Hello everyone, I need to restrict simultaneous logins but the freeradius server which receives the authentication does not implement this restriction. This server receives the authentication different departments and this restriction should only be applied in my department. It is possible to create a proxy that forwards authentication for global freeradius server and controls the simultaneous logins? How to return the parameter Simultaneous-Use via proxy? Any help will appriciate. Best Regards, Renato L. Sousa
On May 14, 2015, at 8:48 AM, Renato Sousa <rensousa@gmail.com> wrote:
It is possible to create a proxy that forwards authentication for global freeradius server and controls the simultaneous logins?
Yes.
How to return the parameter Simultaneous-Use via proxy?
You return it the same way you'd return it for local users. Set it in the configuration files. The proxy will ALSO need to get and record the accounting packets. Otherwise Simultaneous-Use won't work. Alan DeKok.
Hello Alan, Thanks for the reply!
You return it the same way you'd return it for local users. Set it in the configuration files.
The proxy will ALSO need to get and record the accounting packets. Otherwise Simultaneous-Use won't work.
I configured the proxy freeradius (2.2.5) and authentication is working as expected. The requests are being sent to global server freeradius. However, the control 'Simultaneous-Use' is not working. The accountig information is being recorded in mysql database. I configured the users file: DEFAULT Simultaneous-Use: = 1 Fall-Through = 1 The simul_count_query is uncommented in dialup.conf file. The running freeradius -X makes no reference to 'Simultaneous-Use' attribute. The following configuration /etc/freeradius/sites-available/default: authorize { preprocess suffix eap { ok = return } files expiration logintime pap } authenticate { eap } preacct { preprocess update request { FreeRADIUS-Acct-Session-Start-Time = "%{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}" } acct_unique suffix files } accounting { detail daily radutmp sql if (noop) { ok } exec attr_filter.accounting_response } session { radutmp sql } post-auth { sql exec Post-Auth-Type REJECT { attr_filter.access_reject } } pre-proxy { } post-proxy { eap } Any idea? Best Regards, Renato L. Sousa
On May 15, 2015, at 3:13 PM, Renato Sousa <rensousa@gmail.com> wrote:
I configured the proxy freeradius (2.2.5) and authentication is working as expected. The requests are being sent to global server freeradius. However, the control 'Simultaneous-Use' is not working. The accountig information is being recorded in mysql database.
I configured the users file:
DEFAULT Simultaneous-Use: = 1 Fall-Through = 1
That should work.
The simul_count_query is uncommented in dialup.conf file.
The running freeradius -X makes no reference to 'Simultaneous-Use' attribute.
It doesn't print out every attribute added to the request. It DOES print out while line in the "users" file it matched. So... read the debug output, and see which line it matched.
The following configuration /etc/freeradius/sites-available/default:
That's not important. The debug log is important. Alan DeKok.
It doesn't print out every attribute added to the request.
It DOES print out while line in the "users" file it matched.
So... read the debug output, and see which line it matched.
Analyzing the debug log, I noticed that the user was authenticated using the DEFAULT entry of users file. ... rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx port 53432, id=83, length=182 User-Name = "myuser@mydomain" NAS-IP-Address = 172.19.13.1 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:mySSID" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021800130135303832323639407573702e6272 Message-Authenticator = 0xc1d89f6280337eadb910a0518a2bcd95 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok [suffix] Looking up realm "mydomain" for User-Name = "myuser@mydomain" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop *[files] users: Matched entry DEFAULT at line 204* ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. ... After several authentication messages between the freeradius server, the user is successfully authenticated. ... Sending Access-Accept of id 95 to xxx.xxx.xxx.xxx port 53432 User-Name = "myuser" MS-MPPE-Recv-Key = 0x84a262...a00b3822ea7aa MS-MPPE-Send-Key = 0xef80f42...f18461fe508d95 EAP-Message = 0x03240004 Message-Authenticator = 0x00000000000000000000000000000000 ... The line 204 of the user file contains: DEFAULT Simultaneous-Use := 1 Fall-Through = 1 However the user can get more than one simultaneous connection. Any idea ? Thank you for your help! Renato L. Sousa
On May 18, 2015, at 9:35 AM, Renato Sousa <rensousa@gmail.com> wrote:
After several authentication messages between the freeradius server, the user is successfully authenticated. ... The line 204 of the user file contains: DEFAULT Simultaneous-Use := 1 Fall-Through = 1
That's good.
However the user can get more than one simultaneous connection. Any idea ?
Read the REST of the debug output to see what's going on. Is the NAS sending accounting packets? That is REQUIRED for Simultaneous-Use to work. Alan DeKok.
Read the REST of the debug output to see what's going on.
Is the NAS sending accounting packets? That is REQUIRED for Simultaneous-Use to work.
Yes, the NAS is sending accounting packets. rad_recv: Accounting-Request packet from host xxx.xxx.xxx.xxx port 58245, id=96, length=161 Acct-Session-Id = "00000013-00000008" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.1 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" # Executing section preacct from file /etc/freeradius/sites-enabled/default +group preacct { ++[preprocess] = ok ++update request { expand: %{Acct-Session-Time} -> ... expanding second conditional expand: %{Acct-Delay-Time} -> ... expanding second conditional expand: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0} -> 1431954276 - 0 - 0 expand: %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}} -> 1431954276 ++} # update request = noop [acct_unique] Hashing 'NAS-Port = 0,NAS-Identifier = "24a43cb0fbad",NAS-IP-Address = 172.19.13.1,Acct-Session-Id = "00000013-00000008",User-Name = "myuser"' [acct_unique] Acct-Unique-Session-ID = "75cf168fc31d9772". ++[acct_unique] = ok To be sure, I analyzed the mysql radacct table and noticed that there are records for the user who is logged in. I watched the rest of the debug file and did not notice anything unusual. The only thing that caught my attention is the message below appears a few times in debug. " WARNING: Empty pre-proxy section. Using default return values." This will be the cause of my problem? Best Regards, Renato L. Sousa
On May 18, 2015, at 3:32 PM, Renato Sousa <rensousa@gmail.com> wrote:
Yes, the NAS is sending accounting packets.
That's good.
To be sure, I analyzed the mysql radacct table and noticed that there are records for the user who is logged in.
That's good. And if that logged in user tries to log in again, what happens?
I watched the rest of the debug file and did not notice anything unusual. The only thing that caught my attention is the message below appears a few times in debug. " WARNING: Empty pre-proxy section. Using default return values." This will be the cause of my problem?
No. Alan DeKok.
Hi Alan,
That's good.
To be sure, I analyzed the mysql radacct table and noticed that there are records for the user who is logged in.
That's good. And if that logged in user tries to log in again, what happens?
The user can normally log into the system. The debug log shows that authentication is sent to the central proxy server and after some Access-Request and Access-Challenge message, the system returns an Access-Accept. There is nothing about the user has an active session. Watching the mysql accounting tables, it is possible to see the initiated simultaneous sessions: mysql> select radacctid,username,acctstarttime,acctstoptime,callingstationid from radacct where acctstoptime is null; +-----------+----------+---------------------+--------------+-------------------+ | radacctid | username | acctstarttime | acctstoptime | callingstationid | +-----------+----------+---------------------+--------------+-------------------+ | 52 | myuser | 2015-05-19 10:28:50 | NULL | 34-BB-26-C2-1D-60 | | 53 | myuser | 2015-05-19 10:37:17 | NULL | 68-94-23-92-31-83 | +-----------+----------+---------------------+--------------+-------------------+
I watched the rest of the debug file and did not notice anything unusual. The only thing that caught my attention is the message below appears a few times in debug. " WARNING: Empty pre-proxy section. Using default return values." This will be the cause of my problem?
No.
I made a debug log file of the second user session, but can not find any clue of the problem! :( Thanks for your help! Renato L. Sousa
On May 19, 2015, at 10:47 AM, Renato Sousa <rensousa@gmail.com> wrote:
The user can normally log into the system. The debug log shows that authentication is sent to the central proxy server and after some Access-Request and Access-Challenge message, the system returns an Access-Accept. There is nothing about the user has an active session.
Does the database contain information for the first user session? If not, that's the problem. Also check the attributes in the packets. Does it look like the user is logging in via the SAME session? i.e. Look at the two sessions. Are the attributes identical (other than EAP-Message). If so, then it looks like the user is logging into the same session, twice. Which is allowed.
Watching the mysql accounting tables, it is possible to see the initiated simultaneous sessions:
That's good.
I made a debug log file of the second user session, but can not find any clue of the problem! :(
There's no debug message saying "This is why Simultaneous-Use is going wrong". There ARE lots of debug messages showing what it's doing, and why. You've got to read them, understand them, understand what the server is doing, and go on from there. Alan DeKok.
Does the database contain information for the first user session? If not, that's the problem.
Yes.
Also check the attributes in the packets. Does it look like the user is logging in via the SAME session? i.e. Look at the two sessions. Are the attributes identical (other than EAP-Message). If so, then it looks like the user is logging into the same session, twice. Which is allowed.
The acctsessionid field is different for each session, so I think that the user has opened two distinct sections. There's no debug message saying "This is why Simultaneous-Use is going
wrong". There ARE lots of debug messages showing what it's doing, and why. You've got to read them, understand them, understand what the server is doing, and go on from there.
I know that! But how could have this line right ??? ;) I tried to completely uninstall freeradius, reinstall and configure it again. The problem still persists. The radwho command is return the message "radwho: No configuration information in radutmp section of radiusd.conf." This may be related to the problem? Best regards Renato L. Sousa
On May 20, 2015, at 7:21 AM, Renato Sousa <rensousa@gmail.com> wrote:
The acctsessionid field is different for each session, so I think that the user has opened two distinct sections.
That would seem to be the case.
I tried to completely uninstall freeradius, reinstall and configure it again. The problem still persists.
Re-installing it won't help. If only there was a way for you to post the debug output to the list, so RADIUS experts could look at it...
The radwho command is return the message "radwho: No configuration information in radutmp section of radiusd.conf." This may be related to the problem?
No. Alan DeKok.
Hi Alan,
If only there was a way for you to post the debug output to the list, so RADIUS experts could look at it...
Below debug connections. Some lines were omitted from the debug log so that the message is not too large (more than 2500 lines) ... <Output omitted> ... radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server radius01 { ipaddr = [ip_radius_01] port = 1812 type = "auth+acct" secret = "secret1" response_window = 20 max_outstanding = 65536 require_message_authenticator = yes zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 } home_server radius02 { ipaddr = [ip_radius_02] port = 1812 type = "auth+acct" secret = "secret1" response_window = 20 max_outstanding = 65536 require_message_authenticator = yes zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 } home_server_pool mypool { type = fail-over home_server = radius01 home_server = radius02 } home_server_pool mypool { type = fail-over home_server = radius01 home_server = radius02 } realm DEFAULT { auth_pool = mypool acct_pool = mypool nostrip } radiusd: #### Loading Clients #### client [ip_radius_01] { ipaddr = [ip_radius_01] require_message_authenticator = no secret = "secret1" shortname = "SRV01" nastype = "other" } client [ip_radius_02] { ipaddr = [ip_radius_02] require_message_authenticator = no secret = "secret1" shortname = "SRV02" nastype = "other" } client [ip_NAS] { ipaddr = [ip_NAS] require_message_authenticator = no secret = "test123" shortname = "myNAS" nastype = "other" } ... <Output omitted> ... ################################################################ # FIRST USER LOGIN ################################################################ rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=153, length=182 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021500130135303832323639407573702e6272 Message-Authenticator = 0xd0df550f23b1aa9498c5dcc605a9678e # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 119 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021500130135303832323639407573702e6272 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313533 Proxying request 0 to home server [ip_radius_01] port 1812 Sending Access-Request of id 119 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021500130135303832323639407573702e6272 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313533 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=119, length=69 EAP-Message = 0x011600061520 Message-Authenticator = 0xa2e85f83200e0de34fc18aba49cd83e3 State = 0x201f7da6200968a5f97c5846fd9a034b Proxy-State = 0x313533 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 153 to [ip_NAS] port 59220 EAP-Message = 0x011600061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6200968a5f97c5846fd9a034b Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=154, length=385 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x201f7da6200968a5f97c5846fd9a034b Message-Authenticator = 0x12e4b5407220c5d51627bb2339eb4936 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 15 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x201f7da6200968a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313534 Proxying request 1 to home server [ip_radius_01] port 1812 Sending Access-Request of id 15 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x201f7da6200968a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313534 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=15, length=1095 EAP-Message = <Output omitted> EAP-Message = 0x660f3f196040ba4990067ed0 Message-Authenticator = 0xed9c41c40b319ddd2aab059a06b5fd13 State = 0x201f7da6210868a5f97c5846fd9a034b Proxy-State = 0x313534 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 154 to [ip_NAS] port 59220 EAP-Message =<Output omitted> EAP-Message = 0x660f3f196040ba4990067ed0 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6210868a5f97c5846fd9a034b Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=155, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021700061500 State = 0x201f7da6210868a5f97c5846fd9a034b Message-Authenticator = 0x7ac5a8791fa719ddb3849c4bf1bb168c # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 226 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021700061500 State = 0x201f7da6210868a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313535 Proxying request 2 to home server [ip_radius_01] port 1812 Sending Access-Request of id 226 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021700061500 State = 0x201f7da6210868a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313535 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=226, length=1095 EAP-Message =<Output omitted> EAP-Message = 0x20414231263024060355040b Message-Authenticator = 0xf26d40987bfec390a04a0b08728501a0 State = 0x201f7da6220768a5f97c5846fd9a034b Proxy-State = 0x313535 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 155 to [ip_NAS] port 59220 EAP-Message = <Output omitted> EAP-Message = 0x20414231263024060355040b Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6220768a5f97c5846fd9a034b Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=156, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021800061500 State = 0x201f7da6220768a5f97c5846fd9a034b Message-Authenticator = 0xc0bfe1d6824a5e8511a74512065e197c # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 147 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021800061500 State = 0x201f7da6220768a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313536 Proxying request 3 to home server [ip_radius_01] port 1812 Sending Access-Request of id 147 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021800061500 State = 0x201f7da6220768a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313536 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=147, length=1095 EAP-Message = <Output omitted> EAP-Message = 0x8bcda149294c2ff9d0958cc8 Message-Authenticator = 0x6e142e623da07926c48c5ab0567e72d6 State = 0x201f7da6230668a5f97c5846fd9a034b Proxy-State = 0x313536 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 156 to [ip_NAS] port 59220 EAP-Message = <Output omitted> EAP-Message = 0x8bcda149294c2ff9d0958cc8 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6230668a5f97c5846fd9a034b Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=157, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021900061500 State = 0x201f7da6230668a5f97c5846fd9a034b Message-Authenticator = 0xf45d59fd209482e5c51dafda39d8a5f2 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 82 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021900061500 State = 0x201f7da6230668a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313537 Proxying request 4 to home server [ip_radius_01] port 1812 Sending Access-Request of id 82 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021900061500 State = 0x201f7da6230668a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313537 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=82, length=1095 EAP-Message = <Output omitted> EAP-Message = 0x00b09be08525c2d623e20f96 Message-Authenticator = 0x580de3b56b8e139e4792d3eb7ac8b2bb State = 0x201f7da6240568a5f97c5846fd9a034b Proxy-State = 0x313537 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 157 to [ip_NAS] port 59220 EAP-Message = <Output omitted> Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6240568a5f97c5846fd9a034b Finished request 4. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=158, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021a00061500 State = 0x201f7da6240568a5f97c5846fd9a034b Message-Authenticator = 0x6cd3abde5e854cbb6700dc1119bab908 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 131 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021a00061500 State = 0x201f7da6240568a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313538 Proxying request 5 to home server [ip_radius_01] port 1812 Sending Access-Request of id 131 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021a00061500 State = 0x201f7da6240568a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313538 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=131, length=925 EAP-Message = <Output omitted> Message-Authenticator = 0xcf9c08bd57de523e89986480d3be4bc4 State = 0x201f7da6250468a5f97c5846fd9a034b Proxy-State = 0x313538 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 158 to [ip_NAS] port 59220 EAP-Message = <Output omitted> Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6250468a5f97c5846fd9a034b Finished request 5. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=159, length=321 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x201f7da6250468a5f97c5846fd9a034b Message-Authenticator = 0x7cdd8f3d8cabfcaec6f574624484b2a3 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 111 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x201f7da6250468a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313539 Proxying request 6 to home server [ip_radius_01] port 1812 Sending Access-Request of id 111 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x201f7da6250468a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313539 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=111, length=132 EAP-Message = 0x011c004515800000003b1403010001011603010030723be3902ecf2baa9cd0ef467d641d8c314381b2f009489be0d5160ffb706c71cce9ea38ac5c4adc5ddd040a543beb47 Message-Authenticator = 0x96076645b9d9f2b5b134115053b1dad8 State = 0x201f7da6260368a5f97c5846fd9a034b Proxy-State = 0x313539 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 159 to [ip_NAS] port 59220 EAP-Message = 0x011c004515800000003b1403010001011603010030723be3902ecf2baa9cd0ef467d641d8c314381b2f009489be0d5160ffb706c71cce9ea38ac5c4adc5ddd040a543beb47 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201f7da6260368a5f97c5846fd9a034b Finished request 6. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=160, length=336 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> Message-Authenticator = 0x0c0b11eeeea33d77c9333ebf6680da24 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 76 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313630 Proxying request 7 to home server [ip_radius_01] port 1812 Sending Access-Request of id 76 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313630 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=76, length=158 EAP-Message = <Output omitted> State = 0x201f7da6270268a5f97c5846fd9a034b Proxy-State = 0x313630 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 160 to [ip_NAS] port 59220 EAP-Message = <Output omitted> State = 0x201f7da6270268a5f97c5846fd9a034b Finished request 7. Going to the next request Waking up in 4.6 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 59220, id=161, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021d00061500 State = 0x201f7da6270268a5f97c5846fd9a034b Message-Authenticator = 0x657b8c4a21b355c126e88584b6c32787 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 242 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021d00061500 State = 0x201f7da6270268a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313631 Proxying request 8 to home server [ip_radius_01] port 1812 Sending Access-Request of id 242 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x021d00061500 State = 0x201f7da6270268a5f97c5846fd9a034b Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313631 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host [ip_radius_01] port 1812, id=242, length=174 MS-MPPE-Recv-Key = 0x858103345443f361eb9c205868c096e647df3aa3d7588efd4abf2e16394b170e MS-MPPE-Send-Key = 0xb11578e2cc89ad415d5ef302fd522dbe3fdeaef34dde7f5b28e91d393292d9aa EAP-Message = 0x031d0004 Message-Authenticator = 0x49fb672f0d64cfa77c7005b645b5c859 User-Name = "myuser" Proxy-State = 0x313631 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Found Auth-Type = Accept Auth-Type = Accept, accepting the user # Executing section session from file /etc/freeradius/sites-enabled/default +group session { [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> myuser@mydomain.com ++[radutmp] = ok +} # group session = ok Login OK: [myuser@mydomain.com] (from client myNAS port 0 cli 34-BB-26-C2-1D-60) # Executing section post-auth from file /etc/freeradius/sites-enabled/default +group post-auth { ++[exec] = noop +} # group post-auth = noop Sending Access-Accept of id 161 to [ip_NAS] port 59220 MS-MPPE-Recv-Key = 0x858103345443f361eb9c205868c096e647df3aa3d7588efd4abf2e16394b170e MS-MPPE-Send-Key = 0xb11578e2cc89ad415d5ef302fd522dbe3fdeaef34dde7f5b28e91d393292d9aa EAP-Message = 0x031d0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "myuser" Finished request 8. Going to the next request Waking up in 4.6 seconds. rad_recv: Accounting-Request packet from host [ip_NAS] port 45843, id=162, length=161 Acct-Session-Id = "000000BE-00000058" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" # Executing section preacct from file /etc/freeradius/sites-enabled/default +group preacct { ++[preprocess] = ok [acct_unique] Hashing 'NAS-Port = 0,NAS-Identifier = "24a43cb0fbad",NAS-IP-Address = 172.19.13.15,Acct-Session-Id = "000000BE-00000058",User-Name = "myuser"' [acct_unique] Acct-Unique-Session-ID = "86294e67140c8981". ++[acct_unique] = ok [suffix] No '@' in User-Name = "myuser", looking up realm NULL [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy accounting request to realm "DEFAULT" ++[suffix] = updated ++[files] = noop +} # group preacct = updated # Executing section accounting from file /etc/freeradius/sites-enabled/default +group accounting { [detail] expand: %{Packet-Src-IP-Address} -> [ip_NAS] [detail] expand: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/freeradius/radacct/[ip_NAS]/detail-20150521 [detail] /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/[ip_NAS]/detail-20150521 [detail] expand: %t -> Thu May 21 08:34:04 2015 ++[detail] = ok [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> myuser ++[radutmp] = ok [sql] expand: %{User-Name} -> myuser [sql] sql_set_user escaped user --> 'myuser' [sql] expand: %{Acct-Delay-Time} -> [sql] ... expanding second conditional [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', rlm_sql (sql): Reserving sql socket id: 31 rlm_sql (sql): Released sql socket id: 31 ++[sql] = ok ++[exec] = noop [attr_filter.accounting_response] expand: %{User-Name} -> myuser attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] = updated +} # group accounting = updated WARNING: Empty pre-proxy section. Using default return values. Sending Accounting-Request of id 138 to [ip_radius_01] port 1813 Acct-Session-Id = "000000BE-00000058" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" Proxy-State = 0x313632 Proxying request 9 to home server [ip_radius_01] port 1813 Sending Accounting-Request of id 138 to [ip_radius_01] port 1813 Acct-Session-Id = "000000BE-00000058" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "24-A4-3C-B2-FB-AD:myssid" Calling-Station-Id = "34-BB-26-C2-1D-60" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" Proxy-State = 0x313632 Going to the next request Waking up in 0.9 seconds. rad_recv: Accounting-Response packet from host [ip_radius_01] port 1813, id=138, length=25 Proxy-State = 0x313632 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Accounting-Response of id 162 to [ip_NAS] port 45843 Finished request 9. Cleaning up request 9 ID 162 with timestamp +15 Going to the next request Waking up in 4.4 seconds. Cleaning up request 0 ID 153 with timestamp +15 Waking up in 0.1 seconds. Ready to process requests. ################################################################ # SECOND USER LOGIN ################################################################ rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=109, length=182 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020000130135303832323639407573702e6272 Message-Authenticator = 0xc068d5e019ec753d46a63b3c79ebef97 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 84 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020000130135303832323639407573702e6272 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313039 Proxying request 10 to home server [ip_radius_01] port 1812 Sending Access-Request of id 84 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020000130135303832323639407573702e6272 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313039 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=84, length=69 EAP-Message = 0x010100061520 Message-Authenticator = 0x7af1e1f0bc6312b7a368266f31fb2edb State = 0x8e7884238e7991d76d10c73c6b41fbdf Proxy-State = 0x313039 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 109 to [ip_NAS] port 42468 EAP-Message = 0x010100061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e7884238e7991d76d10c73c6b41fbdf Finished request 10. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=110, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020100060319 State = 0x8e7884238e7991d76d10c73c6b41fbdf Message-Authenticator = 0xa4b25b6748408b25b6fd2ed0764814e0 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 254 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020100060319 State = 0x8e7884238e7991d76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313130 Proxying request 11 to home server [ip_radius_01] port 1812 Sending Access-Request of id 254 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020100060319 State = 0x8e7884238e7991d76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313130 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=254, length=69 EAP-Message = 0x010200061920 Message-Authenticator = 0xabb5045ca37f892bbc384c20a180fb00 State = 0x8e7884238f7a9dd76d10c73c6b41fbdf Proxy-State = 0x313130 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 110 to [ip_NAS] port 42468 EAP-Message = 0x010200061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e7884238f7a9dd76d10c73c6b41fbdf Finished request 11. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=111, length=288 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e7884238f7a9dd76d10c73c6b41fbdf Message-Authenticator = 0x1eeb00247d5e524256419593a50c4cea # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 12 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e7884238f7a9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313131 Proxying request 12 to home server [ip_radius_01] port 1812 Sending Access-Request of id 12 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e7884238f7a9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313131 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=12, length=1095 EAP-Message = <Output omitted> EAP-Message = 0x660f3f196040ba4990067ed0 Message-Authenticator = 0x7dbcca2afa4b0bed08c95ebd9cf40c5c State = 0x8e7884238c7b9dd76d10c73c6b41fbdf Proxy-State = 0x313131 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 111 to [ip_NAS] port 42468 EAP-Message = <Output omitted> EAP-Message = 0x660f3f196040ba4990067ed0 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e7884238c7b9dd76d10c73c6b41fbdf Finished request 12. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=112, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020300061900 State = 0x8e7884238c7b9dd76d10c73c6b41fbdf Message-Authenticator = 0x750761102d17ac43c6c1d651b1caa667 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 92 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020300061900 State = 0x8e7884238c7b9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313132 Proxying request 13 to home server [ip_radius_01] port 1812 Sending Access-Request of id 92 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020300061900 State = 0x8e7884238c7b9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313132 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=92, length=1091 EAP-Message = <Output omitted> EAP-Message = 0x263024060355040b Message-Authenticator = 0x6c17b91c2ae244541083eea89639b571 State = 0x8e7884238d7c9dd76d10c73c6b41fbdf Proxy-State = 0x313132 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 112 to [ip_NAS] port 42468 EAP-Message = <Output omitted> EAP-Message = 0x263024060355040b Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e7884238d7c9dd76d10c73c6b41fbdf Finished request 13. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=113, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020400061900 State = 0x8e7884238d7c9dd76d10c73c6b41fbdf Message-Authenticator = 0xe0d4be98195747e437329d28ebfdded2 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 10 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020400061900 State = 0x8e7884238d7c9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313133 Proxying request 14 to home server [ip_radius_01] port 1812 Sending Access-Request of id 10 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020400061900 State = 0x8e7884238d7c9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313133 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=10, length=1091 EAP-Message = <Output omitted> EAP-Message = 0x294c2ff9d0958cc8 Message-Authenticator = 0x2995a0d870f9ad142791481b1e7b6eb3 State = 0x8e7884238a7d9dd76d10c73c6b41fbdf Proxy-State = 0x313133 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 113 to [ip_NAS] port 42468 EAP-Message = <Output omitted> EAP-Message = 0x294c2ff9d0958cc8 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e7884238a7d9dd76d10c73c6b41fbdf Finished request 14. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=114, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020500061900 State = 0x8e7884238a7d9dd76d10c73c6b41fbdf Message-Authenticator = 0x454bc2db4392419a09b57ad3bcf9e412 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 34 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020500061900 State = 0x8e7884238a7d9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313134 Proxying request 15 to home server [ip_radius_01] port 1812 Sending Access-Request of id 34 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020500061900 State = 0x8e7884238a7d9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313134 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=34, length=1091 EAP-Message = <Output omitted> EAP-Message = 0x8525c2d623e20f96 Message-Authenticator = 0x7eeb6ae0c47ee89f467895b459b5cec1 State = 0x8e7884238b7e9dd76d10c73c6b41fbdf Proxy-State = 0x313134 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 114 to [ip_NAS] port 42468 EAP-Message = <Output omitted> EAP-Message = 0x8525c2d623e20f96 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e7884238b7e9dd76d10c73c6b41fbdf Finished request 15. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=115, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020600061900 State = 0x8e7884238b7e9dd76d10c73c6b41fbdf Message-Authenticator = 0x66a36e121110d158b886d3e196d03f80 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 113 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020600061900 State = 0x8e7884238b7e9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313135 Proxying request 16 to home server [ip_radius_01] port 1812 Sending Access-Request of id 113 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020600061900 State = 0x8e7884238b7e9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313135 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=113, length=921 EAP-Message = <Output omitted> Message-Authenticator = 0xf0158737867af3def5765d279a8b2159 State = 0x8e788423887f9dd76d10c73c6b41fbdf Proxy-State = 0x313135 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 115 to [ip_NAS] port 42468 EAP-Message = <Output omitted> Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e788423887f9dd76d10c73c6b41fbdf Finished request 16. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=116, length=325 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> Message-Authenticator = 0xd80a3ce16def6146568b87745a1566d3 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 147 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e788423887f9dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313136 Proxying request 17 to home server [ip_radius_01] port 1812 Sending Access-Request of id 147 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313136 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=147, length=128 EAP-Message = 0x0108004119001403010001011603010030093cc20bda969a661ce67a08272c39e474f3088bd2f10450b83ab561f40b443779c2dbf54334aab49cb8510086271fce Message-Authenticator = 0x61b05e4260bcb12ebd2735ad37921384 State = 0x8e78842389709dd76d10c73c6b41fbdf Proxy-State = 0x313136 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 116 to [ip_NAS] port 42468 EAP-Message = 0x0108004119001403010001011603010030093cc20bda969a661ce67a08272c39e474f3088bd2f10450b83ab561f40b443779c2dbf54334aab49cb8510086271fce Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e78842389709dd76d10c73c6b41fbdf Finished request 17. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=117, length=187 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020800061900 State = 0x8e78842389709dd76d10c73c6b41fbdf Message-Authenticator = 0x5e5ca34f27409565877dcd44dc1316c7 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 192 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020800061900 State = 0x8e78842389709dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313137 Proxying request 18 to home server [ip_radius_01] port 1812 Sending Access-Request of id 192 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020800061900 State = 0x8e78842389709dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313137 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=192, length=106 EAP-Message = 0x0109002b190017030100207b4dc4fa412872e8d7b2076c8c55fbf6a58938937f247958e67e8b8c484b5775 Message-Authenticator = 0x709fa275a06cb6742d5c938ac490db1e State = 0x8e78842386719dd76d10c73c6b41fbdf Proxy-State = 0x313137 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 117 to [ip_NAS] port 42468 EAP-Message = 0x0109002b190017030100207b4dc4fa412872e8d7b2076c8c55fbf6a58938937f247958e67e8b8c484b5775 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e78842386719dd76d10c73c6b41fbdf Finished request 18. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=118, length=240 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x0209003b19001703010030aad6147f17ce8d8b41e02553217a281e29bb6c02594c0e44fd1eb25f7d67f2a2ac1884246a05606b86c16053bff9653e State = 0x8e78842386719dd76d10c73c6b41fbdf Message-Authenticator = 0x203c9c6460539af58e6b0bfd12803c96 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 27 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x0209003b19001703010030aad6147f17ce8d8b41e02553217a281e29bb6c02594c0e44fd1eb25f7d67f2a2ac1884246a05606b86c16053bff9653e State = 0x8e78842386719dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313138 Proxying request 19 to home server [ip_radius_01] port 1812 Sending Access-Request of id 27 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x0209003b19001703010030aad6147f17ce8d8b41e02553217a281e29bb6c02594c0e44fd1eb25f7d67f2a2ac1884246a05606b86c16053bff9653e State = 0x8e78842386719dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313138 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=27, length=138 EAP-Message = 0x010a004b190017030100401827fc0012571fdede808d51fdc59e5c1efcf1ab909027d316253b2ffb47708821cb2d30ff54870a002b79bf00f8ccc2dc060742f64fc2c129dd3e75a0632e6c Message-Authenticator = 0x0f4fbabd386e801d1a75e9fd4282fea2 State = 0x8e78842387729dd76d10c73c6b41fbdf Proxy-State = 0x313138 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 118 to [ip_NAS] port 42468 EAP-Message = 0x010a004b190017030100401827fc0012571fdede808d51fdc59e5c1efcf1ab909027d316253b2ffb47708821cb2d30ff54870a002b79bf00f8ccc2dc060742f64fc2c129dd3e75a0632e6c Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e78842387729dd76d10c73c6b41fbdf Finished request 19. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=119, length=288 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e78842387729dd76d10c73c6b41fbdf Message-Authenticator = 0xae9db27cb88e4993d09a9d66c7e1bae0 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 129 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e78842387729dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313139 Proxying request 20 to home server [ip_radius_01] port 1812 Sending Access-Request of id 129 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = <Output omitted> State = 0x8e78842387729dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313139 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=129, length=154 EAP-Message = 0x010b005b1900170301005058ce7dbe42b7612bcaf08ead7cf1fc10827aa41d41affc784ee5f2094c1c56bf129a542eaf834a5a3f3030b902d82e89b07ac5a0e0e3186c0e43089837f2a1ca7864cf00c093c45b05254813f49276a6 Message-Authenticator = 0x360b6e962949423163acb668c7c48b93 State = 0x8e78842384739dd76d10c73c6b41fbdf Proxy-State = 0x313139 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 119 to [ip_NAS] port 42468 EAP-Message = 0x010b005b1900170301005058ce7dbe42b7612bcaf08ead7cf1fc10827aa41d41affc784ee5f2094c1c56bf129a542eaf834a5a3f3030b902d82e89b07ac5a0e0e3186c0e43089837f2a1ca7864cf00c093c45b05254813f49276a6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e78842384739dd76d10c73c6b41fbdf Finished request 20. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=120, length=224 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020b002b1900170301002045b9268bfdbb41d1bd07f8e8c2484a9224628fd7e2e30e024b1a92b42b5fa408 State = 0x8e78842384739dd76d10c73c6b41fbdf Message-Authenticator = 0x71ffe364436eae8d5fbf65c5b2b980fe # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 185 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020b002b1900170301002045b9268bfdbb41d1bd07f8e8c2484a9224628fd7e2e30e024b1a92b42b5fa408 State = 0x8e78842384739dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313230 Proxying request 21 to home server [ip_radius_01] port 1812 Sending Access-Request of id 185 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020b002b1900170301002045b9268bfdbb41d1bd07f8e8c2484a9224628fd7e2e30e024b1a92b42b5fa408 State = 0x8e78842384739dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313230 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host [ip_radius_01] port 1812, id=185, length=106 EAP-Message = 0x010c002b190017030100205c7570e4f5e760f02d66144b48a20aae4501eafe10488259e453a8995bf487df Message-Authenticator = 0x6be6f449fe7e6889462711fd6ef60dbe State = 0x8e78842385749dd76d10c73c6b41fbdf Proxy-State = 0x313230 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Access-Challenge of id 120 to [ip_NAS] port 42468 EAP-Message = 0x010c002b190017030100205c7570e4f5e760f02d66144b48a20aae4501eafe10488259e453a8995bf487df Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8e78842385749dd76d10c73c6b41fbdf Finished request 21. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host [ip_NAS] port 42468, id=121, length=224 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020c002b190017030100203830445ef683ef7217a1c9e4c859d535b698222b8eb261b0fbfa642c2175472d State = 0x8e78842385749dd76d10c73c6b41fbdf Message-Authenticator = 0x0169515c639b38bcc8c220c8577d6a26 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] Looking up realm "mydomain.com" for User-Name = " myuser@mydomain.com" [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy authentication request to realm "DEFAULT" ++[suffix] = updated [eap] Request is supposed to be proxied to Realm DEFAULT. Not doing EAP. ++[eap] = noop [files] users: Matched entry DEFAULT at line 204 ++[files] = ok ++[expiration] = noop ++[logintime] = noop ++[pap] = noop +} # group authorize = updated WARNING: Empty pre-proxy section. Using default return values. Sending Access-Request of id 215 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020c002b190017030100203830445ef683ef7217a1c9e4c859d535b698222b8eb261b0fbfa642c2175472d State = 0x8e78842385749dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313231 Proxying request 22 to home server [ip_radius_01] port 1812 Sending Access-Request of id 215 to [ip_radius_01] port 1812 User-Name = "myuser@mydomain.com" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" EAP-Message = 0x020c002b190017030100203830445ef683ef7217a1c9e4c859d535b698222b8eb261b0fbfa642c2175472d State = 0x8e78842385749dd76d10c73c6b41fbdf Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x313231 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host [ip_radius_01] port 1812, id=215, length=174 User-Name = "myuser" MS-MPPE-Recv-Key = 0x1f1eb2ed6cb44f07013077cd726be220eba04aabfb7ebdf04207aa92202f9284 MS-MPPE-Send-Key = 0x29cea404f71ee5c5227cd26453aaa34c546817ab9e8a623f00e378d24dfa91a4 EAP-Message = 0x030c0004 Message-Authenticator = 0xe2a0cd8c3df8f404418e9addbfe08259 Proxy-State = 0x313231 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Found Auth-Type = Accept Auth-Type = Accept, accepting the user # Executing section session from file /etc/freeradius/sites-enabled/default +group session { [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> myuser@mydomain.com ++[radutmp] = ok +} # group session = ok Login OK: [myuser@mydomain.com] (from client myNAS port 0 cli 68-94-23-92-31-83) # Executing section post-auth from file /etc/freeradius/sites-enabled/default +group post-auth { ++[exec] = noop +} # group post-auth = noop Sending Access-Accept of id 121 to [ip_NAS] port 42468 User-Name = "myuser" MS-MPPE-Recv-Key = 0x1f1eb2ed6cb44f07013077cd726be220eba04aabfb7ebdf04207aa92202f9284 MS-MPPE-Send-Key = 0x29cea404f71ee5c5227cd26453aaa34c546817ab9e8a623f00e378d24dfa91a4 EAP-Message = 0x030c0004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 22. Going to the next request Waking up in 4.7 seconds. rad_recv: Accounting-Request packet from host [ip_NAS] port 60419, id=122, length=161 Acct-Session-Id = "000000BD-00000009" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" # Executing section preacct from file /etc/freeradius/sites-enabled/default +group preacct { ++[preprocess] = ok [acct_unique] Hashing 'NAS-Port = 0,NAS-Identifier = "24a43cb0fbad",NAS-IP-Address = 172.19.13.15,Acct-Session-Id = "000000BD-00000009",User-Name = "myuser"' [acct_unique] Acct-Unique-Session-ID = "e40783ec483bfa72". ++[acct_unique] = ok [suffix] No '@' in User-Name = "myuser", looking up realm NULL [suffix] Found realm "DEFAULT" [suffix] Adding Realm = "DEFAULT" [suffix] Proxying request from user myuser to realm DEFAULT [suffix] Preparing to proxy accounting request to realm "DEFAULT" ++[suffix] = updated ++[files] = noop +} # group preacct = updated # Executing section accounting from file /etc/freeradius/sites-enabled/default +group accounting { [detail] expand: %{Packet-Src-IP-Address} -> [ip_NAS] [detail] expand: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/freeradius/radacct/[ip_NAS]/detail-20150521 [detail] /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/[ip_NAS]/detail-20150521 [detail] expand: %t -> Thu May 21 08:35:28 2015 ++[detail] = ok [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp [radutmp] expand: %{User-Name} -> myuser ++[radutmp] = ok [sql] expand: %{User-Name} -> myuser [sql] sql_set_user escaped user --> 'myuser' [sql] expand: %{Acct-Delay-Time} -> [sql] ... expanding second conditional [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', rlm_sql (sql): Reserving sql socket id: 30 rlm_sql (sql): Released sql socket id: 30 ++[sql] = ok ++[exec] = noop [attr_filter.accounting_response] expand: %{User-Name} -> myuser attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] = updated +} # group accounting = updated WARNING: Empty pre-proxy section. Using default return values. Sending Accounting-Request of id 13 to [ip_radius_01] port 1813 Acct-Session-Id = "000000BD-00000009" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" Proxy-State = 0x313232 Proxying request 23 to home server [ip_radius_01] port 1813 Sending Accounting-Request of id 13 to [ip_radius_01] port 1813 Acct-Session-Id = "000000BD-00000009" Acct-Status-Type = Start Acct-Authentic = RADIUS User-Name = "myuser" NAS-IP-Address = 172.19.13.15 NAS-Identifier = "24a43cb0fbad" NAS-Port = 0 Called-Station-Id = "2A-A4-3C-B1-FB-AD:myssid" Calling-Station-Id = "68-94-23-92-31-83" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11b" Proxy-State = 0x313232 Going to the next request Waking up in 0.9 seconds. rad_recv: Accounting-Response packet from host [ip_radius_01] port 1813, id=13, length=25 Proxy-State = 0x313232 # Executing section post-proxy from file /etc/freeradius/sites-enabled/default +group post-proxy { [eap] No pre-existing handler found ++[eap] = noop +} # group post-proxy = noop Sending Accounting-Response of id 122 to [ip_NAS] port 60419 Finished request 23. Cleaning up request 23 ID 122 with timestamp +99 Going to the next request Waking up in 4.6 seconds. Cleaning up request 10 ID 109 with timestamp +99 Ready to process requests. #################################### End of degub log Thank you for your help! Best Regards, Renato L. Sousa
On May 21, 2015, at 10:26 AM, Renato Sousa <rensousa@gmail.com> wrote:
Below debug connections. Some lines were omitted from the debug log so that the message is not too large (more than 2500 lines)
You're probably setting Simultaneous-Use in the inner tunnel, and not in the outer tunnel. You can always set it in the post-proxy section, too: post-proxy { ... update control { Simultaneous-Use := 1 } ... } The way the code is structured is that the Simultaneous-Use checks are done after the user is authenticated. ANY kind of authentication, including proxying. Alan DeKok.
Hi Alan,
You're probably setting Simultaneous-Use in the inner tunnel, and not in the outer tunnel.
You can always set it in the post-proxy section, too:
post-proxy { ... update control { Simultaneous-Use := 1 } ... }
The way the code is structured is that the Simultaneous-Use checks are done after the user is authenticated. ANY kind of authentication, including proxying.
I configured a post-proxy section in the default file and tested it, but it worked. Then I configured the inner-tunnel file and did not work either. Watching the debug log, I noticed the excerpt below: # Executing section post-proxy from file /etc/freeradius/sites-enabled/default + group post-proxy { ++ control update { ++} # Control update = noop [eap] In pre-existing handler found ++ [eap] = noop +} # Group post-proxy = noop In this passage should not be something about the value of Simultaneous-Use? I'm reading the documentation because I believe that I lack expertise on the freeradius. Best regards, Renato L. Sousa
On May 21, 2015, at 4:25 PM, Renato Sousa <rensousa@gmail.com> wrote:
I configured a post-proxy section in the default file and tested it, but it worked.
Do you mean it *didn't* work?
Then I configured the inner-tunnel file and did not work either. Watching the debug log, I noticed the excerpt below:
# Executing section post-proxy from file /etc/freeradius/sites-enabled/default + group post-proxy { ++ control update { ++} # Control update = noop [eap] In pre-existing handler found ++ [eap] = noop +} # Group post-proxy = noop
In this passage should not be something about the value of Simultaneous-Use?
No, that's fine.
I'm reading the documentation because I believe that I lack expertise on the freeradius.
That's a good plan. But Simultaneous-Use should work. Plenty of people use it. Alan DeKok.
Hi Alan,
Do you mean it *didn't* work?
Yes, excuse me !!! It did not work.
But Simultaneous-Use should work. Plenty of people use it.
Yes, I saw many cases of use of Simultaneous-Use and also do not understand why does not work. I believe to be some basic configuration that did not properly. I enabled the option sqltrace and I'm looking at the file. The correct would display the SQL sentence in simul_count_query when a user logs? There is no SELECT statement in sqltrace.sql file. Best Regards, Renato L. Sousa
On May 22, 2015, at 2:58 PM, Renato Sousa <rensousa@gmail.com> wrote:
Yes, I saw many cases of use of Simultaneous-Use and also do not understand why does not work. I believe to be some basic configuration that did not properly.
Try it without proxying, and without EAP.
I enabled the option sqltrace and I'm looking at the file. The correct would display the SQL sentence in simul_count_query when a user logs? There is no SELECT statement in sqltrace.sql file.
If Simultaneous-Use works, you'lll see it in the debug output. The SELECT will be printed there before it goes to the sqltrace file. Alan DeKok.
Hi Alan, Try it without proxying, and without EAP.
Great idea! Created another freeradius without proxy to test authentication on users file as line below: myuser Cleartext-Password: = "test123" Simultaneous-Use: = 1 User authentication works, but also allows more than one simultaneous session. Analyzing the debug log, you can see information about the Simultaneous-Use item: First login (device: notebook) [Peap] Got tunneled reply code 11 Simultaneous-Use: = 1 EAP-Message = 0x014300201a0143001b103aa68684db737872b04dd470becf8bd56d7975736572 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x182e1712186d0dd5e3788587d7861272 ... [Peap] Got tunneled reply code 2 Simultaneous-Use: = 1 MS-MPPE-Encryption-Policy = 0x00000001 MS-MPPE-Encryption-Types = 0x00000006 MS-MPPE-Send-Key = 0x6a84396172fbbbd79d0477f5d75517e1 MS-MPPE-Recv-Key = 0x0f9c3511b4b2862fa73f6241671b319b EAP-Message = 0x03440004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "myuser" Second login (device: mobile android) [TTLS] Got tunneled reply code 2 Simultaneous-Use: = 1 The accountig information is being successfully written to the mysql. The acctsessionid field displays two distinct connections to the same user (myuser). The innertunnel and default files are configured as follows: session { sql } Any idea? Graciously Renato L. Sousa
On Jun 15, 2015, at 3:14 PM, Renato Sousa <rensousa@gmail.com> wrote:
Created another freeradius without proxy to test authentication on users file as line below:
myuser Cleartext-Password: = "test123" Simultaneous-Use: = 1
That won't work. The Simultaneous-Use attribute should go onto the first line, with the Cleartext-Password.
User authentication works, but also allows more than one simultaneous session. Analyzing the debug log, you can see information about the Simultaneous-Use item:
First login (device: notebook) [Peap] Got tunneled reply code 11 Simultaneous-Use: = 1 EAP-Message = 0x014300201a0143001b103aa68684db737872b04dd470becf8bd56d7975736572 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x182e1712186d0dd5e3788587d7861272 ... [Peap] Got tunneled reply code 2 Simultaneous-Use: = 1
It's not a reply attribute.
Second login (device: mobile android) [TTLS] Got tunneled reply code 2 Simultaneous-Use: = 1
It's not a reply attribute.
The accountig information is being successfully written to the mysql. The acctsessionid field displays two distinct connections to the same user (myuser). The innertunnel and default files are configured as follows:
session { sql }
It will check Simultaneous-Use in the inner-tunnel, but it may not have access to all of the session data. And you've got to ensure that the User-Name in the Accounting-Request packet is the same as for the Access-Request. i.e. not "anonymous". Alan DeKok.
Hi Alan,
That won't work. The Simultaneous-Use attribute should go onto the first line, with the Cleartext-Password.
OK! I changed the user file to: myuser Cleartext-Password: = "test123" Simultaneous-Use: = 1 Now the freeradius started to refuse the second connection myuser User :) # Executing section session from file /etc/freeradius/sites-enabled/inner-tunnel +- entering group session {...} [sql] expand: %{User-Name} -> myuser [sql] sql_set_user escaped user --> 'myuser' [sql] expand: SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL -> SELECT COUNT(*) FROM radacct WHERE username = 'myuser' AND acctstoptime IS NULL rlm_sql (sql): Reserving sql socket id: 4 [sql] expand: SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL -> SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = 'myuser' AND acctstoptime IS NULL checkrad: Unknown NAS 172.19.13.15, not checking rlm_sql (sql): Released sql socket id: 4 ++[sql] returns ok } # server inner-tunnel [ttls] Got tunneled reply code 3 Reply-Message := "\r\nYou are already logged in - access denied\r\n\n" [ttls] Got tunneled Access-Reject [eap] Handler failed in EAP/ttls [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. How to work around authentication forwarding to another freeradius? Graciously Renato L. Sousa
Hi Alan,
It will check Simultaneous-Use in the inner-tunnel, but it may not have access to all of the session data.
And you've got to ensure that the User-Name in the Accounting-Request packet is the same as for the Access-Request. i.e. not "anonymous".
That's exactly the problem. I decided to upgrade to the 3.0.8 version freeradius. Now I can clearly see the values of usernames. ################ Access-Request (88) Received Access-Request Id 35 from [NAS_IP]:23710 to [FR_IP]:1812 length 181 *(88) User-Name = 'myuser@mydomain'* (88) NAS-IP-Address = 172.19.13.15 (88) NAS-Identifier = '24a43cb0fbad' (88) NAS-Port = 0 (88) Called-Station-Id = '2A-A4-3C-B2-FB-AD:mySSID' (88) Calling-Station-Id = '34-BB-26-C2-1D-60' ################ Proxying Access-Request (88) Proxying request to home server [proxy_IP] port 1812 timeout 20.000000 (88) Sent Access-Request Id 92 from 0.0.0.0:46389 to [proxy_IP]:1812 length 191 *(88) User-Name = 'myuser@mydomain'* (88) NAS-IP-Address = 172.19.13.15 (88) NAS-Identifier = '24a43cb0fbad' (88) NAS-Port = 0 (88) Called-Station-Id = '2A-A4-3C-B2-FB-AD:mySSID' (88) Calling-Station-Id = '34-BB-26-C2-1D-60' ################ Access-Accept from proxy (100) Received Access-Accept Id 231 from [proxy_IP]:1812 to [FR_IP]:46389 length 173 *(100) User-Name = 'myuser'* ################ Accounting-Request (101) Received Accounting-Request Id 48 from [NAS_IP]:41124 to [FR_IP]:1813 length 160 (101) Acct-Session-Id = '00001A59-00000037' (101) Acct-Status-Type = Start (101) Acct-Authentic = RADIUS *(101) User-Name = 'myuser'* (101) NAS-IP-Address = 172.19.13.15 (101) NAS-Identifier = '24a43cb0fbad' (101) NAS-Port = 0 (101) Called-Station-Id = '2A-A4-3C-B2-FB-AD:mySSID' How to ensure the same username in the Accounting-Request and Access-Request? How to configure proxy response in format user@domain? Best Regards, Renato
On Jul 13, 2015, at 4:48 PM, Renato Sousa <rensousa@gmail.com> wrote:
That's exactly the problem. I decided to upgrade to the 3.0.8 version freeradius. Now I can clearly see the values of usernames.
################ Access-Accept from proxy (100) Received Access-Accept Id 231 from [proxy_IP]:1812 to [FR_IP]:46389 length 173 *(100) User-Name = 'mouser'*
So... that's the problem.
How to ensure the same username in the Accounting-Request and Access-Request?
In post-auth, do: update reply { User-Name := &User-Name } Which should fix it. Alan DeKok.
participants (2)
-
Alan DeKok -
Renato Sousa