with path: /usr/local/lib/proto_auth.so Fri Nov 4 20:06:47 2016 : Debug: Loading proto_auth failed: /usr/local/lib/proto_auth.so: cannot open shared object file: No such file or directory - No such file or directory Fri Nov 4 20:06:47 2016 : Debug: Loading library using linker search path(s) Fri Nov 4 20:06:47 2016 : Debug: Defaults : /lib:/usr/lib Fri Nov 4 20:06:47 2016 : Debug: Failed with error: proto_auth.so: cannot open shared object file: No such file or directory Fri Nov 4 20:06:47 2016 : Debug: listen { Fri Nov 4 20:06:47 2016 : Debug: type = "auth" Fri Nov 4 20:06:47 2016 : Debug: ipaddr = * Fri Nov 4 20:06:47 2016 : Debug: port = 0 Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Loading proto_acct with path: /usr/local/lib/proto_acct.so Fri Nov 4 20:06:47 2016 : Debug: Loading proto_acct failed: /usr/local/lib/proto_acct.so: cannot open shared object file: No such file or directory - No such file or directory Fri Nov 4 20:06:47 2016 : Debug: Loading library using linker search path(s) Fri Nov 4 20:06:47 2016 : Debug: Defaults : /lib:/usr/lib Fri Nov 4 20:06:47 2016 : Debug: Failed with error: proto_acct.so: cannot open shared object file: No such file or directory Fri Nov 4 20:06:47 2016 : Debug: listen { Fri Nov 4 20:06:47 2016 : Debug: type = "acct" Fri Nov 4 20:06:47 2016 : Debug: ipaddr = * Fri Nov 4 20:06:47 2016 : Debug: port = 0 Fri Nov 4 20:06:47 2016 : Debug: limit { Fri Nov 4 20:06:47 2016 : Debug: max_connections = 16 Fri Nov 4 20:06:47 2016 : Debug: lifetime = 0 Fri Nov 4 20:06:47 2016 : Debug: idle_timeout = 30 Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: } Fri Nov 4 20:06:47 2016 : Debug: Listening on auth address * port 1812 bound to server default Fri Nov 4 20:06:47 2016 : Debug: Listening on acct address * port 1813 bound to server default Fri Nov 4 20:06:47 2016 : Debug: Opened new proxy socket 'proxy address * port 45421' Fri Nov 4 20:06:47 2016 : Debug: Listening on proxy address * port 45421 Fri Nov 4 20:06:47 2016 : Info: Ready to process requests Fri Nov 4 20:07:07 2016 : Debug: (0) Received Access-Request Id 23 from IP:62065 to IP:1812 length 300 Fri Nov 4 20:07:07 2016 : Debug: (0) User-Name = "host/PC.company.com" Fri Nov 4 20:07:07 2016 : Debug: (0) Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (0) Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: (0) Called-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (0) Calling-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (0) EAP-Message = 0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d Fri Nov 4 20:07:07 2016 : Debug: (0) Message-Authenticator = 0x037e505edc35adae3a16c221401c5772 Fri Nov 4 20:07:07 2016 : Debug: (0) NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: (0) NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: (0) NAS-Port-Id = "INT" Fri Nov 4 20:07:07 2016 : Debug: (0) NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: (0) Cisco-AVPair = "service-type=Framed" Fri Nov 4 20:07:07 2016 : Debug: (0) Cisco-AVPair = "audit-session-id=0A016E02000226BF49A2B110" Fri Nov 4 20:07:07 2016 : Debug: (0) Cisco-AVPair = "method=dot1x" Fri Nov 4 20:07:07 2016 : Debug: (0) Proxy-State = 0x8b16a4770000130b Fri Nov 4 20:07:07 2016 : Debug: (0) session-state: No State attribute Fri Nov 4 20:07:07 2016 : Debug: (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (0) authorize { Fri Nov 4 20:07:07 2016 : Debug: (0) policy filter_username { Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name) -> TRUE Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ / /) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ / /) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /@[^@]*@/ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /\.\./ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /\.\./ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /\.$/) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /\.$/) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /@\./) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (0) if (&User-Name =~ /@\./) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (0) } # if (&User-Name) = notfound Fri Nov 4 20:07:07 2016 : Debug: (0) } # policy filter_username = notfound Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: calling preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: returned from preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (0) [preprocess] = ok Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: calling auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Fri Nov 4 20:07:07 2016 : Debug: if { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IP-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: else { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IPv6-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: literal --> /auth-detail- Fri Nov 4 20:07:07 2016 : Debug: percent --> Y Fri Nov 4 20:07:07 2016 : Debug: percent --> m Fri Nov 4 20:07:07 2016 : Debug: percent --> d Fri Nov 4 20:07:07 2016 : Debug: (0) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: (0) auth_log: --> /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: (0) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: %t Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: percent --> t Fri Nov 4 20:07:07 2016 : Debug: (0) auth_log: EXPAND %t Fri Nov 4 20:07:07 2016 : Debug: (0) auth_log: --> Fri Nov 4 20:07:07 2016 Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: returned from auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: (0) [auth_log] = ok Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: calling GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4770000130b' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x037e505edc35adae3a16c221401c5772' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x1680260) Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC.company.com Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = INT Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4770000130b Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x037e505edc35adae3a16c221401c5772 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 4 2016 20:07:07 CET Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4770000130b' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x0201001e01686f73742f45564f30323130302e65766f736f66742e636f6d' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x037e505edc35adae3a16c221401c5772' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Fri Nov 4 20:07:07 2016 : Debug: (0) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: returned from GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (0) [GoPerl] = ok Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (0) EAP: Peer sent EAP Response (code 2) ID 1 length 30 Fri Nov 4 20:07:07 2016 : Debug: (0) EAP: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authorize]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (0) [EAP] = ok Fri Nov 4 20:07:07 2016 : Debug: (0) } # authorize = ok Fri Nov 4 20:07:07 2016 : Debug: (0) Found Auth-Type = EAP Fri Nov 4 20:07:07 2016 : Debug: (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (0) authenticate { Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authenticate]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (0) EAP: Peer sent packet with method EAP Identity (1) Fri Nov 4 20:07:07 2016 : Debug: (0) EAP: Calling submodule eap_tls to process data Fri Nov 4 20:07:07 2016 : Debug: (0) eap_tls: Initiating new EAP-TLS session Fri Nov 4 20:07:07 2016 : Debug: (0) eap_tls: Flushing SSL sessions (of #0) Fri Nov 4 20:07:07 2016 : Debug: (0) eap_tls: Setting verify mode to require certificate from client Fri Nov 4 20:07:07 2016 : Debug: (0) eap_tls: [eaptls start] = request Fri Nov 4 20:07:07 2016 : Debug: (0) EAP: Sending EAP Request (code 1) ID 2 length 6 Fri Nov 4 20:07:07 2016 : Debug: (0) EAP: EAP session adding &reply:State = 0xff00b776ff02bab1 Fri Nov 4 20:07:07 2016 : Debug: (0) modsingle[authenticate]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (0) [EAP] = handled Fri Nov 4 20:07:07 2016 : Debug: (0) } # authenticate = handled Fri Nov 4 20:07:07 2016 : Debug: (0) Using Post-Auth-Type Challenge Fri Nov 4 20:07:07 2016 : Debug: (0) Post-Auth-Type sub-section not found. Ignoring. Fri Nov 4 20:07:07 2016 : Debug: (0) session-state: Nothing to cache Fri Nov 4 20:07:07 2016 : Debug: (0) Sent Access-Challenge Id 23 from IP:1812 to IP:62065 length 0 Fri Nov 4 20:07:07 2016 : Debug: (0) Tunnel-Type = VLAN Fri Nov 4 20:07:07 2016 : Debug: (0) Tunnel-Private-Group-Id = "2" Fri Nov 4 20:07:07 2016 : Debug: (0) Tunnel-Medium-Type = IEEE-802 Fri Nov 4 20:07:07 2016 : Debug: (0) EAP-Message = 0x010200060d20 Fri Nov 4 20:07:07 2016 : Debug: (0) Message-Authenticator = 0x00000000000000000000000000000000 Fri Nov 4 20:07:07 2016 : Debug: (0) State = 0xff00b776ff02bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (0) Proxy-State = 0x8b16a4770000130b Fri Nov 4 20:07:07 2016 : Debug: (0) Finished request Fri Nov 4 20:07:07 2016 : Debug: Waking up in 4.9 seconds. Fri Nov 4 20:07:07 2016 : Debug: (1) Received Access-Request Id 24 from IP:62065 to IP:1812 length 401 Fri Nov 4 20:07:07 2016 : Debug: (1) User-Name = "host/PC.company.com" Fri Nov 4 20:07:07 2016 : Debug: (1) Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (1) Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: (1) Called-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (1) Calling-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (1) EAP-Message = 0x020200710d800000006716030100620100005e0301581cdc5e5c756821b349ce943fd4dc03505033e9270b61bad33a3355041e7e1900001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100 Fri Nov 4 20:07:07 2016 : Debug: (1) Message-Authenticator = 0x6b4e0795217eb515662425812c99e447 Fri Nov 4 20:07:07 2016 : Debug: (1) NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: (1) NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: (1) NAS-Port-Id = "INT" Fri Nov 4 20:07:07 2016 : Debug: (1) NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: (1) State = 0xff00b776ff02bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (1) Cisco-AVPair = "service-type=Framed" Fri Nov 4 20:07:07 2016 : Debug: (1) Cisco-AVPair = "audit-session-id=0A016E02000226BF49A2B110" Fri Nov 4 20:07:07 2016 : Debug: (1) Cisco-AVPair = "method=dot1x" Fri Nov 4 20:07:07 2016 : Debug: (1) Proxy-State = 0x8b16a4770000130d Fri Nov 4 20:07:07 2016 : Debug: (1) session-state: No cached attributes Fri Nov 4 20:07:07 2016 : Debug: (1) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (1) authorize { Fri Nov 4 20:07:07 2016 : Debug: (1) policy filter_username { Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name) -> TRUE Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ / /) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ / /) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /@[^@]*@/ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /\.\./ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /\.\./ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (1) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (1) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /\.$/) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /\.$/) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /@\./) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (1) if (&User-Name =~ /@\./) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (1) } # if (&User-Name) = notfound Fri Nov 4 20:07:07 2016 : Debug: (1) } # policy filter_username = notfound Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: calling preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: returned from preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (1) [preprocess] = ok Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: calling auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Fri Nov 4 20:07:07 2016 : Debug: if { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IP-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: else { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IPv6-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: literal --> /auth-detail- Fri Nov 4 20:07:07 2016 : Debug: percent --> Y Fri Nov 4 20:07:07 2016 : Debug: percent --> m Fri Nov 4 20:07:07 2016 : Debug: percent --> d Fri Nov 4 20:07:07 2016 : Debug: (1) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: (1) auth_log: --> /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: (1) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: %t Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: percent --> t Fri Nov 4 20:07:07 2016 : Debug: (1) auth_log: EXPAND %t Fri Nov 4 20:07:07 2016 : Debug: (1) auth_log: --> Fri Nov 4 20:07:07 2016 Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: returned from auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: (1) [auth_log] = ok Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: calling GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xff00b776ff02bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4770000130d' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020200710d800000006716030100620100005e0301581cdc5e5c756821b349ce943fd4dc03505033e9270b61bad33a3355041e7e1900001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x6b4e0795217eb515662425812c99e447' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x1680260) Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC.company.com Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = INT Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4770000130d Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xff00b776ff02bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020200710d800000006716030100620100005e0301581cdc5e5c756821b349ce943fd4dc03505033e9270b61bad33a3355041e7e1900001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x6b4e0795217eb515662425812c99e447 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 4 2016 20:07:07 CET Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4770000130d' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xff00b776ff02bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020200710d800000006716030100620100005e0301581cdc5e5c756821b349ce943fd4dc03505033e9270b61bad33a3355041e7e1900001cc014c013003900330035002fc00ac00900380032000a00130005000401000019000a0006000400170018000b0002010000170000ff01000100' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x6b4e0795217eb515662425812c99e447' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Fri Nov 4 20:07:07 2016 : Debug: (1) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: returned from GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (1) [GoPerl] = ok Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Peer sent EAP Response (code 2) ID 2 length 113 Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: No EAP Start, assuming it's an on-going EAP conversation Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authorize]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (1) [EAP] = updated Fri Nov 4 20:07:07 2016 : Debug: (1) } # authorize = updated Fri Nov 4 20:07:07 2016 : Debug: (1) Found Auth-Type = EAP Fri Nov 4 20:07:07 2016 : Debug: (1) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (1) authenticate { Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authenticate]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Expiring EAP session with state 0xff00b776ff02bab1 Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Finished EAP session with state 0xff00b776ff02bab1 Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Previous EAP request found for state 0xff00b776ff02bab1, released from the list Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Peer sent packet with method EAP TLS (13) Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Calling submodule eap_tls to process data Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: Continuing EAP-TLS Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: Peer sent flags --L Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: Peer indicated complete TLS record size will be 103 bytes Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: Got complete TLS record (103 bytes) Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: [eaptls verify] = length included Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: (other): before/accept initialization Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: before/accept initialization Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: <<< recv TLS 1.0 Handshake [length 0062], ClientHello Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 read client hello A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 0059], ServerHello Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write server hello A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 0a16], Certificate Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write certificate A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 014b], ServerKeyExchange Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write key exchange A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: >>> send TLS 1.0 Handshake [length 00ab], CertificateRequest Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 write certificate request A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: SSLv3 flush data Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: Need to read more data: SSLv3 read client certificate A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: TLS_accept: Need to read more data: SSLv3 read client certificate A Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: In SSL Handshake Phase Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: In SSL Accept mode Fri Nov 4 20:07:07 2016 : Debug: (1) eap_tls: [eaptls process] = handled Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: Sending EAP Request (code 1) ID 3 length 1014 Fri Nov 4 20:07:07 2016 : Debug: (1) EAP: EAP session adding &reply:State = 0xff00b776fe03bab1 Fri Nov 4 20:07:07 2016 : Debug: (1) modsingle[authenticate]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (1) [EAP] = handled Fri Nov 4 20:07:07 2016 : Debug: (1) } # authenticate = handled Fri Nov 4 20:07:07 2016 : Debug: (1) Using Post-Auth-Type Challenge Fri Nov 4 20:07:07 2016 : Debug: (1) Post-Auth-Type sub-section not found. Ignoring. Fri Nov 4 20:07:07 2016 : Debug: (1) session-state: Nothing to cache Fri Nov 4 20:07:07 2016 : Debug: (1) Sent Access-Challenge Id 24 from IP:1812 to IP:62065 length 0 Fri Nov 4 20:07:07 2016 : Debug: (1) Tunnel-Type = VLAN Fri Nov 4 20:07:07 2016 : Debug: (1) Tunnel-Private-Group-Id = "2" Fri Nov 4 20:07:07 2016 : Debug: (1) Tunnel-Medium-Type = IEEE-802 Fri Nov 4 20:07:07 2016 : Debug: (1) EAP-Message = 0x010303f60dc000000c791603010059020000550301aa1cd6752a844dfa2022b438c2e3d4450209e4738fda6af6029a70da9ca9160520031c6c717f9c4840077c079fed136b8cdeb06c86153a0636547904bcb8e7a9bac01400000dff01000100000b0004030001021603010a160b000a12000a0f0005a8 Fri Nov 4 20:07:07 2016 : Debug: (1) Message-Authenticator = 0x00000000000000000000000000000000 Fri Nov 4 20:07:07 2016 : Debug: (1) State = 0xff00b776fe03bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (1) Proxy-State = 0x8b16a4770000130d Fri Nov 4 20:07:07 2016 : Debug: (1) Finished request Fri Nov 4 20:07:07 2016 : Debug: Waking up in 4.9 seconds. Fri Nov 4 20:07:07 2016 : Debug: (2) Received Access-Request Id 25 from IP:62065 to IP:1812 length 294 Fri Nov 4 20:07:07 2016 : Debug: (2) User-Name = "host/PC.company.com" Fri Nov 4 20:07:07 2016 : Debug: (2) Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (2) Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: (2) Called-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (2) Calling-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (2) EAP-Message = 0x020300060d00 Fri Nov 4 20:07:07 2016 : Debug: (2) Message-Authenticator = 0xccbdc4d0750e33cadedfff8173e6b87d Fri Nov 4 20:07:07 2016 : Debug: (2) NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: (2) NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: (2) NAS-Port-Id = "INT" Fri Nov 4 20:07:07 2016 : Debug: (2) NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: (2) State = 0xff00b776fe03bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (2) Cisco-AVPair = "service-type=Framed" Fri Nov 4 20:07:07 2016 : Debug: (2) Cisco-AVPair = "audit-session-id=0A016E02000226BF49A2B110" Fri Nov 4 20:07:07 2016 : Debug: (2) Cisco-AVPair = "method=dot1x" Fri Nov 4 20:07:07 2016 : Debug: (2) Proxy-State = 0x8b16a4770000130e Fri Nov 4 20:07:07 2016 : Debug: (2) session-state: No cached attributes Fri Nov 4 20:07:07 2016 : Debug: (2) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (2) authorize { Fri Nov 4 20:07:07 2016 : Debug: (2) policy filter_username { Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name) -> TRUE Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ / /) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ / /) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /@[^@]*@/ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /\.\./ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /\.\./ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (2) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (2) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /\.$/) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /\.$/) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /@\./) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (2) if (&User-Name =~ /@\./) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (2) } # if (&User-Name) = notfound Fri Nov 4 20:07:07 2016 : Debug: (2) } # policy filter_username = notfound Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: calling preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: returned from preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (2) [preprocess] = ok Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: calling auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Fri Nov 4 20:07:07 2016 : Debug: if { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IP-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: else { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IPv6-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: literal --> /auth-detail- Fri Nov 4 20:07:07 2016 : Debug: percent --> Y Fri Nov 4 20:07:07 2016 : Debug: percent --> m Fri Nov 4 20:07:07 2016 : Debug: percent --> d Fri Nov 4 20:07:07 2016 : Debug: (2) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: (2) auth_log: --> /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: (2) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: %t Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: percent --> t Fri Nov 4 20:07:07 2016 : Debug: (2) auth_log: EXPAND %t Fri Nov 4 20:07:07 2016 : Debug: (2) auth_log: --> Fri Nov 4 20:07:07 2016 Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: returned from auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: (2) [auth_log] = ok Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: calling GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xff00b776fe03bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4770000130e' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020300060d00' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0xccbdc4d0750e33cadedfff8173e6b87d' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x1680380) Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC.company.com Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = INT Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4770000130e Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xff00b776fe03bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020300060d00 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0xccbdc4d0750e33cadedfff8173e6b87d Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 4 2016 20:07:07 CET Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4770000130e' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xff00b776fe03bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020300060d00' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0xccbdc4d0750e33cadedfff8173e6b87d' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Fri Nov 4 20:07:07 2016 : Debug: (2) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: returned from GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (2) [GoPerl] = ok Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Peer sent EAP Response (code 2) ID 3 length 6 Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: No EAP Start, assuming it's an on-going EAP conversation Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authorize]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (2) [EAP] = updated Fri Nov 4 20:07:07 2016 : Debug: (2) } # authorize = updated Fri Nov 4 20:07:07 2016 : Debug: (2) Found Auth-Type = EAP Fri Nov 4 20:07:07 2016 : Debug: (2) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (2) authenticate { Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authenticate]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Expiring EAP session with state 0xff00b776fe03bab1 Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Finished EAP session with state 0xff00b776fe03bab1 Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Previous EAP request found for state 0xff00b776fe03bab1, released from the list Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Peer sent packet with method EAP TLS (13) Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Calling submodule eap_tls to process data Fri Nov 4 20:07:07 2016 : Debug: (2) eap_tls: Continuing EAP-TLS Fri Nov 4 20:07:07 2016 : Debug: (2) eap_tls: Peer sent flags --- Fri Nov 4 20:07:07 2016 : Debug: (2) eap_tls: Peer ACKed our handshake fragment Fri Nov 4 20:07:07 2016 : Debug: (2) eap_tls: [eaptls verify] = request Fri Nov 4 20:07:07 2016 : Debug: (2) eap_tls: [eaptls process] = handled Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: Sending EAP Request (code 1) ID 4 length 1014 Fri Nov 4 20:07:07 2016 : Debug: (2) EAP: EAP session adding &reply:State = 0xff00b776fd04bab1 Fri Nov 4 20:07:07 2016 : Debug: (2) modsingle[authenticate]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (2) [EAP] = handled Fri Nov 4 20:07:07 2016 : Debug: (2) } # authenticate = handled Fri Nov 4 20:07:07 2016 : Debug: (2) Using Post-Auth-Type Challenge Fri Nov 4 20:07:07 2016 : Debug: (2) Post-Auth-Type sub-section not found. Ignoring. Fri Nov 4 20:07:07 2016 : Debug: (2) session-state: Nothing to cache Fri Nov 4 20:07:07 2016 : Debug: (2) Sent Access-Challenge Id 25 from IP:1812 to IP:62065 length 0 Fri Nov 4 20:07:07 2016 : Debug: (2) Tunnel-Type = VLAN Fri Nov 4 20:07:07 2016 : Debug: (2) Tunnel-Private-Group-Id = "2" Fri Nov 4 20:07:07 2016 : Debug: (2) Tunnel-Medium-Type = IEEE-802 Fri Nov 4 20:07:07 2016 : Debug: (2) EAP-Message = 0x010403f60dc000000c794e3d53657276696365732c434e3d436f6e66696775726174696f6e2c44433d65766f736f66742c44433d636f6d3f63657274696669636174655265766f636174696f6e4c6973743f626173653f6f626a656374436c6173733d63524c446973747269627574696f6e506f696e74 Fri Nov 4 20:07:07 2016 : Debug: (2) Message-Authenticator = 0x00000000000000000000000000000000 Fri Nov 4 20:07:07 2016 : Debug: (2) State = 0xff00b776fd04bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (2) Proxy-State = 0x8b16a4770000130e Fri Nov 4 20:07:07 2016 : Debug: (2) Finished request Fri Nov 4 20:07:07 2016 : Debug: Waking up in 4.9 seconds. Fri Nov 4 20:07:07 2016 : Debug: (3) Received Access-Request Id 26 from IP:62065 to IP:1812 length 294 Fri Nov 4 20:07:07 2016 : Debug: (3) User-Name = "host/PC.company.com" Fri Nov 4 20:07:07 2016 : Debug: (3) Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (3) Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: (3) Called-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (3) Calling-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (3) EAP-Message = 0x020400060d00 Fri Nov 4 20:07:07 2016 : Debug: (3) Message-Authenticator = 0x0cae8b4b2eb2a4a8fdfc07ff09661ec4 Fri Nov 4 20:07:07 2016 : Debug: (3) NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: (3) NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: (3) NAS-Port-Id = "INT" Fri Nov 4 20:07:07 2016 : Debug: (3) NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: (3) State = 0xff00b776fd04bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (3) Cisco-AVPair = "service-type=Framed" Fri Nov 4 20:07:07 2016 : Debug: (3) Cisco-AVPair = "audit-session-id=0A016E02000226BF49A2B110" Fri Nov 4 20:07:07 2016 : Debug: (3) Cisco-AVPair = "method=dot1x" Fri Nov 4 20:07:07 2016 : Debug: (3) Proxy-State = 0x8b16a4770000130f Fri Nov 4 20:07:07 2016 : Debug: (3) session-state: No cached attributes Fri Nov 4 20:07:07 2016 : Debug: (3) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (3) authorize { Fri Nov 4 20:07:07 2016 : Debug: (3) policy filter_username { Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name) -> TRUE Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ / /) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ / /) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /@[^@]*@/ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /\.\./ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /\.\./ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (3) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (3) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /\.$/) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /\.$/) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /@\./) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (3) if (&User-Name =~ /@\./) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (3) } # if (&User-Name) = notfound Fri Nov 4 20:07:07 2016 : Debug: (3) } # policy filter_username = notfound Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: calling preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: returned from preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (3) [preprocess] = ok Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: calling auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Fri Nov 4 20:07:07 2016 : Debug: if { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IP-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: else { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IPv6-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: literal --> /auth-detail- Fri Nov 4 20:07:07 2016 : Debug: percent --> Y Fri Nov 4 20:07:07 2016 : Debug: percent --> m Fri Nov 4 20:07:07 2016 : Debug: percent --> d Fri Nov 4 20:07:07 2016 : Debug: (3) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: (3) auth_log: --> /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: (3) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: %t Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: percent --> t Fri Nov 4 20:07:07 2016 : Debug: (3) auth_log: EXPAND %t Fri Nov 4 20:07:07 2016 : Debug: (3) auth_log: --> Fri Nov 4 20:07:07 2016 Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: returned from auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: (3) [auth_log] = ok Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: calling GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xff00b776fd04bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a4770000130f' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020400060d00' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x0cae8b4b2eb2a4a8fdfc07ff09661ec4' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x16802a8) Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC.company.com Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = INT Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a4770000130f Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xff00b776fd04bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020400060d00 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x0cae8b4b2eb2a4a8fdfc07ff09661ec4 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 4 2016 20:07:07 CET Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a4770000130f' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xff00b776fd04bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020400060d00' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x0cae8b4b2eb2a4a8fdfc07ff09661ec4' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Fri Nov 4 20:07:07 2016 : Debug: (3) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: returned from GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (3) [GoPerl] = ok Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Peer sent EAP Response (code 2) ID 4 length 6 Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: No EAP Start, assuming it's an on-going EAP conversation Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authorize]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (3) [EAP] = updated Fri Nov 4 20:07:07 2016 : Debug: (3) } # authorize = updated Fri Nov 4 20:07:07 2016 : Debug: (3) Found Auth-Type = EAP Fri Nov 4 20:07:07 2016 : Debug: (3) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (3) authenticate { Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authenticate]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Expiring EAP session with state 0xff00b776fd04bab1 Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Finished EAP session with state 0xff00b776fd04bab1 Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Previous EAP request found for state 0xff00b776fd04bab1, released from the list Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Peer sent packet with method EAP TLS (13) Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Calling submodule eap_tls to process data Fri Nov 4 20:07:07 2016 : Debug: (3) eap_tls: Continuing EAP-TLS Fri Nov 4 20:07:07 2016 : Debug: (3) eap_tls: Peer sent flags --- Fri Nov 4 20:07:07 2016 : Debug: (3) eap_tls: Peer ACKed our handshake fragment Fri Nov 4 20:07:07 2016 : Debug: (3) eap_tls: [eaptls verify] = request Fri Nov 4 20:07:07 2016 : Debug: (3) eap_tls: [eaptls process] = handled Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: Sending EAP Request (code 1) ID 5 length 1014 Fri Nov 4 20:07:07 2016 : Debug: (3) EAP: EAP session adding &reply:State = 0xff00b776fc05bab1 Fri Nov 4 20:07:07 2016 : Debug: (3) modsingle[authenticate]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (3) [EAP] = handled Fri Nov 4 20:07:07 2016 : Debug: (3) } # authenticate = handled Fri Nov 4 20:07:07 2016 : Debug: (3) Using Post-Auth-Type Challenge Fri Nov 4 20:07:07 2016 : Debug: (3) Post-Auth-Type sub-section not found. Ignoring. Fri Nov 4 20:07:07 2016 : Debug: (3) session-state: Nothing to cache Fri Nov 4 20:07:07 2016 : Debug: (3) Sent Access-Challenge Id 26 from IP:1812 to IP:62065 length 0 Fri Nov 4 20:07:07 2016 : Debug: (3) Tunnel-Type = VLAN Fri Nov 4 20:07:07 2016 : Debug: (3) Tunnel-Private-Group-Id = "2" Fri Nov 4 20:07:07 2016 : Debug: (3) Tunnel-Medium-Type = IEEE-802 Fri Nov 4 20:07:07 2016 : Debug: (3) EAP-Message = 0x010503f60dc000000c790c6c1e34324764e66e257415316409658bcbfd29f3cdf3a16fe9befd75656448718bd782ac5ae9003c7315927093292aae1a9cdec93b66443ae41e837a0334fac81c4db4286053d6baf1c9af72912d429e59f0778f757218e27aa81163b847c92f0203010001a38201a4308201 Fri Nov 4 20:07:07 2016 : Debug: (3) Message-Authenticator = 0x00000000000000000000000000000000 Fri Nov 4 20:07:07 2016 : Debug: (3) State = 0xff00b776fc05bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (3) Proxy-State = 0x8b16a4770000130f Fri Nov 4 20:07:07 2016 : Debug: (3) Finished request Fri Nov 4 20:07:07 2016 : Debug: Waking up in 4.9 seconds. Fri Nov 4 20:07:07 2016 : Debug: (4) Received Access-Request Id 27 from IP:62065 to IP:1812 length 294 Fri Nov 4 20:07:07 2016 : Debug: (4) User-Name = "host/PC.company.com" Fri Nov 4 20:07:07 2016 : Debug: (4) Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (4) Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: (4) Called-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (4) Calling-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (4) EAP-Message = 0x020500060d00 Fri Nov 4 20:07:07 2016 : Debug: (4) Message-Authenticator = 0x17b40820a6625f3aa24b6735ca216788 Fri Nov 4 20:07:07 2016 : Debug: (4) NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: (4) NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: (4) NAS-Port-Id = "INT" Fri Nov 4 20:07:07 2016 : Debug: (4) NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: (4) State = 0xff00b776fc05bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (4) Cisco-AVPair = "service-type=Framed" Fri Nov 4 20:07:07 2016 : Debug: (4) Cisco-AVPair = "audit-session-id=0A016E02000226BF49A2B110" Fri Nov 4 20:07:07 2016 : Debug: (4) Cisco-AVPair = "method=dot1x" Fri Nov 4 20:07:07 2016 : Debug: (4) Proxy-State = 0x8b16a47700001310 Fri Nov 4 20:07:07 2016 : Debug: (4) session-state: No cached attributes Fri Nov 4 20:07:07 2016 : Debug: (4) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (4) authorize { Fri Nov 4 20:07:07 2016 : Debug: (4) policy filter_username { Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name) -> TRUE Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ / /) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ / /) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /@[^@]*@/ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /\.\./ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /\.\./ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (4) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (4) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /\.$/) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /\.$/) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /@\./) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (4) if (&User-Name =~ /@\./) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (4) } # if (&User-Name) = notfound Fri Nov 4 20:07:07 2016 : Debug: (4) } # policy filter_username = notfound Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: calling preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: returned from preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (4) [preprocess] = ok Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: calling auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Fri Nov 4 20:07:07 2016 : Debug: if { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IP-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: else { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IPv6-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: literal --> /auth-detail- Fri Nov 4 20:07:07 2016 : Debug: percent --> Y Fri Nov 4 20:07:07 2016 : Debug: percent --> m Fri Nov 4 20:07:07 2016 : Debug: percent --> d Fri Nov 4 20:07:07 2016 : Debug: (4) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: (4) auth_log: --> /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: (4) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: %t Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: percent --> t Fri Nov 4 20:07:07 2016 : Debug: (4) auth_log: EXPAND %t Fri Nov 4 20:07:07 2016 : Debug: (4) auth_log: --> Fri Nov 4 20:07:07 2016 Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: returned from auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: (4) [auth_log] = ok Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: calling GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xff00b776fc05bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a47700001310' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x020500060d00' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x17b40820a6625f3aa24b6735ca216788' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x1680290) Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC.company.com Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = INT Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a47700001310 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xff00b776fc05bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 0x020500060d00 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x17b40820a6625f3aa24b6735ca216788 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 4 2016 20:07:07 CET Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a47700001310' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xff00b776fc05bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x020500060d00' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x17b40820a6625f3aa24b6735ca216788' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Fri Nov 4 20:07:07 2016 : Debug: (4) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: returned from GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (4) [GoPerl] = ok Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Peer sent EAP Response (code 2) ID 5 length 6 Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: No EAP Start, assuming it's an on-going EAP conversation Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authorize]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (4) [EAP] = updated Fri Nov 4 20:07:07 2016 : Debug: (4) } # authorize = updated Fri Nov 4 20:07:07 2016 : Debug: (4) Found Auth-Type = EAP Fri Nov 4 20:07:07 2016 : Debug: (4) # Executing group from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (4) authenticate { Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authenticate]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Expiring EAP session with state 0xff00b776fc05bab1 Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Finished EAP session with state 0xff00b776fc05bab1 Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Previous EAP request found for state 0xff00b776fc05bab1, released from the list Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Peer sent packet with method EAP TLS (13) Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Calling submodule eap_tls to process data Fri Nov 4 20:07:07 2016 : Debug: (4) eap_tls: Continuing EAP-TLS Fri Nov 4 20:07:07 2016 : Debug: (4) eap_tls: Peer sent flags --- Fri Nov 4 20:07:07 2016 : Debug: (4) eap_tls: Peer ACKed our handshake fragment Fri Nov 4 20:07:07 2016 : Debug: (4) eap_tls: [eaptls verify] = request Fri Nov 4 20:07:07 2016 : Debug: (4) eap_tls: [eaptls process] = handled Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: Sending EAP Request (code 1) ID 6 length 191 Fri Nov 4 20:07:07 2016 : Debug: (4) EAP: EAP session adding &reply:State = 0xff00b776fb06bab1 Fri Nov 4 20:07:07 2016 : Debug: (4) modsingle[authenticate]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (4) [EAP] = handled Fri Nov 4 20:07:07 2016 : Debug: (4) } # authenticate = handled Fri Nov 4 20:07:07 2016 : Debug: (4) Using Post-Auth-Type Challenge Fri Nov 4 20:07:07 2016 : Debug: (4) Post-Auth-Type sub-section not found. Ignoring. Fri Nov 4 20:07:07 2016 : Debug: (4) session-state: Nothing to cache Fri Nov 4 20:07:07 2016 : Debug: (4) Sent Access-Challenge Id 27 from IP:1812 to IP:62065 length 0 Fri Nov 4 20:07:07 2016 : Debug: (4) Tunnel-Type = VLAN Fri Nov 4 20:07:07 2016 : Debug: (4) Tunnel-Private-Group-Id = "2" Fri Nov 4 20:07:07 2016 : Debug: (4) Tunnel-Medium-Type = IEEE-802 Fri Nov 4 20:07:07 2016 : Debug: (4) EAP-Message = 0x010600bf0d8000000c795f48f74ec616030100ab0d0000a303010240009d009b308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b30090603550406130244453110300e060355040813074261766172696131123010060355040713094e7572656d6265726731 Fri Nov 4 20:07:07 2016 : Debug: (4) Message-Authenticator = 0x00000000000000000000000000000000 Fri Nov 4 20:07:07 2016 : Debug: (4) State = 0xff00b776fb06bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (4) Proxy-State = 0x8b16a47700001310 Fri Nov 4 20:07:07 2016 : Debug: (4) Finished request Fri Nov 4 20:07:07 2016 : Debug: Waking up in 4.9 seconds. Fri Nov 4 20:07:07 2016 : Debug: (5) Received Access-Request Id 28 from IP:62065 to IP:1812 length 1790 Fri Nov 4 20:07:07 2016 : Debug: (5) User-Name = "host/PC.company.com" Fri Nov 4 20:07:07 2016 : Debug: (5) Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (5) Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: (5) Called-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (5) Calling-Station-Id = "MAC" Fri Nov 4 20:07:07 2016 : Debug: (5) EAP-Message = 0x020605d40dc00000073016030106f00b0005a000059d00059a30820596308204ffa0030201020213160000d0096957d9bd45cc808400060000d009300d06092a864886f70d01010b0500308198311e301c06092a864886f70d010901160f6564764065766f736f66742e636f6d310b3009060355040613 Fri Nov 4 20:07:07 2016 : Debug: (5) Message-Authenticator = 0x82f63df4c053da849541c791d6d0509d Fri Nov 4 20:07:07 2016 : Debug: (5) NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: (5) NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: (5) NAS-Port-Id = "INT" Fri Nov 4 20:07:07 2016 : Debug: (5) NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: (5) State = 0xff00b776fb06bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: (5) Cisco-AVPair = "service-type=Framed" Fri Nov 4 20:07:07 2016 : Debug: (5) Cisco-AVPair = "audit-session-id=0A016E02000226BF49A2B110" Fri Nov 4 20:07:07 2016 : Debug: (5) Cisco-AVPair = "method=dot1x" Fri Nov 4 20:07:07 2016 : Debug: (5) Proxy-State = 0x8b16a47700001311 Fri Nov 4 20:07:07 2016 : Debug: (5) session-state: No cached attributes Fri Nov 4 20:07:07 2016 : Debug: (5) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default Fri Nov 4 20:07:07 2016 : Debug: (5) authorize { Fri Nov 4 20:07:07 2016 : Debug: (5) policy filter_username { Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name) -> TRUE Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name) { Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ / /) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ / /) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /@[^@]*@/ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /@[^@]*@/ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /\.\./ ) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /\.\./ ) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (5) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (5) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /\.$/) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /\.$/) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /@\./) { Fri Nov 4 20:07:07 2016 : Debug: No matches Fri Nov 4 20:07:07 2016 : Debug: (5) if (&User-Name =~ /@\./) -> FALSE Fri Nov 4 20:07:07 2016 : Debug: (5) } # if (&User-Name) = notfound Fri Nov 4 20:07:07 2016 : Debug: (5) } # policy filter_username = notfound Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: calling preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: returned from preprocess (rlm_preprocess) Fri Nov 4 20:07:07 2016 : Debug: (5) [preprocess] = ok Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: calling auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: literal --> /usr/local/var/log/radius/radacct/ Fri Nov 4 20:07:07 2016 : Debug: if { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IP-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: else { Fri Nov 4 20:07:07 2016 : Debug: attribute --> Packet-Src-IPv6-Address Fri Nov 4 20:07:07 2016 : Debug: } Fri Nov 4 20:07:07 2016 : Debug: literal --> /auth-detail- Fri Nov 4 20:07:07 2016 : Debug: percent --> Y Fri Nov 4 20:07:07 2016 : Debug: percent --> m Fri Nov 4 20:07:07 2016 : Debug: percent --> d Fri Nov 4 20:07:07 2016 : Debug: (5) auth_log: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d Fri Nov 4 20:07:07 2016 : Debug: (5) auth_log: --> /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: (5) auth_log: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/IP/auth-detail-20161104 Fri Nov 4 20:07:07 2016 : Debug: %t Fri Nov 4 20:07:07 2016 : Debug: Parsed xlat tree: Fri Nov 4 20:07:07 2016 : Debug: percent --> t Fri Nov 4 20:07:07 2016 : Debug: (5) auth_log: EXPAND %t Fri Nov 4 20:07:07 2016 : Debug: (5) auth_log: --> Fri Nov 4 20:07:07 2016 Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: returned from auth_log (rlm_detail) Fri Nov 4 20:07:07 2016 : Debug: (5) [auth_log] = ok Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: calling GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '9216' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'State'} = &request:State -> '0xff00b776fb06bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Proxy-State'} = &request:Proxy-State -> '0x8b16a47700001311' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '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' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Message-Authenticator'} = &request:Message-Authenticator -> '0x82f63df4c053da849541c791d6d0509d' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[0] = &request:Cisco-AVPair -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[1] = &request:Cisco-AVPair -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: $RAD_REQUEST{'Cisco-AVPair'}[2] = &request:Cisco-AVPair -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Cisco-AVPair = ARRAY(0x1680278) Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-IP-Address = IP Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: User-Name = host/PC.company.com Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Id = INT Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Proxy-State = 0x8b16a47700001311 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: State = 0xff00b776fb06bab18a826039e7e5b9d3 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Framed-MTU = 9216 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: EAP-Message = 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 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port-Type = Ethernet Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Called-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Message-Authenticator = 0x82f63df4c053da849541c791d6d0509d Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Event-Timestamp = Nov 4 2016 20:07:07 CET Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: NAS-Port = 60000 Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Calling-Station-Id = MAC Fri Nov 4 20:07:07 2016 : Debug: rlm_perl: RAD_REQUEST: Service-Type = Framed-User Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'service-type=Framed' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'audit-session-id=0A016E02000226BF49A2B110' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Cisco-AVPair += $RAD_REQUEST{'Cisco-AVPair'} -> 'method=dot1x' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> 'IP' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'host/PC.company.com' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> 'INT' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Proxy-State = $RAD_REQUEST{'Proxy-State'} -> '0x8b16a47700001311' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:State = $RAD_REQUEST{'State'} -> '0xff00b776fb06bab18a826039e7e5b9d3' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '9216' Fri Nov 4 20:07:07 2016 : ERROR: (5) GoPerl: Failed to create pair - Length of Hex String is not even, got 1021 bytes Fri Nov 4 20:07:07 2016 : ERROR: (5) GoPerl: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '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' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Message-Authenticator = $RAD_REQUEST{'Message-Authenticator'} -> '0x82f63df4c053da849541c791d6d0509d' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'Nov 4 2016 20:07:07 CET' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '60000' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> 'MAC' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &reply:Tunnel-Type = $RAD_REPLY{'Tunnel-Type'} -> 'VLAN' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &reply:Tunnel-Private-Group-id = $RAD_REPLY{'Tunnel-Private-Group-id'} -> '2' Fri Nov 4 20:07:07 2016 : Debug: (5) GoPerl: &reply:Tunnel-Medium-Type = $RAD_REPLY{'Tunnel-Medium-Type'} -> 'IEEE-802' Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: returned from GoPerl (rlm_perl) Fri Nov 4 20:07:07 2016 : Debug: (5) [GoPerl] = ok Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: calling EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (5) EAP: Got EAP_START message Fri Nov 4 20:07:07 2016 : Debug: (5) modsingle[authorize]: returned from EAP (rlm_eap) Fri Nov 4 20:07:07 2016 : Debug: (5) [EAP] = handled Fri Nov 4 20:07:07 2016 : Debug: (5) } # authorize = handled Fri Nov 4 20:07:07 2016 : Debug: (5) There was no response configured: rejecting request Fri Nov 4 20:07:07 2016 : Debug: (5) Using Post-Auth-Type Reject Fri Nov 4 20:07:07 2016 : Debug: (5) Post-Auth-Type sub-section not found. Ignoring. Fri Nov 4 20:07:07 2016 : Debug: (5) Delaying response for 1.000000 seconds Fri Nov 4 20:07:07 2016 : Debug: Waking up in 0.3 seconds. Fri Nov 4 20:07:08 2016 : Debug: Waking up in 0.6 seconds. Fri Nov 4 20:07:08 2016 : Debug: (5) Sending delayed response Fri Nov 4 20:07:08 2016 : Debug: (5) Sent Access-Reject Id 28 from IP:1812 to IP:62065 length 52 Fri Nov 4 20:07:08 2016 : Debug: (5) Tunnel-Type = VLAN Fri Nov 4 20:07:08 2016 : Debug: (5) Tunnel-Private-Group-Id = "2" Fri Nov 4 20:07:08 2016 : Debug: (5) Tunnel-Medium-Type = IEEE-802 Fri Nov 4 20:07:08 2016 : Debug: (5) EAP-Message = 0x0100000501 Fri Nov 4 20:07:08 2016 : Debug: (5) Proxy-State = 0x8b16a47700001311 Fri Nov 4 20:07:08 2016 : Debug: Waking up in 3.9 seconds. ^C