postproxy breaks eap authentication
Hi, I have 2 freeradius server: 1 as proxy server, 1 as authentication server. Everything is working fine (Auth. for WPA2, MSCHAPv2 ) until I implement the postproxy function: Then the authentication process did not finished. Putting the vlanid etc into radreply on the authentication radius, everything is working also. Is there something wrong in my config? Version: freeradius/lucid uptodate 2.1.8+dfsg-1ubuntu1 /etc/freeradius/sites-enabled/default: .... post-proxy { post_proxy_log #attr_rewrite attr_filter.post-proxy eap # Post-Proxy-Type Fail { # detail # } /etc/freeradius/attrs: tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802 Regards hans -- Hans Bornemann IT & Medien Centrum - TU Dortmund Tel. 0049 231 7552132
On 17/11/10 12:31, hans.bornemann@tu-dortmund.de wrote:
Hi,
I have 2 freeradius server: 1 as proxy server, 1 as authentication server. Everything is working fine (Auth. for WPA2, MSCHAPv2 ) until I implement the postproxy function:
Post the debugging output, as advised frequently on this list: radiusd -X | tee log
post-proxy {
post_proxy_log
#attr_rewrite
attr_filter.post-proxy
You're probably filtering the EAP-Message and other required attributes out
/etc/freeradius/attrs:
tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes
DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802
This filter is insufficient. Please study the examples - you need at least: Reply-Message =* ANY, Proxy-State =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, MS-CHAP-MPPE-Keys =* ANY, State =* ANY ...to be sure of EAP working.
Hi, the debug output: the differences begin at line 82. Thanks hans 1. without postproxy ############without post-proxy ################### rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=75, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0202001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xd5c382277710afa8317da27237ea09fa +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 137 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0202001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3735 Proxying request 0 to home server 129.217.131.42 port 1812 Sending Access-Request of id 137 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0202001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3735 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=137, length=68 EAP-Message = 0x010300061920 Message-Authenticator = 0x14967f75b5c45d7d7dde72b19e9955ab State = 0x4be46e334be77713b03b4dc635d63d43 Proxy-State = 0x3735 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 75 to 192.168.10.10 port 32768 EAP-Message = 0x010300061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334be77713b03b4dc635d63d43 Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=76, length=292 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203005719800000004d16030100480100004403014cdcfe2aa854ea70bfde8d5ce18b3add883979df06a50f0fb82351a592c9265b00001600040005000a0009006400620003000600130012006301000005ff01000100 State = 0x4be46e334be77713b03b4dc635d63d43 Message-Authenticator = 0x7b3dcbe75097797444b75fcbfa2333cb +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 233 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203005719800000004d16030100480100004403014cdcfe2aa854ea70bfde8d5ce18b3add883979df06a50f0fb82351a592c9265b00001600040005000a0009006400620003000600130012006301000005ff01000100 State = 0x4be46e334be77713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3736 Proxying request 1 to home server 129.217.131.42 port 1812 Sending Access-Request of id 233 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203005719800000004d16030100480100004403014cdcfe2aa854ea70bfde8d5ce18b3add883979df06a50f0fb82351a592c9265b00001600040005000a0009006400620003000600130012006301000005ff01000100 State = 0x4be46e334be77713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3736 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=233, length=1094 EAP-Message = 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 EAP-Message = 0x2d646f72746d756e642e6465301e170d3038303431353132323230385a170d3133303431343132323230385a30818f310b3009060355040613024445311e301c060355040a1315556e6976657273697461657420446f72746d756e64310d300b060355040b130449544d433111300f06035504071308446f72746d756e64311c301a060355040813134e6f7264726865696e2d5765737466616c656e3120301e06035504031317756e696d61696c2e756e692d646f72746d756e642e646530820122300d06092a864886f70d01010105000382010f003082010a0282010100ca0e7f76442ccacd39a38e8e62f598860024e7fb2c5a7618ceb7d6f7b3cf EAP-Message = 0x1d11038eab5dc233a604fd12e605dd7cf198b0b50689dbb55d2d671232dc80268570cafe408b54538ad80032969c2f1d4b0e58866fd8fd12abaa09ce08f2abe3aa25eb9291ab318d015b70eb3baf9f7fe9c6b3b3817a2a5983e1d2b3531916b873b29b4027076473956b6b3bc9e1c52577ef22fd619a3e307d3bd56b5a6fda3a5c542f5c11e3ad90d1171e3e3d2b5e4bc76a653c5bcc636efc1dddd963f45bc18b2b75bbea414ba62081d857f39e1d0577246bb21918f2b8e3c5207d9a756c977c5d7caa55fe5576d79dace14af1ea82808cdc0d8412a78ca585f8d4357b989926dd0203010001a38201b5308201b130090603551d1304023000300b06 EAP-Message = 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 EAP-Message = 0x63726c2f636163726c2e6372 Message-Authenticator = 0xdabd25d0ae764250c11dfd38aaaa5d62 State = 0x4be46e334ae07713b03b4dc635d63d43 Proxy-State = 0x3736 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 76 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x63726c2f636163726c2e6372 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334ae07713b03b4dc635d63d43 Finished request 1. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=77, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020400061900 State = 0x4be46e334ae07713b03b4dc635d63d43 Message-Authenticator = 0x4b29e92a48e8446c3efd159ef01ba601 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 156 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020400061900 State = 0x4be46e334ae07713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3737 Proxying request 2 to home server 129.217.131.42 port 1812 Sending Access-Request of id 156 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020400061900 State = 0x4be46e334ae07713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3737 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=156, length=1090 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x65696e3110300e060355040b130744464e2d504b49312430220603550403131b44464e2d56657265696e2050434120476c6f62616c202d20473031301e170d3037303133303130313935345a170d3139303132393030303030305a308195310b3009060355040613024445311e301c060355040a1315556e6976657273697461657420446f72746d756e64311f301d060355040b1316486f6368736368756c72656368656e7a656e7472756d311e301c06035504031315556e6920446f72746d756e64204341202d204730313125302306092a864886f70d0109011616636140706b692e756e692d646f72746d756e642e646530820122300d06092a86 EAP-Message = 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 EAP-Message = 0x95861ee4d214a9d9 Message-Authenticator = 0x4bab5b526d2fb801c5e57a6e19dc0233 State = 0x4be46e3349e17713b03b4dc635d63d43 Proxy-State = 0x3737 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 77 to 192.168.10.10 port 32768 EAP-Message = 0x010503fc19406c30819606082b06010505070101048189308186304106082b060105050730028635687474703a2f2f636470312e7063612e64666e2e64652f756e69646f2d63612f7075622f6361636572742f6361636572742e637274304106082b060105050730028635687474703a2f2f636470322e7063612e64666e2e64652f756e69646f2d63612f7075622f6361636572742f6361636572742e637274300d06092a864886f70d010105050003820101004fa47802d8026282a4969c5879abbfcf03641b98b7e5b499e8715a042fc75d5b1d9632cb42dc65c5ff4c5c4b8b58944a63441af656404539afc4c367e405b16e98673f518d4f671122 EAP-Message = 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 EAP-Message = 0x65696e3110300e060355040b130744464e2d504b49312430220603550403131b44464e2d56657265696e2050434120476c6f62616c202d20473031301e170d3037303133303130313935345a170d3139303132393030303030305a308195310b3009060355040613024445311e301c060355040a1315556e6976657273697461657420446f72746d756e64311f301d060355040b1316486f6368736368756c72656368656e7a656e7472756d311e301c06035504031315556e6920446f72746d756e64204341202d204730313125302306092a864886f70d0109011616636140706b692e756e692d646f72746d756e642e646530820122300d06092a86 EAP-Message = 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 EAP-Message = 0x95861ee4d214a9d9 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3349e17713b03b4dc635d63d43 Finished request 2. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=78, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020500061900 State = 0x4be46e3349e17713b03b4dc635d63d43 Message-Authenticator = 0x5138ebc4d5ceb7d44788f01d5df84cd8 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 16 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020500061900 State = 0x4be46e3349e17713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3738 Proxying request 3 to home server 129.217.131.42 port 1812 Sending Access-Request of id 16 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020500061900 State = 0x4be46e3349e17713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3738 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=16, length=1090 EAP-Message = 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 EAP-Message = 0x703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f63726c2f636163726c2e63726c3081a206082b06010505070101048195308192304706082b06010505073002863b687474703a2f2f636470312e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274304706082b06010505073002863b687474703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274300d06092a864886f70d0101050500038201010042ea392d1744cdbc8421de52f6e572b2 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x616c202d20473031 Message-Authenticator = 0x768b626c6eb949cb0f30c94b4fbc73d5 State = 0x4be46e3348e27713b03b4dc635d63d43 Proxy-State = 0x3738 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 78 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 0x703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f63726c2f636163726c2e63726c3081a206082b06010505070101048195308192304706082b06010505073002863b687474703a2f2f636470312e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274304706082b06010505073002863b687474703a2f2f636470322e7063612e64666e2e64652f676c6f62616c2d726f6f742d63612f7075622f6361636572742f6361636572742e637274300d06092a864886f70d0101050500038201010042ea392d1744cdbc8421de52f6e572b2 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x616c202d20473031 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3348e27713b03b4dc635d63d43 Finished request 3. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=79, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020600061900 State = 0x4be46e3348e27713b03b4dc635d63d43 Message-Authenticator = 0x4f0971b8b8d2a7964a598511defc6c65 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 101 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020600061900 State = 0x4be46e3348e27713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3739 Proxying request 4 to home server 129.217.131.42 port 1812 Sending Access-Request of id 101 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020600061900 State = 0x4be46e3348e27713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3739 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=101, length=1090 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x54656c656b6f6d20 Message-Authenticator = 0x5aaa90da71bf3a69fda02e737069c522 State = 0x4be46e334fe37713b03b4dc635d63d43 Proxy-State = 0x3739 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 79 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x54656c656b6f6d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334fe37713b03b4dc635d63d43 Finished request 4. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=80, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020700061900 State = 0x4be46e334fe37713b03b4dc635d63d43 Message-Authenticator = 0xf867011aac610e0125c71e1023526847 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 176 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020700061900 State = 0x4be46e334fe37713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3830 Proxying request 5 to home server 129.217.131.42 port 1812 Sending Access-Request of id 176 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020700061900 State = 0x4be46e334fe37713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3830 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=176, length=791 EAP-Message = 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 EAP-Message = 0xaab893b4cd9eeba7e86a2d5234db3aef5c7551dadbf331f9ee719832c45415440cf99b55edaddf1808a0a3868a49ee53058f194cd5de58799bd26a1c42abc5d5a7cf680f96e4e161987661c8917cd63e00e2915087e19d0ae6ad97d21dc63a7dcbbcda0334d58e5b01f56a07b716b66e4a7f0203010001a3423040301d0603551d0e0416041431c3791bbaf553d717e0897a2d176c0ab32b9d33300f0603551d13040830060101ff020105300e0603551d0f0101ff040403020106300d06092a864886f70d01010505000382010100946459ad3964e729eb13fe5ac38b1357c80424f07477c060e367fbe989a683bf96827c6ed4c33def9e806ebb29b4 EAP-Message = 0x987ab13b54eb3917477e1a8e0bfc1f31593104b2ce17f32cc7623655e222d88955b49848aa64fad61c36d844785a5a233a5797f57a304fae9f6a4c4b2b8ea003e33ee0a9d4d27bd2b3a8e2723cad9eff8059e49b45b4f63bb0cd39199832e5ea216190e431218e34b1f72f354a8510dae78a3721be5963e0f285883153d45414857079f42e067727752f1fb88af9fec5bad836e483ece765b7bf635af346af819437d4418cd623d61ecff5681b4463a25abaa73559a1e570059b0e235799940a6dba3963288692f31884d8fbd1cf0556645716030100040e000000 Message-Authenticator = 0x39529adfab9d34b785634e20e3433435 State = 0x4be46e334eec7713b03b4dc635d63d43 Proxy-State = 0x3830 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 80 to 192.168.10.10 port 32768 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x987ab13b54eb3917477e1a8e0bfc1f31593104b2ce17f32cc7623655e222d88955b49848aa64fad61c36d844785a5a233a5797f57a304fae9f6a4c4b2b8ea003e33ee0a9d4d27bd2b3a8e2723cad9eff8059e49b45b4f63bb0cd39199832e5ea216190e431218e34b1f72f354a8510dae78a3721be5963e0f285883153d45414857079f42e067727752f1fb88af9fec5bad836e483ece765b7bf635af346af819437d4418cd623d61ecff5681b4463a25abaa73559a1e570059b0e235799940a6dba3963288692f31884d8fbd1cf0556645716030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334eec7713b03b4dc635d63d43 Finished request 5. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=81, length=527 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 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 EAP-Message = 0xbd9db73112696068cc65059202668b6cc293a4c85231194c1403010001011603010020bc4a477eec0ce505456dd296aa2cd5434e2222f22ba4af18aa4808db33555972 State = 0x4be46e334eec7713b03b4dc635d63d43 Message-Authenticator = 0x249f3aee701ea70237910d6b197144b3 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 232 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020801401980000001361603010106100001020100019d360f4941b8770c18698fb107abe5914e6ac5e368dded8a54d641d4c176ce15630b09c6c5853d5aae7b9ebfab06d126927696c4afd28354e88e9553ad0e263f97577f137e64b772d988f7a742510bab509c05fe8d92e1a8ef5a5852fbe8d5e3d27d082fa74a01f64d1eb95a9a9b3bea9e0e3cced10c835e445ce3d4469d25bb2973d54e5040f26070a857526e9c9a4673d7283abffc544d1c319794ef92d36e34a97501cd7deeb3b3b603cd2684c4c5ded374515a953828247f3521268db92bc0edfa8f52960c86f907c262b30ce7feb1d7b141d8e9dd9e3a32037f040d06dcb30614bada8c6b EAP-Message = 0xbd9db73112696068cc65059202668b6cc293a4c85231194c1403010001011603010020bc4a477eec0ce505456dd296aa2cd5434e2222f22ba4af18aa4808db33555972 State = 0x4be46e334eec7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3831 Proxying request 6 to home server 129.217.131.42 port 1812 Sending Access-Request of id 232 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 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 EAP-Message = 0xbd9db73112696068cc65059202668b6cc293a4c85231194c1403010001011603010020bc4a477eec0ce505456dd296aa2cd5434e2222f22ba4af18aa4808db33555972 State = 0x4be46e334eec7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3831 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=232, length=111 EAP-Message = 0x0109003119001403010001011603010020a30eaf6dbab8adfec84d629581223822b444a1b6f541a5c35e2341aed8c33845 Message-Authenticator = 0x2b8fb3a8efa22a30fd23c351ed8108c2 State = 0x4be46e334ded7713b03b4dc635d63d43 Proxy-State = 0x3831 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 81 to 192.168.10.10 port 32768 EAP-Message = 0x0109003119001403010001011603010020a30eaf6dbab8adfec84d629581223822b444a1b6f541a5c35e2341aed8c33845 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334ded7713b03b4dc635d63d43 Finished request 6. Going to the next request Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=82, length=211 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020900061900 State = 0x4be46e334ded7713b03b4dc635d63d43 Message-Authenticator = 0xd30055acf6440f25eb19636d02eb0048 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 166 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020900061900 State = 0x4be46e334ded7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3832 Proxying request 7 to home server 129.217.131.42 port 1812 Sending Access-Request of id 166 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020900061900 State = 0x4be46e334ded7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3832 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=166, length=94 EAP-Message = 0x010a00201900170301001566e16e2aaa53d594db6c36a28a90b77e2e9bba9b5e Message-Authenticator = 0x8f738e3e610d79dc29fd66a5e5564995 State = 0x4be46e334cee7713b03b4dc635d63d43 Proxy-State = 0x3832 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 82 to 192.168.10.10 port 32768 EAP-Message = 0x010a00201900170301001566e16e2aaa53d594db6c36a28a90b77e2e9bba9b5e Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e334cee7713b03b4dc635d63d43 Finished request 7. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=83, length=256 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020a0033190017030100285bd3713441fa7b64ed389f4d6050b81c745fafe0c2b6103d414e5cdcd2c70d872428cd24bf9e7289 State = 0x4be46e334cee7713b03b4dc635d63d43 Message-Authenticator = 0x25a8b28e31c980eef12fdd86badc4bed +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 140 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020a0033190017030100285bd3713441fa7b64ed389f4d6050b81c745fafe0c2b6103d414e5cdcd2c70d872428cd24bf9e7289 State = 0x4be46e334cee7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3833 Proxying request 8 to home server 129.217.131.42 port 1812 Sending Access-Request of id 140 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020a0033190017030100285bd3713441fa7b64ed389f4d6050b81c745fafe0c2b6103d414e5cdcd2c70d872428cd24bf9e7289 State = 0x4be46e334cee7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3833 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=140, length=134 EAP-Message = 0x010b00481900170301003dccf156b11ac25773854d021f8008bf2fa0306a91a6a039ea3ef7195cdc00b9dcc1f40db9f3e026f78f6777e42c0d9228f8bb7b6851a615580cfff2d38d Message-Authenticator = 0x91c0caee42edc6259a606c56a045f54d State = 0x4be46e3343ef7713b03b4dc635d63d43 Proxy-State = 0x3833 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 83 to 192.168.10.10 port 32768 EAP-Message = 0x010b00481900170301003dccf156b11ac25773854d021f8008bf2fa0306a91a6a039ea3ef7195cdc00b9dcc1f40db9f3e026f78f6777e42c0d9228f8bb7b6851a615580cfff2d38d Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3343ef7713b03b4dc635d63d43 Finished request 8. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=84, length=310 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020b00691900170301005e3697c3208260750cb1dc678130e848f4fd28ba4f2194687b7bc93baa210f986840c9b36cfa859cf6a4c542ae662a4169bc88008b8259031fb017bfc6dac986766fb4fe11a71bcb88003a91fcd8d77107de9acfc74e20343afd3b0661be92 State = 0x4be46e3343ef7713b03b4dc635d63d43 Message-Authenticator = 0x1ced27069a3ffd58bf719be3eba42060 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 143 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020b00691900170301005e3697c3208260750cb1dc678130e848f4fd28ba4f2194687b7bc93baa210f986840c9b36cfa859cf6a4c542ae662a4169bc88008b8259031fb017bfc6dac986766fb4fe11a71bcb88003a91fcd8d77107de9acfc74e20343afd3b0661be92 State = 0x4be46e3343ef7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3834 Proxying request 9 to home server 129.217.131.42 port 1812 Sending Access-Request of id 143 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020b00691900170301005e3697c3208260750cb1dc678130e848f4fd28ba4f2194687b7bc93baa210f986840c9b36cfa859cf6a4c542ae662a4169bc88008b8259031fb017bfc6dac986766fb4fe11a71bcb88003a91fcd8d77107de9acfc74e20343afd3b0661be92 State = 0x4be46e3343ef7713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3834 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=143, length=136 EAP-Message = 0x010c004a1900170301003f78d832a5b4a5bdb8707a2a3b36498bcfa613f90608f1edac8e18ef2c10d13eca7b6f5d2b748a0ddd3be23a6e3af49a012d75c5ab61509b5be297847312466a Message-Authenticator = 0x8e7d0858d12eaa640eca6fbcb26c3d50 State = 0x4be46e3342e87713b03b4dc635d63d43 Proxy-State = 0x3834 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 84 to 192.168.10.10 port 32768 EAP-Message = 0x010c004a1900170301003f78d832a5b4a5bdb8707a2a3b36498bcfa613f90608f1edac8e18ef2c10d13eca7b6f5d2b748a0ddd3be23a6e3af49a012d75c5ab61509b5be297847312466a Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3342e87713b03b4dc635d63d43 Finished request 9. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=85, length=234 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020c001d19001703010012fea63192e80c2cbdace239c25b208955b0c6 State = 0x4be46e3342e87713b03b4dc635d63d43 Message-Authenticator = 0xc99b70ce4fa5aba818706dfac4a558ce +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 194 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020c001d19001703010012fea63192e80c2cbdace239c25b208955b0c6 State = 0x4be46e3342e87713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3835 Proxying request 10 to home server 129.217.131.42 port 1812 Sending Access-Request of id 194 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020c001d19001703010012fea63192e80c2cbdace239c25b208955b0c6 State = 0x4be46e3342e87713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3835 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=194, length=100 EAP-Message = 0x010d00261900170301001b1ddcd0159af1dc534c48c3355cbb635837708aa7861a593f213787 Message-Authenticator = 0xcf057afde6a540c83c26b8bfe8efbd26 State = 0x4be46e3341e97713b03b4dc635d63d43 Proxy-State = 0x3835 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 85 to 192.168.10.10 port 32768 EAP-Message = 0x010d00261900170301001b1ddcd0159af1dc534c48c3355cbb635837708aa7861a593f213787 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4be46e3341e97713b03b4dc635d63d43 Finished request 10. Going to the next request Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=86, length=243 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020d00261900170301001b0d107c58e7ef0b508aeffc40ce389786f302b0fa62f5297d5c99ca State = 0x4be46e3341e97713b03b4dc635d63d43 Message-Authenticator = 0x92bf72d69329d3e1c3abe7e6f7abbb61 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 168 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020d00261900170301001b0d107c58e7ef0b508aeffc40ce389786f302b0fa62f5297d5c99ca State = 0x4be46e3341e97713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3836 Proxying request 11 to home server 129.217.131.42 port 1812 Sending Access-Request of id 168 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x020d00261900170301001b0d107c58e7ef0b508aeffc40ce389786f302b0fa62f5297d5c99ca State = 0x4be46e3341e97713b03b4dc635d63d43 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3836 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Accept packet from host 129.217.131.42 port 1812, id=168, length=174 User-Name = "testuser" MS-MPPE-Recv-Key = 0xd7a0bda569bd29d6ebf061f901305bd1f89d15a54f215a6d7ca5cea5358b856f MS-MPPE-Send-Key = 0x7697abbfe601343402ab68a59e10d7cab4c6924f13259464221fe156a727f6cc EAP-Message = 0x030d0004 Message-Authenticator = 0x99443c67c58187566341d5d3f87dd07c Proxy-State = 0x3836 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:43:24 2010 ++[post_proxy_log] returns ok [eap] No pre-existing handler found ++[eap] returns noop Found Auth-Type = Accept Auth-Type = Accept, accepting the user +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 86 to 192.168.10.10 port 32768 User-Name = "testuser" MS-MPPE-Recv-Key = 0xd7a0bda569bd29d6ebf061f901305bd1f89d15a54f215a6d7ca5cea5358b856f MS-MPPE-Send-Key = 0x7697abbfe601343402ab68a59e10d7cab4c6924f13259464221fe156a727f6cc EAP-Message = 0x030d0004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 11. Going to the next request Waking up in 4.6 seconds. Cleaning up request 0 ID 75 with timestamp +533 Cleaning up request 1 ID 76 with timestamp +533 Cleaning up request 2 ID 77 with timestamp +533 Cleaning up request 3 ID 78 with timestamp +533 Cleaning up request 4 ID 79 with timestamp +533 Cleaning up request 5 ID 80 with timestamp +533 Cleaning up request 6 ID 81 with timestamp +533 Waking up in 0.1 seconds. Cleaning up request 7 ID 82 with timestamp +533 Cleaning up request 8 ID 83 with timestamp +533 Cleaning up request 9 ID 84 with timestamp +533 Cleaning up request 10 ID 85 with timestamp +533 Cleaning up request 11 ID 86 with timestamp +533 Ready to process requests. ########### ohne post-proxy ######################### 2. with postproxy: ############### with post-proxy ######################### rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=87, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xa90106b2c429dc02a730820cb9acde5a +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 64 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3837 Proxying request 0 to home server 129.217.131.42 port 1812 Sending Access-Request of id 64 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3837 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=64, length=68 EAP-Message = 0x010200061920 Message-Authenticator = 0x91718e38c63c36cfaf6e46c2936ee084 State = 0xd345de34d347c7b9267b650ec61ffd20 Proxy-State = 0x3837 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:45:39 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 87 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 87 with timestamp +49 Ready to process requests. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=88, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xd096e99454f1f33b867a9a0a0abe86e5 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 120 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3838 Proxying request 1 to home server 129.217.131.42 port 1812 Sending Access-Request of id 120 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3838 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=120, length=68 EAP-Message = 0x010400061920 Message-Authenticator = 0x6f3cd5b0b7ab270472f494af7fd081f5 State = 0x55b7adb855b3b45f62385e77c8c4ba50 Proxy-State = 0x3838 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:46:09 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 88 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 1. Going to the next request Waking up in 4.9 seconds. Cleaning up request 1 ID 88 with timestamp +79 Ready to process requests. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=89, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xd9923d4ce88e9564f9d214bbc2a71704 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 8 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3839 Proxying request 2 to home server 129.217.131.42 port 1812 Sending Access-Request of id 8 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0201001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3839 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=8, length=68 EAP-Message = 0x010200061920 Message-Authenticator = 0xec57e9bffd69960dcbbf0831e82f355f State = 0x69c1f83a69c3e1a59ee4e9a8aa25d567 Proxy-State = 0x3839 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:46:39 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 89 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 2. Going to the next request Waking up in 4.9 seconds. Cleaning up request 2 ID 89 with timestamp +109 Ready to process requests. rad_recv: Access-Request packet from host 192.168.10.10 port 32768, id=90, length=215 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0xbb2175ea24ba594c7709d3eef6f3a978 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] Looking up realm "tu-dortmund.de" for User-Name = "testuser@tu-dortmund.de" [suffix] Found realm "tu-dortmund.de" [suffix] Adding Realm = "tu-dortmund.de" [suffix] Proxying request from user testuser to realm tu-dortmund.de [suffix] Preparing to proxy authentication request to realm "tu-dortmund.de" ++[suffix] returns updated [eap] Request is supposed to be proxied to Realm tu-dortmund.de. Not doing EAP. ++[eap] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop WARNING: Empty section. Using default return values. Sending Access-Request of id 123 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3930 Proxying request 3 to home server 129.217.131.42 port 1812 Sending Access-Request of id 123 to 129.217.131.42 port 1812 User-Name = "testuser@tu-dortmund.de" Calling-Station-Id = "00-19-d2-cf-e5-50" Called-Station-Id = "9c-4e-20-c8-7f-20:itmc-test-wpa2" NAS-Port = 29 NAS-IP-Address = 129.217.152.122 NAS-Identifier = "mh-wlc2" Airespace-Wlan-Id = 3 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "3503" EAP-Message = 0x0203001c016d68616e626f726e4074752d646f72746d756e642e6465 Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3930 Going to the next request Waking up in 0.9 seconds. rad_recv: Access-Challenge packet from host 129.217.131.42 port 1812, id=123, length=68 EAP-Message = 0x010400061920 Message-Authenticator = 0x88d99196dda6c84d2d7b15bdcb15bb27 State = 0xe52019c2e5240004b1028ce4230a6211 Proxy-State = 0x3930 +- entering group post-proxy {...} [post_proxy_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] /var/log/freeradius/radacct/%{Client-IP-Address}/post-proxy-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.10.10/post-proxy-detail-20101112 [post_proxy_log] expand: %t -> Fri Nov 12 09:47:09 2010 ++[post_proxy_log] returns ok [attr_filter.post-proxy] expand: %{Realm} -> tu-dortmund.de attr_filter: Matched entry tu-dortmund.de at line 103 attr_filter: Matched entry DEFAULT at line 110 ++[attr_filter.post-proxy] returns updated [eap] No pre-existing handler found ++[eap] returns noop Sending Access-Challenge of id 90 to 192.168.10.10 port 32768 Tunnel-Private-Group-Id:0 := "3503" Tunnel-Type:0 := VLAN Tunnel-Medium-Type:0 := IEEE-802 Finished request 3. Going to the next request -- Hans Bornemann IT & Medien Centrum - TU Dortmund Tel. 0049 231 7552132 -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+hans.bornemann=tu-dortmund.de@lists.freeradius.org [mailto:freeradius-users-bounces+hans.bornemann=tu-dortmund.de@lists.freeradius.org] Im Auftrag von Phil Mayers Gesendet: Mittwoch, 17. November 2010 14:23 An: freeradius-users@lists.freeradius.org Betreff: Re: postproxy breaks eap authentication On 17/11/10 12:31, hans.bornemann@tu-dortmund.de wrote:
Hi,
I have 2 freeradius server: 1 as proxy server, 1 as authentication server. Everything is working fine (Auth. for WPA2, MSCHAPv2 ) until I implement the postproxy function:
Post the debugging output, as advised frequently on this list: radiusd -X | tee log
post-proxy {
post_proxy_log
#attr_rewrite
attr_filter.post-proxy
You're probably filtering the EAP-Message and other required attributes out
/etc/freeradius/attrs:
tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes
DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802
This filter is insufficient. Please study the examples - you need at least: Reply-Message =* ANY, Proxy-State =* ANY, EAP-Message =* ANY, Message-Authenticator =* ANY, MS-MPPE-Recv-Key =* ANY, MS-MPPE-Send-Key =* ANY, MS-CHAP-MPPE-Keys =* ANY, State =* ANY ...to be sure of EAP working. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
hans.bornemann@tu-dortmund.de wrote:
the debug output:
the differences begin at line 82.
<shrug> You can try to figure out exactly what is misconfigured, or you can go back to using the default configuration. The default configuration works for proxying EAP packets. If your configuration doesn't work, it's because you changed something and broke it. If you don't know what you changed to break the server, your management processes are insufficient. Track which changes you made, why you made them, and test the configuration before you make any permanent change. Alan DeKok.
<The default configuration works for proxying EAP packets. If your <configuration doesn't work, it's because you changed something and broke it. The default config is working, I wrote that in the first mail. IF I make this additional config, then eap is broken: /etc/freeradius/sites-enabled/default: .... post-proxy { post_proxy_log #attr_rewrite attr_filter.post-proxy eap # Post-Proxy-Type Fail { # detail # } /etc/freeradius/attrs: tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802 If you don't know what you changed to break the server, your management processes are insufficient. Track which changes you made, why you made them, and test the configuration before you make any permanent change. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 17/11/10 14:27, hans.bornemann@tu-dortmund.de wrote:
The default config is working, I wrote that in the first mail. IF I make this additional config, then eap is broken:
/etc/freeradius/sites-enabled/default: .... post-proxy { post_proxy_log #attr_rewrite attr_filter.post-proxy eap # Post-Proxy-Type Fail { # detail # }
/etc/freeradius/attrs:
tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes
DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802
Yes, BECAUSE YOU HAVE BROKEN EAP. Did you read my email? EAP requires the EAP-Message, Message-Authenticator and other attributes. You have configured the attribute filter to remove them. So EAP is breaking. Fix your broken attribute filter. Look at the /etc/raddb/attrs file that comes with FreeRadius.
Hi,
<The default configuration works for proxying EAP packets. If your <configuration doesn't work, it's because you changed something and broke it.
The default config is working, I wrote that in the first mail. IF I make this additional config, then eap is broken: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
/etc/freeradius/attrs:
tu-dortmund.de Tunnel-Private-Group-ID :=8, Fall-Through = Yes
DEFAULT Tunnel-Type := VLAN, Tunnel-Medium-Type := IEEE-802
THAT file isnt the default config. you have pretty much removed all of the attributes that must be passed through for EAP to work. basically, what you have done is said, 'okay, you've authenticated, but before I send the packet back, i will run it through a filter. your filter doesnt list any of the required attributes and therefore is breaking things. the email from Phil correctly stated all the attributes needed as a minimum....these are in the default attrs file - I know, because I ensured all the right ones were there for EAP proxy to work (back in 1.0.x days) - I deal with several queries each month from sites where they have just enabled pre-proxy or post-proxy filtering for security - without realising what they are doing. I wouldnt put those values into attrs...i would use a different way.... alan
participants (4)
-
Alan Buxey -
Alan DeKok -
hans.bornemann＠tu-dortmund.de -
Phil Mayers