Hi Folk, I have activated attr_filter for a realm (dr4.cnrs.fr) and want users from that realm to have 2 possible values of VLANs (VISITEUR or SIRC) Here is my attr_file: dr4.cnrs.fr Service-Type == Login-User, Framed-IP-Address == 255.255.255.254, Framed-MTU >= 576, Proxy-State =* ANY, Reply-Message =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, State =* ANY, Session-Timeout <= 28800, Idle-Timeout <= 600, Port-Limit <= 2, Proxy-State =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, User-Name =* ANY, Called-Station-Id =* ANY, Calling-Station-Id =* ANY, NAS-Port-Type =* ANY, NAS-Port =* ANY, NAS-IP-Address =* ANY, NAS-Identifier =* ANY, Framed-Filter-ID =* ANY, Tunnel-Type == VLAN, # Tunnel-Type =* ANY, Tunnel-Medium-Type == IEEE-802, # Tunnel-Medium-Type =* ANY, Trapeze-VLAN-Name == VISITEUR, Trapeze-VLAN-Name == SIRC, # Trapeze-VLAN-Name =* ANY, Tunnel-Private-Group-Id == VISITEUR, Tunnel-Private-Group-Id == SIRC # Tunnel-Private-Group-Id =* ANY When i test the connexion with my account (my attribute Tunnel-Private-Group-Id = Trapeze-VLAN-Name = VISITEUR), the authentification is OK but radius server do not send this attribute to the NAS: they are filtered and they should not. When I set those attributes to * ANY, every thing works well. I don't understand this behaviour. Thanks for any ideas/help -- Mustapha BOUIKHIF Service Systèmes d'Information CNRS - DR4 tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39
debug? It could be that they just haven't been copied from inner to outer reply. Ivan Kalik Kalik Informatika ISP Dana 25/11/2008, "Mustapha Bouikhif" <Mustapha.Bouikhif@cnrs-gif.fr> piše:
Hi Folk,
I have activated attr_filter for a realm (dr4.cnrs.fr) and want users from that realm to have 2 possible values of VLANs (VISITEUR or SIRC) Here is my attr_file: dr4.cnrs.fr Service-Type == Login-User, Framed-IP-Address == 255.255.255.254, Framed-MTU >= 576, Proxy-State =* ANY, Reply-Message =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, State =* ANY, Session-Timeout <= 28800, Idle-Timeout <= 600, Port-Limit <= 2, Proxy-State =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, User-Name =* ANY, Called-Station-Id =* ANY, Calling-Station-Id =* ANY, NAS-Port-Type =* ANY, NAS-Port =* ANY, NAS-IP-Address =* ANY, NAS-Identifier =* ANY, Framed-Filter-ID =* ANY, Tunnel-Type == VLAN, # Tunnel-Type =* ANY, Tunnel-Medium-Type == IEEE-802, # Tunnel-Medium-Type =* ANY, Trapeze-VLAN-Name == VISITEUR, Trapeze-VLAN-Name == SIRC, # Trapeze-VLAN-Name =* ANY, Tunnel-Private-Group-Id == VISITEUR, Tunnel-Private-Group-Id == SIRC # Tunnel-Private-Group-Id =* ANY
When i test the connexion with my account (my attribute Tunnel-Private-Group-Id = Trapeze-VLAN-Name = VISITEUR), the authentification is OK but radius server do not send this attribute to the NAS: they are filtered and they should not. When I set those attributes to * ANY, every thing works well. I don't understand this behaviour. Thanks for any ideas/help
-- Mustapha BOUIKHIF Service Systčmes d'Information CNRS - DR4
tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
tnt@kalik.net wrote:
debug? It could be that they just haven't been copied from inner to outer reply.
Ivan Kalik Kalik Informatika ISP
Ok, here I attached the debug file of radiusd. Thanks. -- Mustapha BOUIKHIF Service Syste`mes d'Information CNRS - DR4 tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=170, length=175 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x111dafa8ccc8e078366fa74cd8a0e237 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 148 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313730 Proxying request 0 to home server 157.136.124.25 port 1812 Sending Access-Request of id 148 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313730 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=148, length=69 EAP-Message = 0x010200061520 Message-Authenticator = 0xef5707bb181aadc8286d5294f248d3fc State = 0x8994ef708996fa914393563198f302a5 Proxy-State = 0x313730 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 170 to 157.136.122.46 port 20000 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708996fa914393563198f302a5 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=171, length=227 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xdbcedf4455a05bfe7b12d4be3ba0b444 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 43 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313731 Proxying request 1 to home server 157.136.124.25 port 1812 Sending Access-Request of id 43 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313731 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=43, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x71bb5fbcc097c8528cb5eb78702c0c27 State = 0x8994ef708897fa914393563198f302a5 Proxy-State = 0x313731 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 171 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708897fa914393563198f302a5 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=172, length=173 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x9ac5d42d98a65a6d32d21131959cbcaa server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Proxying request 2 to home server 157.136.124.25 port 1812 Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=207, length=1095 EAP-Message = 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 EAP-Message = 0x61726430820122300d06092a864886f70d01010105000382010f003082010a0282010100dce11e213d068beabd5eb488db0f9397b46d073d8662002dcaffb54a8ee756a48f612cf1a02aabf62add7c2cbfef75550bac094ee74e61c0e70cf09015451202c28cebc31264e26310182ecb0731d981e5dc29829b3156e2811e8a6fa7e8a958114456835db34e78702ddfb6fd728145d5f1ee4dceefbed53d0c9020459a0980af0f4cda200e80bf3ab3eb2780c0b90fc0a14e40dc3afd6a2abf40d52c7180f9f8ba6be4ea2a00ab2fbe9af0a7766d98299c0f2ff042f218975bc9f6cc195fbac2be12d25cb09094c0b7cb0604ef8f30ed322d7a4af793bba0 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x29162638cb7d7f04a5c5d083281e38ff State = 0x8994ef708b90fa914393563198f302a5 Proxy-State = 0x313732 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 172 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708b90fa914393563198f302a5 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=173, length=173 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x348ec3932736f498d2eb984b101ce83b server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 240 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313733 Proxying request 3 to home server 157.136.124.25 port 1812 Sending Access-Request of id 240 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313733 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=240, length=914 EAP-Message = 0x0105034d158000000b2f310d300b060355040a1304434e5253310d300b06035504031304434e5253301e170d3031303432373035343433365a170d3231303432323035343433365a302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e525330820122300d06092a864886f70d01010105000382010f003082010a0282010100dd77abf1eafc78b514a1dc776256978c2fb754c24c54a6d47d22477b74a9f7e3ad7c55b214f0485d988f02bd9211b6884fc415f56f585bf789b527eaafa0fca08e88868f9f24b6904e24dc67d04f8f7e562d1b280772b11767a00edb424ec37cb425a2f88c04b1 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0xdce053b312feabb1d0aad0206c1999d8 State = 0x8994ef708a91fa914393563198f302a5 Proxy-State = 0x313733 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 173 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253820100300b0603551d0f040403020106300d06092a864886f70d0101040500038201010038d7c329bc7a77a25e164749865ed019386ade810802b9a7a002a688b80de24935cee6aaa234d2f9a384379a15e9592bb7bdcc11ae29218f8f9139fa9d77e2e839eaec2ed6ca4847224c65b1d3b66f581b342e8a109d128474a4795257005314c898de816ec50b75a75ae7d335084588f5845098f0073ec5863e2e095aa2dcb6a06b7b37ab9f03706eddf59cc00e05ecb5845b23b489211088adfb2d08e400131c55b38f77be20acdc011c797c670c5a5f4fb9 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708a91fa914393563198f302a5 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=174, length=367 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x9161d478c80610965e422626ce1d55cd server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 103 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313734 Proxying request 4 to home server 157.136.124.25 port 1812 Sending Access-Request of id 103 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313734 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=103, length=124 EAP-Message = 0x0106003d15800000003314030100010116030100288ec389ae7aec2ea8b4a731625a8cf45c2a52a86fa10386e1c5b1cbeaafa68e2cd48a611483c43405 Message-Authenticator = 0x284e02e4c36061fdc70a9e54ad89e723 State = 0x8994ef708d92fa914393563198f302a5 Proxy-State = 0x313734 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 174 to 157.136.122.46 port 20000 EAP-Message = 0x0106003d15800000003314030100010116030100288ec389ae7aec2ea8b4a731625a8cf45c2a52a86fa10386e1c5b1cbeaafa68e2cd48a611483c43405 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708d92fa914393563198f302a5 Finished request 4. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=175, length=270 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xcea6df25f9a700127c6ba38dc26e8187 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 210 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313735 Proxying request 5 to home server 157.136.124.25 port 1812 Sending Access-Request of id 210 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313735 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 157.136.124.25 port 1812, id=210, length=234 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Trapeze-VLAN-Name = "VISITEUR" Tunnel-Private-Group-Id:0 = "VISITEUR" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0xa0171fce3435a454a90e8b5c0f72147ff38677ab4117d5f2d6cb818d3263054b MS-MPPE-Send-Key = 0xb65e0e65033432a40fca267262c58d030b77580619084fa4239f49820752916e EAP-Message = 0x03060004 Message-Authenticator = 0x813fd9f78d66a742972f50a992ff0b70 Proxy-State = 0x313735 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [anonymous@dr4.cnrs.fr] (from client MX200 port 1273 cli 00-13-CE-89-BC-8A) +- entering group post-auth {...} [reply_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[reply_log] returns ok } # server radius.cnrs-gif.fr Sending Access-Accept of id 175 to 157.136.122.46 port 20000 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0xa0171fce3435a454a90e8b5c0f72147ff38677ab4117d5f2d6cb818d3263054b MS-MPPE-Send-Key = 0xb65e0e65033432a40fca267262c58d030b77580619084fa4239f49820752916e EAP-Message = 0x03060004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 5. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=176, length=176 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x375a1e5adf78fbb1fff2afd2cd72d58d server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 85 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313736 Proxying request 6 to home server 157.136.124.25 port 1812 Sending Access-Request of id 85 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313736 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=85, length=69 EAP-Message = 0x010200061520 Message-Authenticator = 0xd8ce20fc115fd701342a5aa20fe65f35 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb Proxy-State = 0x313736 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 176 to 157.136.122.46 port 20000 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb Finished request 6. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=177, length=228 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xa5585139c73179b43ca751d09a96e526 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313737 Proxying request 7 to home server 157.136.124.25 port 1812 Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313737 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=207, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x808b18134190ceb09c05def43a003376 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb Proxy-State = 0x313737 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 177 to 157.136.122.46 port 20000 EAP-Message = 0x0103040015c000000b2f160301002a020000260301492be70c3f369113b4acf9c15646f597b4893367a9c3163ec47f8e8905f7276400000a001603010af20b000aee000aeb00040930820405308202eda00302010202027869300d06092a864886f70d01010505003034310b3009060355040613024652310d300b060355040a1304434e5253311630140603550403130d434e52532d5374616e64617264301e170d3038303430323134343330395a170d3130303430323134343330395a3072310b3009060355040613024652310d300b060355040a1304434e5253310f300d060355040b13064d4f593430303120301e060355040313176c6f63616c EAP-Message = 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 EAP-Message = 0x0206c0300e0603551d0f0101ff0404030205e0301d0603551d250416301406082b0601050507030106082b06010505070302302f06096086480186f842010d0422162043657274696669636174207365727665757220434e52532d5374616e64617264301d0603551d0e041604145b7436fe42f81e869c44933d44123639aa64503d30530603551d23044c304a80146759a5e507744903ef05cfcc2ea418d510c89e3ca12fa42d302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e525382010230220603551d11041b301982176c6f63616c7261646975732e636e72732d6769662e66723046 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb Finished request 7. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=178, length=174 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x00897a820652710e8ada51bcf1c64e83 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 138 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313738 Proxying request 8 to home server 157.136.124.25 port 1812 Sending Access-Request of id 138 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313738 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=138, length=1095 EAP-Message = 0x0104040015c000000b2f5666987a84fc75eb0a7efebf768264180db21954ab6ef5f43c252f519eb27c458f9c5309f6844c18c289d48e22e44e53b54ae20fb20e9d66bfc784a8906507a117422ade3a69da37e41d98f7a4e1ab1fc20003713082036d30820255a003020102020102300d06092a864886f70d0101040500302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253301e170d3031303432373035343634395a170d3131303432353035343634395a3034310b3009060355040613024652310d300b060355040a1304434e5253311630140603550403130d434e52532d5374616e64 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x96da27aa03f43101e8e9199216fadbfa State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb Proxy-State = 0x313738 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 178 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb Finished request 8. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=179, length=174 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x016b83d1c5bbddeb4ad9ce9e6094c023 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 144 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313739 Proxying request 9 to home server 157.136.124.25 port 1812 Sending Access-Request of id 144 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313739 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=144, length=914 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x9d7323cf47cb9dcca1918ca949b01065 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb Proxy-State = 0x313739 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 179 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb Finished request 9. Going to the next request Waking up in 4.5 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=180, length=368 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xc3570d11bf4ed8551e8302326c109ab4 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 64 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313830 Proxying request 10 to home server 157.136.124.25 port 1812 Sending Access-Request of id 64 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313830 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=64, length=124 EAP-Message = 0x0106003d15800000003314030100010116030100285454b07dcf8b87b46296188ab6b07aaa1b6b42b73118258e14e35c79671d48682c0da8f8c9cde840 Message-Authenticator = 0xb617e8a7ace9f224b715d70714f0f357 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb Proxy-State = 0x313830 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 180 to 157.136.122.46 port 20000 EAP-Message = 0x0106003d15800000003314030100010116030100285454b07dcf8b87b46296188ab6b07aaa1b6b42b73118258e14e35c79671d48682c0da8f8c9cde840 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb Finished request 10. Going to the next request Waking up in 4.4 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=181, length=271 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xa8f1085dad5399a5b4f32107bbd2ab07 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 46 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313831 Proxying request 11 to home server 157.136.124.25 port 1812 Sending Access-Request of id 46 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313831 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 157.136.124.25 port 1812, id=46, length=234 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Trapeze-VLAN-Name = "VISITEUR" Tunnel-Private-Group-Id:0 = "VISITEUR" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0x07864480f31b0a1026a3c323c074edb6322939cb89a0a80a3c8da3c780863b37 MS-MPPE-Send-Key = 0xe03096931feb575aa58d491a59338c2d2e565b7d9eb5435bce600c7a655defb5 EAP-Message = 0x03060004 Message-Authenticator = 0x20eed679ce104e6497c7f772823a6415 Proxy-State = 0x313831 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [anonymous@dr4.cnrs.fr] (from client MX200 port 1274 cli 00-13-CE-89-BC-8A) +- entering group post-auth {...} [reply_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[reply_log] returns ok } # server radius.cnrs-gif.fr Sending Access-Accept of id 181 to 157.136.122.46 port 20000 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0x07864480f31b0a1026a3c323c074edb6322939cb89a0a80a3c8da3c780863b37 MS-MPPE-Send-Key = 0xe03096931feb575aa58d491a59338c2d2e565b7d9eb5435bce600c7a655defb5 EAP-Message = 0x03060004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 11. Going to the next request Waking up in 4.4 seconds.
tnt@kalik.net wrote:
debug? It could be that they just haven't been copied from inner to outer reply.
Ivan Kalik Kalik Informatika ISP
Dana 25/11/2008, "Mustapha Bouikhif" <Mustapha.Bouikhif@cnrs-gif.fr> piše:
Hi Folk,
I have activated attr_filter for a realm (dr4.cnrs.fr) and want users
from that realm to have 2 possible values of VLANs (VISITEUR or SIRC)
Here is my attr_file: dr4.cnrs.fr Service-Type == Login-User, Framed-IP-Address == 255.255.255.254, Framed-MTU >= 576, Proxy-State =* ANY, Reply-Message =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, State =* ANY, Session-Timeout <= 28800, Idle-Timeout <= 600, Port-Limit <= 2, Proxy-State =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, User-Name =* ANY, Called-Station-Id =* ANY, Calling-Station-Id =* ANY, NAS-Port-Type =* ANY, NAS-Port =* ANY, NAS-IP-Address =* ANY, NAS-Identifier =* ANY, Framed-Filter-ID =* ANY, Tunnel-Type == VLAN, # Tunnel-Type =* ANY, Tunnel-Medium-Type == IEEE-802, # Tunnel-Medium-Type =* ANY, Trapeze-VLAN-Name == VISITEUR, Trapeze-VLAN-Name == SIRC, # Trapeze-VLAN-Name =* ANY, Tunnel-Private-Group-Id == VISITEUR, Tunnel-Private-Group-Id == SIRC # Tunnel-Private-Group-Id =* ANY
When i test the connexion with my account (my attribute Tunnel-Private-Group-Id = Trapeze-VLAN-Name = VISITEUR), the authentification is OK but radius server do not send this attribute to the NAS: they are filtered and they should not. When I set those attributes to * ANY, every thing works well. I don't understand this behaviour. Thanks for any ideas/help
-- Mustapha BOUIKHIF Service Systčmes d'Information CNRS - DR4
tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Here is the debug of radiusd (attached file) Thanks. -- Mustapha BOUIKHIF Service Syste`mes d'Information CNRS - DR4 tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39 Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=170, length=175 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x111dafa8ccc8e078366fa74cd8a0e237 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 148 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313730 Proxying request 0 to home server 157.136.124.25 port 1812 Sending Access-Request of id 148 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313730 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=148, length=69 EAP-Message = 0x010200061520 Message-Authenticator = 0xef5707bb181aadc8286d5294f248d3fc State = 0x8994ef708996fa914393563198f302a5 Proxy-State = 0x313730 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 170 to 157.136.122.46 port 20000 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708996fa914393563198f302a5 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=171, length=227 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xdbcedf4455a05bfe7b12d4be3ba0b444 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 43 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313731 Proxying request 1 to home server 157.136.124.25 port 1812 Sending Access-Request of id 43 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708996fa914393563198f302a5 EAP-Message = 0x0202003c158000000032160301002d010000290301bc5a68211dcc0645e9deedcbb54506a8b0e048a944f4b06a4efb5b0e43b5c4bb000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313731 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=43, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x71bb5fbcc097c8528cb5eb78702c0c27 State = 0x8994ef708897fa914393563198f302a5 Proxy-State = 0x313731 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 171 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708897fa914393563198f302a5 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=172, length=173 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x9ac5d42d98a65a6d32d21131959cbcaa server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Proxying request 2 to home server 157.136.124.25 port 1812 Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708897fa914393563198f302a5 EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313732 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=207, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x29162638cb7d7f04a5c5d083281e38ff State = 0x8994ef708b90fa914393563198f302a5 Proxy-State = 0x313732 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 172 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x4ba7262365c2ea069a72bbb88ccb8a5fef7936257e00d7f30694fb8344292637c7eee987ce6c86801b713dd262aff6cd626c530fe67a93008c7b2e33e0411daabe659876f1950774b3e63f5375d54b06364b29c4f6dc8e138040107382ad157b047150b53733f2c864bba1107e36c6adaf6f7052a6d1aeccccbab0e859128f620dad03dd4b2ae8893988512fed61e8b73087db27556d6687a351098061715105be131dd94130fc755f0a969b18ffbe9081b413c0721108fd6a9a6a07bdf4832cb460366407fa3d6aa7b090047683dd33cb34e21798040ba1000368308203643082024ca003020102020100300d06092a864886f70d0101040500302b31 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708b90fa914393563198f302a5 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=173, length=173 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x348ec3932736f498d2eb984b101ce83b server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 240 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313733 Proxying request 3 to home server 157.136.124.25 port 1812 Sending Access-Request of id 240 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708b90fa914393563198f302a5 EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313733 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=240, length=914 EAP-Message = 0x0105034d158000000b2f310d300b060355040a1304434e5253310d300b06035504031304434e5253301e170d3031303432373035343433365a170d3231303432323035343433365a302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e525330820122300d06092a864886f70d01010105000382010f003082010a0282010100dd77abf1eafc78b514a1dc776256978c2fb754c24c54a6d47d22477b74a9f7e3ad7c55b214f0485d988f02bd9211b6884fc415f56f585bf789b527eaafa0fca08e88868f9f24b6904e24dc67d04f8f7e562d1b280772b11767a00edb424ec37cb425a2f88c04b1 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0xdce053b312feabb1d0aad0206c1999d8 State = 0x8994ef708a91fa914393563198f302a5 Proxy-State = 0x313733 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 173 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 0xa9825d8c8fd4837beeaa9fd7d2dbf65b6ec28110d69aab5d881c36ca0564684b8b9ec0509423fdb628b5af5da4dda6c5d3d8572b3ef8b5bac4d8ff12225f24690762e4344a0877ca30bbecd3ed759068a28c717227de15262c2521842a9e5718817223bd661f0fe3b7bd17da12ba1954f41c2d8f715233b1b628b67a68cb9a4d5238fa488cc14b89968fc6175bcbb90e0e815c1ac7343957bd0203010001a3819230818f300c0603551d13040530030101ff301d0603551d0e0416041456eb68b9d25c7e98b5a553c3916f6358c4f96bb730530603551d23044c304a801456eb68b9d25c7e98b5a553c3916f6358c4f96bb7a12fa42d302b310b300906 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708a91fa914393563198f302a5 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=174, length=367 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x9161d478c80610965e422626ce1d55cd server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 103 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313734 Proxying request 4 to home server 157.136.124.25 port 1812 Sending Access-Request of id 103 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708a91fa914393563198f302a5 EAP-Message = 0x020500c81580000000be16030100861000008200808add30e404d4538b6b5124184f0005d5bfc87ce2b9d33142f7918077537bf8b77231b2bcbefd4e017c598e0a391ab023e7b6b37d83c560eb6bed881efc20eff77e774033642fddffcc651bb95e34a6fb15316617a8c9d3c3deace5ee4bf24e3845f6c51a7fba8a470e8c86509a2b1f9645bca3f84631962fa3d27997f1dbc78914030100010116030100285817f7879fd703eb0d4878af9ccf1968863eb2c3dd11993d30e240cdf2bdc1d237c7be05e5e6736d NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313734 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=103, length=124 EAP-Message = 0x0106003d15800000003314030100010116030100288ec389ae7aec2ea8b4a731625a8cf45c2a52a86fa10386e1c5b1cbeaafa68e2cd48a611483c43405 Message-Authenticator = 0x284e02e4c36061fdc70a9e54ad89e723 State = 0x8994ef708d92fa914393563198f302a5 Proxy-State = 0x313734 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 174 to 157.136.122.46 port 20000 EAP-Message = 0x0106003d15800000003314030100010116030100288ec389ae7aec2ea8b4a731625a8cf45c2a52a86fa10386e1c5b1cbeaafa68e2cd48a611483c43405 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8994ef708d92fa914393563198f302a5 Finished request 4. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=175, length=270 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xcea6df25f9a700127c6ba38dc26e8187 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 210 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313735 Proxying request 5 to home server 157.136.124.25 port 1812 Sending Access-Request of id 210 to 157.136.124.25 port 1812 NAS-Port-Id = "AP2/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-5E-DE-00:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1273 State = 0x8994ef708d92fa914393563198f302a5 EAP-Message = 0x0206006715800000005d1703010058c9e785e3f5c3a7150216acb802da103a414f15e7f6063ec9dfea47cb2b12f652b90f80ffe43114b1ce99fa5f736f599c1a6514722610f55811e90ca25fe56c44ece3297ca12b31e7ba44fadf03b3fd8a5d7c81bd44663f1b NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313735 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 157.136.124.25 port 1812, id=210, length=234 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Trapeze-VLAN-Name = "VISITEUR" Tunnel-Private-Group-Id:0 = "VISITEUR" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0xa0171fce3435a454a90e8b5c0f72147ff38677ab4117d5f2d6cb818d3263054b MS-MPPE-Send-Key = 0xb65e0e65033432a40fca267262c58d030b77580619084fa4239f49820752916e EAP-Message = 0x03060004 Message-Authenticator = 0x813fd9f78d66a742972f50a992ff0b70 Proxy-State = 0x313735 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [anonymous@dr4.cnrs.fr] (from client MX200 port 1273 cli 00-13-CE-89-BC-8A) +- entering group post-auth {...} [reply_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[reply_log] returns ok } # server radius.cnrs-gif.fr Sending Access-Accept of id 175 to 157.136.122.46 port 20000 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0xa0171fce3435a454a90e8b5c0f72147ff38677ab4117d5f2d6cb818d3263054b MS-MPPE-Send-Key = 0xb65e0e65033432a40fca267262c58d030b77580619084fa4239f49820752916e EAP-Message = 0x03060004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 5. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=176, length=176 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x375a1e5adf78fbb1fff2afd2cd72d58d server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 85 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313736 Proxying request 6 to home server 157.136.124.25 port 1812 Sending Access-Request of id 85 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User EAP-Message = 0x0201001a01616e6f6e796d6f7573406472342e636e72732e6672 User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313736 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=85, length=69 EAP-Message = 0x010200061520 Message-Authenticator = 0xd8ce20fc115fd701342a5aa20fe65f35 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb Proxy-State = 0x313736 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 176 to 157.136.122.46 port 20000 EAP-Message = 0x010200061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb Finished request 6. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=177, length=228 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xa5585139c73179b43ca751d09a96e526 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313737 Proxying request 7 to home server 157.136.124.25 port 1812 Sending Access-Request of id 207 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbcf6b9cdc67b74b64955b0cb EAP-Message = 0x0202003c158000000032160301002d0100002903018462f44f74ca416add00cf45932dcca530e580d30fa347dafa0e293ffa2070ad000002000a0100 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313737 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=207, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0206c0300e0603551d0f0101ff0404030205e0301d0603551d250416301406082b0601050507030106082b06010505070302302f06096086480186f842010d0422162043657274696669636174207365727665757220434e52532d5374616e64617264301d0603551d0e041604145b7436fe42f81e869c44933d44123639aa64503d30530603551d23044c304a80146759a5e507744903ef05cfcc2ea418d510c89e3ca12fa42d302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e525382010230220603551d11041b301982176c6f63616c7261646975732e636e72732d6769662e66723046 EAP-Message = 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 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x808b18134190ceb09c05def43a003376 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb Proxy-State = 0x313737 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 177 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0603551d1f043f303d303ba039a0378635687474703a2f2f63726c732e73657276696365732e636e72732e66722f434e52532d5374616e646172642f6765746465722e63726c300d06092a864886f70d010105050003820101003c9216cd17a4df131f508f72c34016229350a35201e99ec1d4268dd1a12e2e1923140c186421ef7f6db694f655cb3792d13fc897e08a99d6d328a22522d9a77a934b5564465c0a9f177c3b5afab50ea816bd2ccf2a5c31ac0fe3d377d6cd957e24bba0ede3b802ad84efc359c0641d65748151a76147feb8f971c191cce6c2b419aeaa03416f3f9b87a1023f67de0e2e5be7c6348f3ec077569471194287e350be3855 EAP-Message = 0x6ef1165aec7fe9eadaa79ea6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb Finished request 7. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=178, length=174 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x00897a820652710e8ada51bcf1c64e83 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 138 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313738 Proxying request 8 to home server 157.136.124.25 port 1812 Sending Access-Request of id 138 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbdf7b9cdc67b74b64955b0cb EAP-Message = 0x020300061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313738 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=138, length=1095 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x09a4b4ee33cbd0839bb5b5b390de8e901e599c20d54b1eedd74c4f86fa1c3a2aa1e9ac05a09dbf0203010001a3819230818f300c0603551d13040530030101ff301d0603551d0e041604146759a5e507744903ef05cfcc2ea418d510c89e3c30530603551d23044c304a801456eb68b9d25c7e98b5a553c3916f6358c4f96bb7a12fa42d302b310b3009060355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253820100300b0603551d0f040403020106300d06092a864886f70d0101040500038201010006034783724590c24ee121d7ab17a9015506ca406d55a21d5eebe2142359e409e290f63c8d36060f EAP-Message = 0x4ba7262365c2ea069a72bbb88ccb8a5fef7936257e00d7f30694fb8344292637c7eee987ce6c86801b713dd262aff6cd626c530fe67a93008c7b2e33e0411daabe659876f1950774b3e63f5375d54b06364b29c4f6dc8e138040107382ad157b047150b53733f2c864bba1107e36c6adaf6f7052a6d1aeccccbab0e859128f620dad03dd4b2ae8893988512fed61e8b73087db27556d6687a351098061715105be131dd94130fc755f0a969b18ffbe9081b413c0721108fd6a9a6a07bdf4832cb460366407fa3d6aa7b090047683dd33cb34e21798040ba1000368308203643082024ca003020102020100300d06092a864886f70d0101040500302b31 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x96da27aa03f43101e8e9199216fadbfa State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb Proxy-State = 0x313738 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 178 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x0b3009060355040613024652 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb Finished request 8. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=179, length=174 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0x016b83d1c5bbddeb4ad9ce9e6094c023 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 144 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313739 Proxying request 9 to home server 157.136.124.25 port 1812 Sending Access-Request of id 144 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbef0b9cdc67b74b64955b0cb EAP-Message = 0x020400061500 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313739 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=144, length=914 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x9d7323cf47cb9dcca1918ca949b01065 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb Proxy-State = 0x313739 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 179 to 157.136.122.46 port 20000 EAP-Message = 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 EAP-Message = 0xa9825d8c8fd4837beeaa9fd7d2dbf65b6ec28110d69aab5d881c36ca0564684b8b9ec0509423fdb628b5af5da4dda6c5d3d8572b3ef8b5bac4d8ff12225f24690762e4344a0877ca30bbecd3ed759068a28c717227de15262c2521842a9e5718817223bd661f0fe3b7bd17da12ba1954f41c2d8f715233b1b628b67a68cb9a4d5238fa488cc14b89968fc6175bcbb90e0e815c1ac7343957bd0203010001a3819230818f300c0603551d13040530030101ff301d0603551d0e0416041456eb68b9d25c7e98b5a553c3916f6358c4f96bb730530603551d23044c304a801456eb68b9d25c7e98b5a553c3916f6358c4f96bb7a12fa42d302b310b300906 EAP-Message = 0x0355040613024652310d300b060355040a1304434e5253310d300b06035504031304434e5253820100300b0603551d0f040403020106300d06092a864886f70d0101040500038201010038d7c329bc7a77a25e164749865ed019386ade810802b9a7a002a688b80de24935cee6aaa234d2f9a384379a15e9592bb7bdcc11ae29218f8f9139fa9d77e2e839eaec2ed6ca4847224c65b1d3b66f581b342e8a109d128474a4795257005314c898de816ec50b75a75ae7d335084588f5845098f0073ec5863e2e095aa2dcb6a06b7b37ab9f03706eddf59cc00e05ecb5845b23b489211088adfb2d08e400131c55b38f77be20acdc011c797c670c5a5f4fb9 EAP-Message = 0x9489beab9a2c12b1a863c6628003fd4c7095bdc6e805dacbbe09a61fe96dd2852e43d31f1a5c76fe13766160f964d45878bf7fefe573a343da2a7f77db347972d98ee5a5ed52d0c4464c5f1baa16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb Finished request 9. Going to the next request Waking up in 4.5 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=180, length=368 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xc3570d11bf4ed8551e8302326c109ab4 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 64 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313830 Proxying request 10 to home server 157.136.124.25 port 1812 Sending Access-Request of id 64 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fbff1b9cdc67b74b64955b0cb EAP-Message = 0x020500c81580000000be1603010086100000820080bdb1bce83c56b9d095bca6ec823978e7e7050babd507d513f2105b780d78c949fd3014426f059f2ae4d6c80a1cededfcea2a4451e76b4df2b71dc4ecdb16905dbbe5ef0d61da56b39cec4bdd5225395a65928ae23cb3f13c31e9ff5aacced89416d5868f2f2f6d8c818d7f9bdca5c41f41a9394f3cc320e71206b2281e7fcb4c14030100010116030100286223e25e16dcc3a682c01be8ddf084d66e952d5fb29cb3e97579a957d172d888c1d7bb8b0c343b76 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313830 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 157.136.124.25 port 1812, id=64, length=124 EAP-Message = 0x0106003d15800000003314030100010116030100285454b07dcf8b87b46296188ab6b07aaa1b6b42b73118258e14e35c79671d48682c0da8f8c9cde840 Message-Authenticator = 0xb617e8a7ace9f224b715d70714f0f357 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb Proxy-State = 0x313830 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { } # server radius.cnrs-gif.fr Sending Access-Challenge of id 180 to 157.136.122.46 port 20000 EAP-Message = 0x0106003d15800000003314030100010116030100285454b07dcf8b87b46296188ab6b07aaa1b6b42b73118258e14e35c79671d48682c0da8f8c9cde840 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb Finished request 10. Going to the next request Waking up in 4.4 seconds. rad_recv: Access-Request packet from host 157.136.122.46 port 20000, id=181, length=271 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address = 157.136.122.46 Message-Authenticator = 0xa8f1085dad5399a5b4f32107bbd2ab07 server radius.cnrs-gif.fr { +- entering group authorize {...} ++[preprocess] returns ok [attr_filter.post-proxy] expand: %{Realm} -> ++[attr_filter.post-proxy] returns noop [auth_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/auth-detail-20081125 [auth_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "dr4.cnrs.fr" for User-Name = "anonymous@dr4.cnrs.fr" [suffix] Found realm "dr4.cnrs.fr" [suffix] Adding Realm = "dr4.cnrs.fr" [suffix] Proxying request from user anonymous to realm dr4.cnrs.fr [suffix] Preparing to proxy authentication request to realm "dr4.cnrs.fr" ++[suffix] returns updated [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr ++[files] returns noop [eap] Request is supposed to be proxied to Realm dr4.cnrs.fr. Not doing EAP. ++[eap] returns noop ++[pap] returns noop } # server radius.cnrs-gif.fr +- entering group pre-proxy {...} [files] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [files] expand: %{Stripped-User-Name:-%{User-Name}} -> anonymous@dr4.cnrs.fr [files] preproxy_users: Matched entry DEFAULT at line 33 ++[files] returns ok [pre_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/pre-proxy-detail-20081125 [pre_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[pre_proxy_log] returns ok Sending Access-Request of id 46 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313831 Proxying request 11 to home server 157.136.124.25 port 1812 Sending Access-Request of id 46 to 157.136.124.25 port 1812 NAS-Port-Id = "AP31/1" Calling-Station-Id = "00-13-CE-89-BC-8A" Called-Station-Id = "00-0B-0E-63-9F-80:eduroam" Service-Type = Framed-User User-Name = "anonymous@dr4.cnrs.fr" NAS-Port = 1274 State = 0xbcf4ac9fb8f2b9cdc67b74b64955b0cb EAP-Message = 0x0206006715800000005d170301005861e3012a93b47f2b7740e5ff8f1fe4a85622cfcf1764abea8dae4dae451d8c99113498f1fd69611b464d35d5e097db83adba423b2238c63229d35d808efd34ed7d233740a280d3a37ccda881f3a2593e9fe9ca26816aa387 NAS-Port-Type = Wireless-802.11 NAS-Identifier = "Trapeze" NAS-IP-Address := 157.136.124.22 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313831 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 157.136.124.25 port 1812, id=46, length=234 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Trapeze-VLAN-Name = "VISITEUR" Tunnel-Private-Group-Id:0 = "VISITEUR" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0x07864480f31b0a1026a3c323c074edb6322939cb89a0a80a3c8da3c780863b37 MS-MPPE-Send-Key = 0xe03096931feb575aa58d491a59338c2d2e565b7d9eb5435bce600c7a655defb5 EAP-Message = 0x03060004 Message-Authenticator = 0x20eed679ce104e6497c7f772823a6415 Proxy-State = 0x313831 +- entering group post-proxy {...} [post_proxy_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/post-proxy-detail-20081125 [post_proxy_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> dr4.cnrs.fr attr_filter: Matched entry dr4.cnrs.fr at line 133 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop server radius.cnrs-gif.fr { Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [anonymous@dr4.cnrs.fr] (from client MX200 port 1274 cli 00-13-CE-89-BC-8A) +- entering group post-auth {...} [reply_log] expand: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/157.136.122.46/reply-detail-20081125 [reply_log] expand: %t -> Tue Nov 25 12:52:44 2008 ++[reply_log] returns ok } # server radius.cnrs-gif.fr Sending Access-Accept of id 181 to 157.136.122.46 port 20000 User-Name = "Mustapha.Bouikhif@dr4.cnrs.fr" Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Type:0 = VLAN MS-MPPE-Recv-Key = 0x07864480f31b0a1026a3c323c074edb6322939cb89a0a80a3c8da3c780863b37 MS-MPPE-Send-Key = 0xe03096931feb575aa58d491a59338c2d2e565b7d9eb5435bce600c7a655defb5 EAP-Message = 0x03060004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 11. Going to the next request Waking up in 4.4 seconds.
Hi, hmm, I'm not sure at all that you can have multi line attr filter matches... ie if you have seperate entries for each allowed type - i think that the very last defined one is the one taken....what you need to do is have a REGEX for the accetped types eg Trapeze-VLAN-Name == VISITEUR, Trapeze-VLAN-Name == SIRC, Tunnel-Private-Group-Id == VISITEUR, Tunnel-Private-Group-Id == SIRC should be something like Trapeze-VLAN-Name =~ VISITEUR||SIRC Tunnel-Private-Group-Id =~ VISITEUR||SIRC or somesuch alan
A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
hmm, I'm not sure at all that you can have multi line attr filter matches... ie if you have seperate entries for each allowed type - i think that the very last defined one is the one taken....what you need to do is have a REGEX for the accetped types eg
Trapeze-VLAN-Name == VISITEUR, Trapeze-VLAN-Name == SIRC, Tunnel-Private-Group-Id == VISITEUR, Tunnel-Private-Group-Id == SIRC
should be something like
Trapeze-VLAN-Name =~ VISITEUR||SIRC Tunnel-Private-Group-Id =~ VISITEUR||SIRC
or somesuch
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You are right, it works with regex. I did like the file attrs suggest, but I can't do it working: # These rules allow: # o Only Login-User Service-Type ( no framed/ppp sessions ) # o Telnet sessions only ( no rlogin, tcp-clear ) # o Login hosts of either 192.168.1.1 or 192.168.1.2 # #tisp # Service-Type == Login-User, # Login-Service == Telnet, # Login-TCP-Port == 23, # Login-IP-Host == 192.168.1.1, # Login-IP-Host == 192.168.1.2 Thanks again. -- Mustapha BOUIKHIF Service Systèmes d'Information CNRS - DR4 tel: +33 1 69 82 33 97 fax: +33 1 69 82 33 39
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Mustapha Bouikhif -
tnt＠kalik.net