Hello people! I was watching this problems https://lists.freeradius.org/pipermail/freeradius-users/2008-October/msg0024... to solve my problem with the certificates but do not understand very well the suggestion. My problem is with insurance certificates, what I need is a certificate to anyone who serves me, this created a user and their respective licenses but when I want to connect me generates the following error: rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=254, length=136 User-Name = "cert" Framed-MTU = 1400 Called-Station-Id = "0019.2fdb.9e00" Calling-Station-Id = "001f.3c22.44c5" Service-Type = Login-User Message-Authenticator = 0x7eba201ec8bca0ce6d69fb1d2b8fa434 EAP-Message = 0x020100090163657274 NAS-Port-Type = Wireless-802.11 NAS-Port = 923 NAS-IP-Address = 10.0.31.40 NAS-Identifier = "ap-Reconquista-31" Tue Oct 14 17:50:56 2008 : Debug: +- entering group authorize Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[preprocess] returns ok Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[chap] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[mschap] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 0 Tue Oct 14 17:50:56 2008 : Debug: rlm_realm: No '@' in User-Name = "cert", looking up realm NULL Tue Oct 14 17:50:56 2008 : Debug: rlm_realm: No such realm "NULL" Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[suffix] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: EAP packet type response id 1 length 9 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[eap] returns updated Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling unix (rlm_unix) for request 0 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from unix (rlm_unix) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[unix] returns notfound Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 0 Tue Oct 14 17:50:56 2008 : Debug: users: Matched entry cert at line 76 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[files] returns ok Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling expiration (rlm_expiration) for request 0 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from expiration (rlm_expiration) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[expiration] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling logintime (rlm_logintime) for request 0 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from logintime (rlm_logintime) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[logintime] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling pap (rlm_pap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: rlm_pap: Found existing Auth-Type, not changing it. Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from pap (rlm_pap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[pap] returns noop Tue Oct 14 17:50:56 2008 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 14 17:50:56 2008 : Debug: auth: type "EAP" Tue Oct 14 17:50:56 2008 : Debug: +- entering group authenticate Tue Oct 14 17:50:56 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: EAP Identity Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: processing type md5 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap_md5: Issuing Challenge Tue Oct 14 17:50:56 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 0 Tue Oct 14 17:50:56 2008 : Debug: ++[eap] returns handled Sending Access-Challenge of id 254 to 10.0.31.40 port 1645 EAP-Message = 0x0102001604105891faeac7cf95672897e7a8a6593391 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2bd9a2512bdba60c046668376d4bbecf Tue Oct 14 17:50:56 2008 : Debug: Finished request 0. Tue Oct 14 17:50:56 2008 : Debug: Going to the next request Tue Oct 14 17:50:56 2008 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=255, length=151 User-Name = "cert" Framed-MTU = 1400 Called-Station-Id = "0019.2fdb.9e00" Calling-Station-Id = "001f.3c22.44c5" Service-Type = Login-User Message-Authenticator = 0x029f86b7a5f68f1f5a708b680660ee0b EAP-Message = 0x02020006030d NAS-Port-Type = Wireless-802.11 NAS-Port = 923 State = 0x2bd9a2512bdba60c046668376d4bbecf NAS-IP-Address = 10.0.31.40 NAS-Identifier = "ap-Reconquista-31" Tue Oct 14 17:50:56 2008 : Debug: +- entering group authorize Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[preprocess] returns ok Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[chap] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[mschap] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 1 Tue Oct 14 17:50:56 2008 : Debug: rlm_realm: No '@' in User-Name = "cert", looking up realm NULL Tue Oct 14 17:50:56 2008 : Debug: rlm_realm: No such realm "NULL" Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[suffix] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: EAP packet type response id 2 length 6 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[eap] returns updated Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling unix (rlm_unix) for request 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from unix (rlm_unix) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[unix] returns notfound Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 1 Tue Oct 14 17:50:56 2008 : Debug: users: Matched entry cert at line 76 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[files] returns ok Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling expiration (rlm_expiration) for request 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from expiration (rlm_expiration) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[expiration] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling logintime (rlm_logintime) for request 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from logintime (rlm_logintime) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[logintime] returns noop Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: calling pap (rlm_pap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: rlm_pap: Found existing Auth-Type, not changing it. Tue Oct 14 17:50:56 2008 : Debug: modsingle[authorize]: returned from pap (rlm_pap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[pap] returns noop Tue Oct 14 17:50:56 2008 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 14 17:50:56 2008 : Debug: auth: type "EAP" Tue Oct 14 17:50:56 2008 : Debug: +- entering group authenticate Tue Oct 14 17:50:56 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: Request found, released from the list Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: EAP NAK Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: EAP-NAK asked for EAP-Type/tls Tue Oct 14 17:50:56 2008 : Debug: rlm_eap: processing type tls Tue Oct 14 17:50:56 2008 : Debug: rlm_eap_tls: Requiring client certificate Tue Oct 14 17:50:56 2008 : Debug: rlm_eap_tls: Initiate Tue Oct 14 17:50:56 2008 : Debug: rlm_eap_tls: Start returned 1 Tue Oct 14 17:50:56 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 1 Tue Oct 14 17:50:56 2008 : Debug: ++[eap] returns handled Sending Access-Challenge of id 255 to 10.0.31.40 port 1645 EAP-Message = 0x010300060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2bd9a2512adaaf0c046668376d4bbecf Tue Oct 14 17:50:56 2008 : Debug: Finished request 1. Tue Oct 14 17:50:56 2008 : Debug: Going to the next request Tue Oct 14 17:50:56 2008 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=0, length=255 User-Name = "cert" Framed-MTU = 1400 Called-Station-Id = "0019.2fdb.9e00" Calling-Station-Id = "001f.3c22.44c5" Service-Type = Login-User Message-Authenticator = 0xdacedfa862fbfb7ae7b852679c61f8cc EAP-Message = 0x0203006e0d8000000064160301005f0100005b030148f5062db86506be032517f2561a0b321baf4c5e3e07de558c9c2dc63d238a8900003400390038003500160013000a00330032002f006600050004006500640063006200610060001500120009001400110008000600030100 NAS-Port-Type = Wireless-802.11 NAS-Port = 923 State = 0x2bd9a2512adaaf0c046668376d4bbecf NAS-IP-Address = 10.0.31.40 NAS-Identifier = "ap-Reconquista-31" Tue Oct 14 17:50:57 2008 : Debug: +- entering group authorize Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 2 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[preprocess] returns ok Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[chap] returns noop Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[mschap] returns noop Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 2 Tue Oct 14 17:50:57 2008 : Debug: rlm_realm: No '@' in User-Name = "cert", looking up realm NULL Tue Oct 14 17:50:57 2008 : Debug: rlm_realm: No such realm "NULL" Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[suffix] returns noop Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: rlm_eap: EAP packet type response id 3 length 110 Tue Oct 14 17:50:57 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[eap] returns updated Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling unix (rlm_unix) for request 2 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from unix (rlm_unix) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[unix] returns notfound Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 2 Tue Oct 14 17:50:57 2008 : Debug: users: Matched entry cert at line 76 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[files] returns ok Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling expiration (rlm_expiration) for request 2 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from expiration (rlm_expiration) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[expiration] returns noop Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling logintime (rlm_logintime) for request 2 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from logintime (rlm_logintime) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[logintime] returns noop Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: calling pap (rlm_pap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: rlm_pap: Found existing Auth-Type, not changing it. Tue Oct 14 17:50:57 2008 : Debug: modsingle[authorize]: returned from pap (rlm_pap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[pap] returns noop Tue Oct 14 17:50:57 2008 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 14 17:50:57 2008 : Debug: auth: type "EAP" Tue Oct 14 17:50:57 2008 : Debug: +- entering group authenticate Tue Oct 14 17:50:57 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: rlm_eap: Request found, released from the list Tue Oct 14 17:50:57 2008 : Debug: rlm_eap: EAP/tls Tue Oct 14 17:50:57 2008 : Debug: rlm_eap: processing type tls Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: Authenticate Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: processing TLS Tue Oct 14 17:50:57 2008 : Debug: TLS Length 100 Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: Length Included Tue Oct 14 17:50:57 2008 : Debug: eaptls_verify returned 11 Tue Oct 14 17:50:57 2008 : Debug: (other): before/accept initialization Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: before/accept initialization Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: <<< TLS 1.0 Handshake [length 005f], ClientHello Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: SSLv3 read client hello A Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: SSLv3 write server hello A Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 0839], Certificate Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: SSLv3 write certificate A Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 020d], ServerKeyExchange Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: SSLv3 write key exchange A Tue Oct 14 17:50:57 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 00a0], CertificateRequest Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: SSLv3 write certificate request A Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: SSLv3 flush data Tue Oct 14 17:50:57 2008 : Debug: TLS_accept: Need to read more data: SSLv3 read client certificate A Tue Oct 14 17:50:57 2008 : Debug: In SSL Handshake Phase Tue Oct 14 17:50:57 2008 : Debug: In SSL Accept mode Tue Oct 14 17:50:57 2008 : Debug: eaptls_process returned 13 Tue Oct 14 17:50:57 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 2 Tue Oct 14 17:50:57 2008 : Debug: ++[eap] returns handled Sending Access-Challenge of id 0 to 10.0.31.40 port 1645 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0xd97d8a9889591b5cd3cf6924d4dc5aaa78a8013bde946b633e51abb4b6150fbe66a8743dd34a887f5c731a685c811c5660ba3d68abd028679464d28af4171dea0a3e99a80ba7b75c10d3c5480a319ea9b9ca6a9d14536b6524eb6f559b10f8f326d612836e88d2b28e03a574ede8b7a7bfdde0a7846543a713bb279c81bb681e50609c10ca2b2f5b6b4b2c1683c9a60ae8c7121ce2a81fc124189d4f356dee804a45b49f71547f788006bc247c65a98e81c2359cc537ef1c65d8137aa6cf6b2aff605d4da97c7a5abad17885608d027ddc370203010001a317301530130603551d25040c300a06082b06010505070301300d06092a864886f70d010104 EAP-Message = 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 EAP-Message = 0x4d7692a192d9ca4b95110004 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2bd9a25129ddaf0c046668376d4bbecf Tue Oct 14 17:50:57 2008 : Debug: Finished request 2. Tue Oct 14 17:50:57 2008 : Debug: Going to the next request Tue Oct 14 17:50:57 2008 : Debug: Waking up in 4.3 seconds. * * * * * * * *. * * * Sending Access-Reject of id 3 to 10.0.31.40 port 1645 EAP-Message = 0x04060004 Message-Authenticator = 0x00000000000000000000000000000000 Tue Oct 14 17:50:58 2008 : Debug: Finished request 5. Tue Oct 14 17:50:58 2008 : Debug: Going to the next request Tue Oct 14 17:50:58 2008 : Debug: Waking up in 3.6 seconds. rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=4, length=136 User-Name = "cert" Framed-MTU = 1400 Called-Station-Id = "0019.2fdb.9e00" Calling-Station-Id = "001f.3c22.44c5" Service-Type = Login-User Message-Authenticator = 0x8168cb6bc60da8a5a4ea24db5318fce8 EAP-Message = 0x020100090163657274 NAS-Port-Type = Wireless-802.11 NAS-Port = 924 NAS-IP-Address = 10.0.31.40 NAS-Identifier = "ap-Reconquista-31" Tue Oct 14 17:50:58 2008 : Debug: +- entering group authorize Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 6 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[preprocess] returns ok Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[chap] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[mschap] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 6 Tue Oct 14 17:50:58 2008 : Debug: rlm_realm: No '@' in User-Name = "cert", looking up realm NULL Tue Oct 14 17:50:58 2008 : Debug: rlm_realm: No such realm "NULL" Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[suffix] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP packet type response id 1 length 9 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[eap] returns updated Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling unix (rlm_unix) for request 6 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from unix (rlm_unix) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[unix] returns notfound Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 6 Tue Oct 14 17:50:58 2008 : Debug: users: Matched entry cert at line 76 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[files] returns ok Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling expiration (rlm_expiration) for request 6 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from expiration (rlm_expiration) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[expiration] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling logintime (rlm_logintime) for request 6 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from logintime (rlm_logintime) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[logintime] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling pap (rlm_pap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: rlm_pap: Found existing Auth-Type, not changing it. Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from pap (rlm_pap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[pap] returns noop Tue Oct 14 17:50:58 2008 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 14 17:50:58 2008 : Debug: auth: type "EAP" Tue Oct 14 17:50:58 2008 : Debug: +- entering group authenticate Tue Oct 14 17:50:58 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP Identity Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: processing type md5 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_md5: Issuing Challenge Tue Oct 14 17:50:58 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 6 Tue Oct 14 17:50:58 2008 : Debug: ++[eap] returns handled Sending Access-Challenge of id 4 to 10.0.31.40 port 1645 EAP-Message = 0x010200160410c1523ac0e4a4f484ca8e724838e7d951 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x53214e1953234a772105e442b8f04324 Tue Oct 14 17:50:58 2008 : Debug: Finished request 6. Tue Oct 14 17:50:58 2008 : Debug: Going to the next request Tue Oct 14 17:50:58 2008 : Debug: Waking up in 3.1 seconds. rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=5, length=151 User-Name = "cert" Framed-MTU = 1400 Called-Station-Id = "0019.2fdb.9e00" Calling-Station-Id = "001f.3c22.44c5" Service-Type = Login-User Message-Authenticator = 0x4350c31430c15d510495391f0e939803 EAP-Message = 0x02020006030d NAS-Port-Type = Wireless-802.11 NAS-Port = 924 State = 0x53214e1953234a772105e442b8f04324 NAS-IP-Address = 10.0.31.40 NAS-Identifier = "ap-Reconquista-31" Tue Oct 14 17:50:58 2008 : Debug: +- entering group authorize Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 7 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[preprocess] returns ok Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[chap] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[mschap] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 7 Tue Oct 14 17:50:58 2008 : Debug: rlm_realm: No '@' in User-Name = "cert", looking up realm NULL Tue Oct 14 17:50:58 2008 : Debug: rlm_realm: No such realm "NULL" Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[suffix] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP packet type response id 2 length 6 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[eap] returns updated Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling unix (rlm_unix) for request 7 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from unix (rlm_unix) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[unix] returns notfound Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 7 Tue Oct 14 17:50:58 2008 : Debug: users: Matched entry cert at line 76 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[files] returns ok Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling expiration (rlm_expiration) for request 7 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from expiration (rlm_expiration) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[expiration] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling logintime (rlm_logintime) for request 7 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from logintime (rlm_logintime) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[logintime] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling pap (rlm_pap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: rlm_pap: Found existing Auth-Type, not changing it. Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from pap (rlm_pap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[pap] returns noop Tue Oct 14 17:50:58 2008 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 14 17:50:58 2008 : Debug: auth: type "EAP" Tue Oct 14 17:50:58 2008 : Debug: +- entering group authenticate Tue Oct 14 17:50:58 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: Request found, released from the list Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP NAK Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP-NAK asked for EAP-Type/tls Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: processing type tls Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: Requiring client certificate Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: Initiate Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: Start returned 1 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 7 Tue Oct 14 17:50:58 2008 : Debug: ++[eap] returns handled Sending Access-Challenge of id 5 to 10.0.31.40 port 1645 EAP-Message = 0x010300060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x53214e19522243772105e442b8f04324 Tue Oct 14 17:50:58 2008 : Debug: Finished request 7. Tue Oct 14 17:50:58 2008 : Debug: Going to the next request Tue Oct 14 17:50:58 2008 : Debug: Waking up in 3.1 seconds. rad_recv: Access-Request packet from host 10.0.31.40 port 1645, id=6, length=255 User-Name = "cert" Framed-MTU = 1400 Called-Station-Id = "0019.2fdb.9e00" Calling-Station-Id = "001f.3c22.44c5" Service-Type = Login-User Message-Authenticator = 0x531eac3e1d25194e19d1391e9e25d099 EAP-Message = 0x0203006e0d8000000064160301005f0100005b030148f5062f307e645c06a6432cf1d9169376cdb5131590394dc7afa95b00abceb900003400390038003500160013000a00330032002f006600050004006500640063006200610060001500120009001400110008000600030100 NAS-Port-Type = Wireless-802.11 NAS-Port = 924 State = 0x53214e19522243772105e442b8f04324 NAS-IP-Address = 10.0.31.40 NAS-Identifier = "ap-Reconquista-31" Tue Oct 14 17:50:58 2008 : Debug: +- entering group authorize Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 8 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[preprocess] returns ok Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[chap] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[mschap] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 8 Tue Oct 14 17:50:58 2008 : Debug: rlm_realm: No '@' in User-Name = "cert", looking up realm NULL Tue Oct 14 17:50:58 2008 : Debug: rlm_realm: No such realm "NULL" Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[suffix] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP packet type response id 3 length 110 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[eap] returns updated Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling unix (rlm_unix) for request 8 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from unix (rlm_unix) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[unix] returns notfound Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling files (rlm_files) for request 8 Tue Oct 14 17:50:58 2008 : Debug: users: Matched entry cert at line 76 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[files] returns ok Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling expiration (rlm_expiration) for request 8 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from expiration (rlm_expiration) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[expiration] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling logintime (rlm_logintime) for request 8 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from logintime (rlm_logintime) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[logintime] returns noop Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: calling pap (rlm_pap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: rlm_pap: Found existing Auth-Type, not changing it. Tue Oct 14 17:50:58 2008 : Debug: modsingle[authorize]: returned from pap (rlm_pap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[pap] returns noop Tue Oct 14 17:50:58 2008 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 14 17:50:58 2008 : Debug: auth: type "EAP" Tue Oct 14 17:50:58 2008 : Debug: +- entering group authenticate Tue Oct 14 17:50:58 2008 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: Request found, released from the list Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: EAP/tls Tue Oct 14 17:50:58 2008 : Debug: rlm_eap: processing type tls Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: Authenticate Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: processing TLS Tue Oct 14 17:50:58 2008 : Debug: TLS Length 100 Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: Length Included Tue Oct 14 17:50:58 2008 : Debug: eaptls_verify returned 11 Tue Oct 14 17:50:58 2008 : Debug: (other): before/accept initialization Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: before/accept initialization Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: <<< TLS 1.0 Handshake [length 005f], ClientHello Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: SSLv3 read client hello A Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: SSLv3 write server hello A Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 0839], Certificate Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: SSLv3 write certificate A Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 020d], ServerKeyExchange Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: SSLv3 write key exchange A Tue Oct 14 17:50:58 2008 : Debug: rlm_eap_tls: >>> TLS 1.0 Handshake [length 00a0], CertificateRequest Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: SSLv3 write certificate request A Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: SSLv3 flush data Tue Oct 14 17:50:58 2008 : Debug: TLS_accept: Need to read more data: SSLv3 read client certificate A Tue Oct 14 17:50:58 2008 : Debug: In SSL Handshake Phase Tue Oct 14 17:50:58 2008 : Debug: In SSL Accept mode Tue Oct 14 17:50:58 2008 : Debug: eaptls_process returned 13 Tue Oct 14 17:50:58 2008 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 8 Tue Oct 14 17:50:58 2008 : Debug: ++[eap] returns handled Sending Access-Challenge of id 6 to 10.0.31.40 port 1645 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x4d7692a192d9ca4b95110004 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x53214e19512543772105e442b8f04324 Tue Oct 14 17:50:58 2008 : Debug: Finished request 8. Tue Oct 14 17:50:58 2008 : Debug: Going to the next request Tue Oct 14 17:50:58 2008 : Debug: Waking up in 3.1 seconds. Tue Oct 14 17:51:01 2008 : Debug: Cleaning up request 0 ID 254 with timestamp +488 Tue Oct 14 17:51:01 2008 : Debug: Cleaning up request 1 ID 255 with timestamp +488 Tue Oct 14 17:51:01 2008 : Debug: Waking up in 0.6 seconds. Tue Oct 14 17:51:02 2008 : Debug: Cleaning up request 2 ID 0 with timestamp +489 Tue Oct 14 17:51:02 2008 : Debug: Cleaning up request 3 ID 1 with timestamp +489 Tue Oct 14 17:51:02 2008 : Debug: Cleaning up request 4 ID 2 with timestamp +489 Tue Oct 14 17:51:02 2008 : Debug: Waking up in 0.6 seconds. Tue Oct 14 17:51:03 2008 : Debug: Cleaning up request 5 ID 3 with timestamp +490 Tue Oct 14 17:51:03 2008 : Debug: Waking up in 0.5 seconds. Tue Oct 14 17:51:03 2008 : Debug: Cleaning up request 6 ID 4 with timestamp +490 Tue Oct 14 17:51:03 2008 : Debug: Cleaning up request 7 ID 5 with timestamp +490 Tue Oct 14 17:51:03 2008 : Debug: Cleaning up request 8 ID 6 with timestamp +490 Tue Oct 14 17:51:03 2008 : Debug: Ready to process requests. in the notebook client install "ca.der" and "client.p12", at first not recognized as an entity of strength and confidence but install it by force, and the client.p12 installs fine but the state tells me that "no You can find the issuer of the certificate " reinstall the certificates and tried to locate the error somewhere but I do not find much. thanks again. -- -- Silvero Martin