Hello All, I'm trying to setup freeradius, i have a problem , I can connect with radtest, but when trying to connect to wifi, i can't get connection , although the log says everything is good, but here is a log for one wifi try, Thank you : (0) Received Access-Request Id 82 from 192.168.1.7:46948 to 192.168.1.27:1812 length 245 (0) User-Name = "oktaradius@contentful.com" (0) NAS-IP-Address = 192.168.1.7 (0) NAS-Identifier = "F09FC2307B82DFB616DF" (0) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (0) NAS-Port-Type = Wireless-802.11 (0) Service-Type = Framed-User (0) Calling-Station-Id = "8C-85-90-C9-C4-A5" (0) Connect-Info = "CONNECT 0Mbps 802.11b" (0) Acct-Session-Id = "F4E3DF614E08A6E7" (0) WLAN-Pairwise-Cipher = 1027076 (0) WLAN-Group-Cipher = 1027074 (0) WLAN-AKM-Suite = 1027073 (0) Framed-MTU = 1400 (0) EAP-Message = 0x0253001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (0) Message-Authenticator = 0x2ef3105f9641fcc5dcb511bc9002a8b8 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (0) authorize { (0) update control { (0) Proxy-To-Realm := LOCAL (0) } # update control = noop (0) eap: Peer sent EAP Response (code 2) ID 83 length 30 (0) eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize (0) [eap] = ok (0) } # authorize = ok (0) Found Auth-Type = eap (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (0) authenticate { (0) eap: Peer sent packet with method EAP Identity (1) (0) eap: Calling submodule eap_tls to process data (0) eap_tls: Initiating new EAP-TLS session (0) eap_tls: Setting verify mode to require certificate from client (0) eap_tls: [eaptls start] = request (0) eap: Sending EAP Request (code 1) ID 84 length 6 (0) eap: EAP session adding &reply:State = 0x8e5e79f88e0a7437 (0) [eap] = handled (0) } # authenticate = handled (0) Using Post-Auth-Type Challenge (0) Post-Auth-Type sub-section not found. Ignoring. (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (0) Sent Access-Challenge Id 82 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (0) EAP-Message = 0x015400060d20 (0) Message-Authenticator = 0x00000000000000000000000000000000 (0) State = 0x8e5e79f88e0a7437fcc8affbd9e63c1c (0) Finished request Waking up in 4.9 seconds. (1) Received Access-Request Id 83 from 192.168.1.7:46948 to 192.168.1.27:1812 length 241 (1) User-Name = "oktaradius@contentful.com" (1) NAS-IP-Address = 192.168.1.7 (1) NAS-Identifier = "F09FC2307B82DFB616DF" (1) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (1) NAS-Port-Type = Wireless-802.11 (1) Service-Type = Framed-User (1) Calling-Station-Id = "8C-85-90-C9-C4-A5" (1) Connect-Info = "CONNECT 0Mbps 802.11b" (1) Acct-Session-Id = "F4E3DF614E08A6E7" (1) WLAN-Pairwise-Cipher = 1027076 (1) WLAN-Group-Cipher = 1027074 (1) WLAN-AKM-Suite = 1027073 (1) Framed-MTU = 1400 (1) EAP-Message = 0x025400080319152b (1) State = 0x8e5e79f88e0a7437fcc8affbd9e63c1c (1) Message-Authenticator = 0xbfebf90757d8720c073964a1a576290f (1) session-state: No cached attributes (1) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (1) authorize { (1) update control { (1) Proxy-To-Realm := LOCAL (1) } # update control = noop (1) eap: Peer sent EAP Response (code 2) ID 84 length 8 (1) eap: No EAP Start, assuming it's an on-going EAP conversation (1) [eap] = updated (1) [pap] = noop (1) if (User-Password) { (1) if (User-Password) -> FALSE (1) } # authorize = updated (1) Found Auth-Type = eap (1) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (1) authenticate { (1) eap: Expiring EAP session with state 0x8e5e79f88e0a7437 (1) eap: Finished EAP session with state 0x8e5e79f88e0a7437 (1) eap: Previous EAP request found for state 0x8e5e79f88e0a7437, released from the list (1) eap: Peer sent packet with method EAP NAK (3) (1) eap: Found mutually acceptable type PEAP (25) (1) eap: Calling submodule eap_peap to process data (1) eap_peap: Initiating new EAP-TLS session (1) eap_peap: [eaptls start] = request (1) eap: Sending EAP Request (code 1) ID 85 length 6 (1) eap: EAP session adding &reply:State = 0x8e5e79f88f0b6037 (1) [eap] = handled (1) } # authenticate = handled (1) Using Post-Auth-Type Challenge (1) Post-Auth-Type sub-section not found. Ignoring. (1) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (1) Sent Access-Challenge Id 83 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (1) EAP-Message = 0x015500061920 (1) Message-Authenticator = 0x00000000000000000000000000000000 (1) State = 0x8e5e79f88f0b6037fcc8affbd9e63c1c (1) Finished request Waking up in 4.9 seconds. (2) Received Access-Request Id 84 from 192.168.1.7:46948 to 192.168.1.27:1812 length 394 (2) User-Name = "oktaradius@contentful.com" (2) NAS-IP-Address = 192.168.1.7 (2) NAS-Identifier = "F09FC2307B82DFB616DF" (2) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (2) NAS-Port-Type = Wireless-802.11 (2) Service-Type = Framed-User (2) Calling-Station-Id = "8C-85-90-C9-C4-A5" (2) Connect-Info = "CONNECT 0Mbps 802.11b" (2) Acct-Session-Id = "F4E3DF614E08A6E7" (2) WLAN-Pairwise-Cipher = 1027076 (2) WLAN-Group-Cipher = 1027074 (2) WLAN-AKM-Suite = 1027073 (2) Framed-MTU = 1400 (2) EAP-Message = 0x025500a119800000009716030100920100008e03035d3b1e54818c4033c2e450ebed8065da3524ab162a0e233ad0c618af5ac5652500002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a01000039000a00080006001700180019000b00 (2) State = 0x8e5e79f88f0b6037fcc8affbd9e63c1c (2) Message-Authenticator = 0xcdd72bf2423fa3e01d52be23c7023adf (2) session-state: No cached attributes (2) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (2) authorize { (2) update control { (2) Proxy-To-Realm := LOCAL (2) } # update control = noop (2) eap: Peer sent EAP Response (code 2) ID 85 length 161 (2) eap: Continuing tunnel setup (2) [eap] = ok (2) } # authorize = ok (2) Found Auth-Type = eap (2) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (2) authenticate { (2) eap: Expiring EAP session with state 0x8e5e79f88f0b6037 (2) eap: Finished EAP session with state 0x8e5e79f88f0b6037 (2) eap: Previous EAP request found for state 0x8e5e79f88f0b6037, released from the list (2) eap: Peer sent packet with method EAP PEAP (25) (2) eap: Calling submodule eap_peap to process data (2) eap_peap: Continuing EAP-TLS (2) eap_peap: Peer indicated complete TLS record size will be 151 bytes (2) eap_peap: Got complete TLS record (151 bytes) (2) eap_peap: [eaptls verify] = length included (2) eap_peap: (other): before SSL initialization (2) eap_peap: TLS_accept: before SSL initialization (2) eap_peap: TLS_accept: before SSL initialization (2) eap_peap: <<< recv UNKNOWN TLS VERSION ?0304? [length 0092] (2) eap_peap: TLS_accept: SSLv3/TLS read client hello (2) eap_peap: >>> send TLS 1.2 [length 003d] (2) eap_peap: TLS_accept: SSLv3/TLS write server hello (2) eap_peap: >>> send TLS 1.2 [length 08d3] (2) eap_peap: TLS_accept: SSLv3/TLS write certificate (2) eap_peap: >>> send TLS 1.2 [length 014d] (2) eap_peap: TLS_accept: SSLv3/TLS write key exchange (2) eap_peap: >>> send TLS 1.2 [length 0004] (2) eap_peap: TLS_accept: SSLv3/TLS write server done (2) eap_peap: TLS_accept: Need to read more data: SSLv3/TLS write server done (2) eap_peap: In SSL Handshake Phase (2) eap_peap: In SSL Accept mode (2) eap_peap: [eaptls process] = handled (2) eap: Sending EAP Request (code 1) ID 86 length 1004 (2) eap: EAP session adding &reply:State = 0x8e5e79f88c086037 (2) [eap] = handled (2) } # authenticate = handled (2) Using Post-Auth-Type Challenge (2) Post-Auth-Type sub-section not found. Ignoring. (2) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (2) Sent Access-Challenge Id 84 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (2) EAP-Message = 0x015603ec19c000000a75160303003d020000390303f4db561afcd51050dfe561afa580cdeba858176c028582f714c957d4f7bb5ebc00c030000011ff01000100000b0004030001020017000016030308d30b0008cf0008cc0003de308203da308202c2a003020102020101300d06092a864886f70d0101 (2) Message-Authenticator = 0x00000000000000000000000000000000 (2) State = 0x8e5e79f88c086037fcc8affbd9e63c1c (2) Finished request Waking up in 4.9 seconds. (3) Received Access-Request Id 85 from 192.168.1.7:46948 to 192.168.1.27:1812 length 239 (3) User-Name = "oktaradius@contentful.com" (3) NAS-IP-Address = 192.168.1.7 (3) NAS-Identifier = "F09FC2307B82DFB616DF" (3) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (3) NAS-Port-Type = Wireless-802.11 (3) Service-Type = Framed-User (3) Calling-Station-Id = "8C-85-90-C9-C4-A5" (3) Connect-Info = "CONNECT 0Mbps 802.11b" (3) Acct-Session-Id = "F4E3DF614E08A6E7" (3) WLAN-Pairwise-Cipher = 1027076 (3) WLAN-Group-Cipher = 1027074 (3) WLAN-AKM-Suite = 1027073 (3) Framed-MTU = 1400 (3) EAP-Message = 0x025600061900 (3) State = 0x8e5e79f88c086037fcc8affbd9e63c1c (3) Message-Authenticator = 0xc74b5d9b530183fb982c98cf1cb61978 (3) session-state: No cached attributes (3) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (3) authorize { (3) update control { (3) Proxy-To-Realm := LOCAL (3) } # update control = noop (3) eap: Peer sent EAP Response (code 2) ID 86 length 6 (3) eap: Continuing tunnel setup (3) [eap] = ok (3) } # authorize = ok (3) Found Auth-Type = eap (3) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (3) authenticate { (3) eap: Expiring EAP session with state 0x8e5e79f88c086037 (3) eap: Finished EAP session with state 0x8e5e79f88c086037 (3) eap: Previous EAP request found for state 0x8e5e79f88c086037, released from the list (3) eap: Peer sent packet with method EAP PEAP (25) (3) eap: Calling submodule eap_peap to process data (3) eap_peap: Continuing EAP-TLS (3) eap_peap: Peer ACKed our handshake fragment (3) eap_peap: [eaptls verify] = request (3) eap_peap: [eaptls process] = handled (3) eap: Sending EAP Request (code 1) ID 87 length 1000 (3) eap: EAP session adding &reply:State = 0x8e5e79f88d096037 (3) [eap] = handled (3) } # authenticate = handled (3) Using Post-Auth-Type Challenge (3) Post-Auth-Type sub-section not found. Ignoring. (3) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (3) Sent Access-Challenge Id 85 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (3) EAP-Message = 0x015703e819401243396539a2f1ad1b6a17603569def5a0794b3af441b40273fd27a0361b18742b5e898d798d94b85c2aaa4ede14cfe7c5f7406c7d5eb178bc1e609fbfefb1920ce1f720d4bbd7ea7e4c91a2b00004e8308204e4308203cca003020102020900c803dae017bc13c5300d06092a864886f7 (3) Message-Authenticator = 0x00000000000000000000000000000000 (3) State = 0x8e5e79f88d096037fcc8affbd9e63c1c (3) Finished request Waking up in 4.9 seconds. (4) Received Access-Request Id 86 from 192.168.1.7:46948 to 192.168.1.27:1812 length 239 (4) User-Name = "oktaradius@contentful.com" (4) NAS-IP-Address = 192.168.1.7 (4) NAS-Identifier = "F09FC2307B82DFB616DF" (4) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (4) NAS-Port-Type = Wireless-802.11 (4) Service-Type = Framed-User (4) Calling-Station-Id = "8C-85-90-C9-C4-A5" (4) Connect-Info = "CONNECT 0Mbps 802.11b" (4) Acct-Session-Id = "F4E3DF614E08A6E7" (4) WLAN-Pairwise-Cipher = 1027076 (4) WLAN-Group-Cipher = 1027074 (4) WLAN-AKM-Suite = 1027073 (4) Framed-MTU = 1400 (4) EAP-Message = 0x025700061900 (4) State = 0x8e5e79f88d096037fcc8affbd9e63c1c (4) Message-Authenticator = 0xdc9c44ffb0df21479896a1ef75f141dc (4) session-state: No cached attributes (4) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (4) authorize { (4) update control { (4) Proxy-To-Realm := LOCAL (4) } # update control = noop (4) eap: Peer sent EAP Response (code 2) ID 87 length 6 (4) eap: Continuing tunnel setup (4) [eap] = ok (4) } # authorize = ok (4) Found Auth-Type = eap (4) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (4) authenticate { (4) eap: Expiring EAP session with state 0x8e5e79f88d096037 (4) eap: Finished EAP session with state 0x8e5e79f88d096037 (4) eap: Previous EAP request found for state 0x8e5e79f88d096037, released from the list (4) eap: Peer sent packet with method EAP PEAP (25) (4) eap: Calling submodule eap_peap to process data (4) eap_peap: Continuing EAP-TLS (4) eap_peap: Peer ACKed our handshake fragment (4) eap_peap: [eaptls verify] = request (4) eap_peap: [eaptls process] = handled (4) eap: Sending EAP Request (code 1) ID 88 length 695 (4) eap: EAP session adding &reply:State = 0x8e5e79f88a066037 (4) [eap] = handled (4) } # authenticate = handled (4) Using Post-Auth-Type Challenge (4) Post-Auth-Type sub-section not found. Ignoring. (4) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (4) Sent Access-Challenge Id 86 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (4) EAP-Message = 0x015802b719000101ff040530030101ff30360603551d1f042f302d302ba029a0278625687474703a2f2f7777772e6578616d706c652e6f72672f6578616d706c655f63612e63726c300d06092a864886f70d01010b0500038201010093b7088d1eca7efc8d6342f26a50a6514cb1333be0b8cce368e35f (4) Message-Authenticator = 0x00000000000000000000000000000000 (4) State = 0x8e5e79f88a066037fcc8affbd9e63c1c (4) Finished request Waking up in 4.9 seconds. (5) Received Access-Request Id 87 from 192.168.1.7:46948 to 192.168.1.27:1812 length 369 (5) User-Name = "oktaradius@contentful.com" (5) NAS-IP-Address = 192.168.1.7 (5) NAS-Identifier = "F09FC2307B82DFB616DF" (5) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (5) NAS-Port-Type = Wireless-802.11 (5) Service-Type = Framed-User (5) Calling-Station-Id = "8C-85-90-C9-C4-A5" (5) Connect-Info = "CONNECT 0Mbps 802.11b" (5) Acct-Session-Id = "F4E3DF614E08A6E7" (5) WLAN-Pairwise-Cipher = 1027076 (5) WLAN-Group-Cipher = 1027074 (5) WLAN-AKM-Suite = 1027073 (5) Framed-MTU = 1400 (5) EAP-Message = 0x0258008819800000007e160303004610000042410455710645a086fa673b5651856435b29c766c56652862fd0d21dfd62e82d5da59671e9b36caf9cb6bb56a9a993f06dd9e3c68167322641401350a4c9765bb8d02140303000101160303002882a691998eb92a952bace837313d29a1bd6ecfef475925 (5) State = 0x8e5e79f88a066037fcc8affbd9e63c1c (5) Message-Authenticator = 0x45dc3d64eb736878b8deb4327f70ae0a (5) session-state: No cached attributes (5) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (5) authorize { (5) update control { (5) Proxy-To-Realm := LOCAL (5) } # update control = noop (5) eap: Peer sent EAP Response (code 2) ID 88 length 136 (5) eap: Continuing tunnel setup (5) [eap] = ok (5) } # authorize = ok (5) Found Auth-Type = eap (5) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (5) authenticate { (5) eap: Expiring EAP session with state 0x8e5e79f88a066037 (5) eap: Finished EAP session with state 0x8e5e79f88a066037 (5) eap: Previous EAP request found for state 0x8e5e79f88a066037, released from the list (5) eap: Peer sent packet with method EAP PEAP (25) (5) eap: Calling submodule eap_peap to process data (5) eap_peap: Continuing EAP-TLS (5) eap_peap: Peer indicated complete TLS record size will be 126 bytes (5) eap_peap: Got complete TLS record (126 bytes) (5) eap_peap: [eaptls verify] = length included (5) eap_peap: TLS_accept: SSLv3/TLS write server done (5) eap_peap: <<< recv TLS 1.2 [length 0046] (5) eap_peap: TLS_accept: SSLv3/TLS read client key exchange (5) eap_peap: TLS_accept: SSLv3/TLS read change cipher spec (5) eap_peap: <<< recv TLS 1.2 [length 0010] (5) eap_peap: TLS_accept: SSLv3/TLS read finished (5) eap_peap: >>> send TLS 1.2 [length 0001] (5) eap_peap: TLS_accept: SSLv3/TLS write change cipher spec (5) eap_peap: >>> send TLS 1.2 [length 0010] (5) eap_peap: TLS_accept: SSLv3/TLS write finished (5) eap_peap: (other): SSL negotiation finished successfully (5) eap_peap: SSL Connection Established (5) eap_peap: [eaptls process] = handled (5) eap: Sending EAP Request (code 1) ID 89 length 57 (5) eap: EAP session adding &reply:State = 0x8e5e79f88b076037 (5) [eap] = handled (5) } # authenticate = handled (5) Using Post-Auth-Type Challenge (5) Post-Auth-Type sub-section not found. Ignoring. (5) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (5) Sent Access-Challenge Id 87 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (5) EAP-Message = 0x01590039190014030300010116030300288508974cf000d696909a31bf90d9f19ddb9d0def8129361cb73755088827c94a02615ac39ed09a64 (5) Message-Authenticator = 0x00000000000000000000000000000000 (5) State = 0x8e5e79f88b076037fcc8affbd9e63c1c (5) Finished request Waking up in 4.9 seconds. (6) Received Access-Request Id 88 from 192.168.1.7:46948 to 192.168.1.27:1812 length 239 (6) User-Name = "oktaradius@contentful.com" (6) NAS-IP-Address = 192.168.1.7 (6) NAS-Identifier = "F09FC2307B82DFB616DF" (6) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (6) NAS-Port-Type = Wireless-802.11 (6) Service-Type = Framed-User (6) Calling-Station-Id = "8C-85-90-C9-C4-A5" (6) Connect-Info = "CONNECT 0Mbps 802.11b" (6) Acct-Session-Id = "F4E3DF614E08A6E7" (6) WLAN-Pairwise-Cipher = 1027076 (6) WLAN-Group-Cipher = 1027074 (6) WLAN-AKM-Suite = 1027073 (6) Framed-MTU = 1400 (6) EAP-Message = 0x025900061900 (6) State = 0x8e5e79f88b076037fcc8affbd9e63c1c (6) Message-Authenticator = 0x9730e87ff8802c126443c327dc21a5f4 (6) session-state: No cached attributes (6) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (6) authorize { (6) update control { (6) Proxy-To-Realm := LOCAL (6) } # update control = noop (6) eap: Peer sent EAP Response (code 2) ID 89 length 6 (6) eap: Continuing tunnel setup (6) [eap] = ok (6) } # authorize = ok (6) Found Auth-Type = eap (6) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (6) authenticate { (6) eap: Expiring EAP session with state 0x8e5e79f88b076037 (6) eap: Finished EAP session with state 0x8e5e79f88b076037 (6) eap: Previous EAP request found for state 0x8e5e79f88b076037, released from the list (6) eap: Peer sent packet with method EAP PEAP (25) (6) eap: Calling submodule eap_peap to process data (6) eap_peap: Continuing EAP-TLS (6) eap_peap: Peer ACKed our handshake fragment. handshake is finished (6) eap_peap: [eaptls verify] = success (6) eap_peap: [eaptls process] = success (6) eap_peap: Session established. Decoding tunneled attributes (6) eap_peap: PEAP state TUNNEL ESTABLISHED (6) eap: Sending EAP Request (code 1) ID 90 length 40 (6) eap: EAP session adding &reply:State = 0x8e5e79f888046037 (6) [eap] = handled (6) } # authenticate = handled (6) Using Post-Auth-Type Challenge (6) Post-Auth-Type sub-section not found. Ignoring. (6) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (6) Sent Access-Challenge Id 88 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (6) EAP-Message = 0x015a00281900170303001d8508974cf000d697a71a53aaa45991383e25d9a758b07f5792b7018b30 (6) Message-Authenticator = 0x00000000000000000000000000000000 (6) State = 0x8e5e79f888046037fcc8affbd9e63c1c (6) Finished request Waking up in 4.9 seconds. (7) Received Access-Request Id 89 from 192.168.1.7:46948 to 192.168.1.27:1812 length 294 (7) User-Name = "oktaradius@contentful.com" (7) NAS-IP-Address = 192.168.1.7 (7) NAS-Identifier = "F09FC2307B82DFB616DF" (7) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (7) NAS-Port-Type = Wireless-802.11 (7) Service-Type = Framed-User (7) Calling-Station-Id = "8C-85-90-C9-C4-A5" (7) Connect-Info = "CONNECT 0Mbps 802.11b" (7) Acct-Session-Id = "F4E3DF614E08A6E7" (7) WLAN-Pairwise-Cipher = 1027076 (7) WLAN-Group-Cipher = 1027074 (7) WLAN-AKM-Suite = 1027073 (7) Framed-MTU = 1400 (7) EAP-Message = 0x025a003d1900170303003282a691998eb92a966f0d81eac34e3e4935779ed2b220d2a00a184c329dab5b85aa3bb79f1e12c736377db8f54c344e0754ed (7) State = 0x8e5e79f888046037fcc8affbd9e63c1c (7) Message-Authenticator = 0xd57102506800bbb4f59d2688fbb14691 (7) session-state: No cached attributes (7) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (7) authorize { (7) update control { (7) Proxy-To-Realm := LOCAL (7) } # update control = noop (7) eap: Peer sent EAP Response (code 2) ID 90 length 61 (7) eap: Continuing tunnel setup (7) [eap] = ok (7) } # authorize = ok (7) Found Auth-Type = eap (7) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (7) authenticate { (7) eap: Expiring EAP session with state 0x8e5e79f888046037 (7) eap: Finished EAP session with state 0x8e5e79f888046037 (7) eap: Previous EAP request found for state 0x8e5e79f888046037, released from the list (7) eap: Peer sent packet with method EAP PEAP (25) (7) eap: Calling submodule eap_peap to process data (7) eap_peap: Continuing EAP-TLS (7) eap_peap: [eaptls verify] = ok (7) eap_peap: Done initial handshake (7) eap_peap: [eaptls process] = ok (7) eap_peap: Session established. Decoding tunneled attributes (7) eap_peap: PEAP state WAITING FOR INNER IDENTITY (7) eap_peap: Identity - oktaradius@contentful.com (7) eap_peap: Got inner identity 'oktaradius@contentful.com' (7) eap_peap: Setting default EAP type for tunneled EAP session (7) eap_peap: Got tunneled request (7) eap_peap: EAP-Message = 0x025a001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (7) eap_peap: Setting User-Name to oktaradius@contentful.com (7) eap_peap: Sending tunneled request to inner-tunnel (7) eap_peap: EAP-Message = 0x025a001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (7) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (7) eap_peap: User-Name = "oktaradius@contentful.com" (7) eap_peap: NAS-IP-Address = 192.168.1.7 (7) eap_peap: NAS-Identifier = "F09FC2307B82DFB616DF" (7) eap_peap: Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (7) eap_peap: NAS-Port-Type = Wireless-802.11 (7) eap_peap: Service-Type = Framed-User (7) eap_peap: Calling-Station-Id = "8C-85-90-C9-C4-A5" (7) eap_peap: Connect-Info = "CONNECT 0Mbps 802.11b" (7) eap_peap: Acct-Session-Id = "F4E3DF614E08A6E7" (7) eap_peap: WLAN-Pairwise-Cipher = 1027076 (7) eap_peap: WLAN-Group-Cipher = 1027074 (7) eap_peap: WLAN-AKM-Suite = 1027073 (7) eap_peap: Framed-MTU = 1400 (7) Virtual server inner-tunnel received request (7) EAP-Message = 0x025a001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (7) FreeRADIUS-Proxied-To = 127.0.0.1 (7) User-Name = "oktaradius@contentful.com" (7) NAS-IP-Address = 192.168.1.7 (7) NAS-Identifier = "F09FC2307B82DFB616DF" (7) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (7) NAS-Port-Type = Wireless-802.11 (7) Service-Type = Framed-User (7) Calling-Station-Id = "8C-85-90-C9-C4-A5" (7) Connect-Info = "CONNECT 0Mbps 802.11b" (7) Acct-Session-Id = "F4E3DF614E08A6E7" (7) WLAN-Pairwise-Cipher = 1027076 (7) WLAN-Group-Cipher = 1027074 (7) WLAN-AKM-Suite = 1027073 (7) Framed-MTU = 1400 (7) WARNING: Outer and inner identities are the same. User privacy is compromised. (7) server inner-tunnel { (7) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (7) authorize { (7) update control { (7) Proxy-To-Realm := LOCAL (7) } # update control = noop (7) eap: Peer sent EAP Response (code 2) ID 90 length 30 (7) eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize (7) [eap] = ok (7) } # authorize = ok (7) Found Auth-Type = eap (7) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (7) authenticate { (7) eap: Peer sent packet with method EAP Identity (1) (7) eap: Calling submodule eap_gtc to process data (7) eap_gtc: EXPAND Password: (7) eap_gtc: --> Password: (7) eap: Sending EAP Request (code 1) ID 91 length 15 (7) eap: EAP session adding &reply:State = 0x79ff604279a466b1 (7) [eap] = handled (7) } # authenticate = handled (7) } # server inner-tunnel (7) Virtual server sending reply (7) EAP-Message = 0x015b000f0650617373776f72643a20 (7) Message-Authenticator = 0x00000000000000000000000000000000 (7) State = 0x79ff604279a466b12b6ee87c9d8fbc5d (7) eap_peap: Got tunneled reply code 11 (7) eap_peap: EAP-Message = 0x015b000f0650617373776f72643a20 (7) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (7) eap_peap: State = 0x79ff604279a466b12b6ee87c9d8fbc5d (7) eap_peap: Got tunneled reply RADIUS code 11 (7) eap_peap: EAP-Message = 0x015b000f0650617373776f72643a20 (7) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (7) eap_peap: State = 0x79ff604279a466b12b6ee87c9d8fbc5d (7) eap_peap: Got tunneled Access-Challenge (7) eap: Sending EAP Request (code 1) ID 91 length 46 (7) eap: EAP session adding &reply:State = 0x8e5e79f889056037 (7) [eap] = handled (7) } # authenticate = handled (7) Using Post-Auth-Type Challenge (7) Post-Auth-Type sub-section not found. Ignoring. (7) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (7) Sent Access-Challenge Id 89 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (7) EAP-Message = 0x015b002e190017030300238508974cf000d69867da188125406fdc050d056f13a39d134e659fb120e7ffd0c25d79 (7) Message-Authenticator = 0x00000000000000000000000000000000 (7) State = 0x8e5e79f889056037fcc8affbd9e63c1c (7) Finished request Waking up in 4.8 seconds. (8) Received Access-Request Id 90 from 192.168.1.7:46948 to 192.168.1.27:1812 length 281 (8) User-Name = "oktaradius@contentful.com" (8) NAS-IP-Address = 192.168.1.7 (8) NAS-Identifier = "F09FC2307B82DFB616DF" (8) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (8) NAS-Port-Type = Wireless-802.11 (8) Service-Type = Framed-User (8) Calling-Station-Id = "8C-85-90-C9-C4-A5" (8) Connect-Info = "CONNECT 0Mbps 802.11b" (8) Acct-Session-Id = "F4E3DF614E08A6E7" (8) WLAN-Pairwise-Cipher = 1027076 (8) WLAN-Group-Cipher = 1027074 (8) WLAN-AKM-Suite = 1027073 (8) Framed-MTU = 1400 (8) EAP-Message = 0x025b00301900170303002582a691998eb92a9706f4341ff93a53d4cd6ca39019fc858d356fcb744312c377435348a313 (8) State = 0x8e5e79f889056037fcc8affbd9e63c1c (8) Message-Authenticator = 0x793c2aa91adf8352b4d78227013b2880 (8) session-state: No cached attributes (8) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) authorize { (8) update control { (8) Proxy-To-Realm := LOCAL (8) } # update control = noop (8) eap: Peer sent EAP Response (code 2) ID 91 length 48 (8) eap: Continuing tunnel setup (8) [eap] = ok (8) } # authorize = ok (8) Found Auth-Type = eap (8) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) authenticate { (8) eap: Expiring EAP session with state 0x79ff604279a466b1 (8) eap: Finished EAP session with state 0x8e5e79f889056037 (8) eap: Previous EAP request found for state 0x8e5e79f889056037, released from the list (8) eap: Peer sent packet with method EAP PEAP (25) (8) eap: Calling submodule eap_peap to process data (8) eap_peap: Continuing EAP-TLS (8) eap_peap: [eaptls verify] = ok (8) eap_peap: Done initial handshake (8) eap_peap: [eaptls process] = ok (8) eap_peap: Session established. Decoding tunneled attributes (8) eap_peap: PEAP state phase2 (8) eap_peap: EAP method GTC (6) (8) eap_peap: Got tunneled request (8) eap_peap: EAP-Message = 0x025b001106426574415468657441313335 (8) eap_peap: Setting User-Name to oktaradius@contentful.com (8) eap_peap: Sending tunneled request to inner-tunnel (8) eap_peap: EAP-Message = 0x025b001106426574415468657441313335 (8) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (8) eap_peap: User-Name = "oktaradius@contentful.com" (8) eap_peap: State = 0x79ff604279a466b12b6ee87c9d8fbc5d (8) eap_peap: NAS-IP-Address = 192.168.1.7 (8) eap_peap: NAS-Identifier = "F09FC2307B82DFB616DF" (8) eap_peap: Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (8) eap_peap: NAS-Port-Type = Wireless-802.11 (8) eap_peap: Service-Type = Framed-User (8) eap_peap: Calling-Station-Id = "8C-85-90-C9-C4-A5" (8) eap_peap: Connect-Info = "CONNECT 0Mbps 802.11b" (8) eap_peap: Acct-Session-Id = "F4E3DF614E08A6E7" (8) eap_peap: WLAN-Pairwise-Cipher = 1027076 (8) eap_peap: WLAN-Group-Cipher = 1027074 (8) eap_peap: WLAN-AKM-Suite = 1027073 (8) eap_peap: Framed-MTU = 1400 (8) Virtual server inner-tunnel received request (8) EAP-Message = 0x025b001106426574415468657441313335 (8) FreeRADIUS-Proxied-To = 127.0.0.1 (8) User-Name = "oktaradius@contentful.com" (8) State = 0x79ff604279a466b12b6ee87c9d8fbc5d (8) NAS-IP-Address = 192.168.1.7 (8) NAS-Identifier = "F09FC2307B82DFB616DF" (8) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (8) NAS-Port-Type = Wireless-802.11 (8) Service-Type = Framed-User (8) Calling-Station-Id = "8C-85-90-C9-C4-A5" (8) Connect-Info = "CONNECT 0Mbps 802.11b" (8) Acct-Session-Id = "F4E3DF614E08A6E7" (8) WLAN-Pairwise-Cipher = 1027076 (8) WLAN-Group-Cipher = 1027074 (8) WLAN-AKM-Suite = 1027073 (8) Framed-MTU = 1400 (8) WARNING: Outer and inner identities are the same. User privacy is compromised. (8) server inner-tunnel { (8) session-state: No cached attributes (8) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) authorize { (8) update control { (8) Proxy-To-Realm := LOCAL (8) } # update control = noop (8) eap: Peer sent EAP Response (code 2) ID 91 length 17 (8) eap: No EAP Start, assuming it's an on-going EAP conversation (8) [eap] = updated (8) [pap] = noop (8) if (User-Password) { (8) if (User-Password) -> FALSE (8) } # authorize = updated (8) Found Auth-Type = eap (8) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) authenticate { (8) eap: Expiring EAP session with state 0x79ff604279a466b1 (8) eap: Finished EAP session with state 0x79ff604279a466b1 (8) eap: Previous EAP request found for state 0x79ff604279a466b1, released from the list (8) eap: Peer sent packet with method EAP GTC (6) (8) eap: Calling submodule eap_gtc to process data (8) eap_gtc: # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) eap_gtc: Auth-Type PAP { rlm_ldap (ldap): Reserved connection (0) (8) ldap: Login attempt by "oktaradius@contentful.com" (8) ldap: EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}}) (8) ldap: --> (uid=oktaradius@contentful.com) (8) ldap: Performing search in "ou=users,dc=contentful, dc=oktapreview, dc=com" with filter "(uid=oktaradius@contentful.com)", scope "sub" (8) ldap: Waiting for search result... (8) ldap: User object found at DN "uid=oktaradius@contentful.com ,ou=users,dc=contentful,dc=oktapreview,dc=com" (8) ldap: Waiting for bind result... (8) ldap: Bind successful (8) ldap: Bind as user "uid=oktaradius@contentful.com,ou=users,dc=contentful,dc=oktapreview,dc=com" was successful rlm_ldap (ldap): Released connection (0) Need 5 more connections to reach 10 spares rlm_ldap (ldap): Opening additional connection (5), 1 of 27 pending slots used rlm_ldap (ldap): Connecting to ldap://contentful.ldap.oktapreview.com:636 rlm_ldap (ldap): Waiting for bind result... rlm_ldap (ldap): Bind successful (8) [ldap] = ok (8) } # Auth-Type PAP = ok (8) eap: Sending EAP Success (code 3) ID 91 length 4 (8) eap: Freeing handler (8) [eap] = ok (8) } # authenticate = ok (8) # Executing section post-auth from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) } # server inner-tunnel (8) Virtual server sending reply (8) EAP-Message = 0x035b0004 (8) Message-Authenticator = 0x00000000000000000000000000000000 (8) User-Name = "oktaradius@contentful.com" (8) eap_peap: Got tunneled reply code 2 (8) eap_peap: EAP-Message = 0x035b0004 (8) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (8) eap_peap: User-Name = "oktaradius@contentful.com" (8) eap_peap: Got tunneled reply RADIUS code 2 (8) eap_peap: EAP-Message = 0x035b0004 (8) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (8) eap_peap: User-Name = "oktaradius@contentful.com" (8) eap_peap: Tunneled authentication was successful (8) eap_peap: SUCCESS (8) eap_peap: Saving tunneled attributes for later (8) eap: Sending EAP Request (code 1) ID 92 length 46 (8) eap: EAP session adding &reply:State = 0x8e5e79f886026037 (8) [eap] = handled (8) } # authenticate = handled (8) Using Post-Auth-Type Challenge (8) Post-Auth-Type sub-section not found. Ignoring. (8) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (8) Sent Access-Challenge Id 90 from 192.168.1.27:1812 to 192.168.1.7:46948 length 0 (8) EAP-Message = 0x015c002e190017030300238508974cf000d699b2e5906ac3d4547d7f9db95aae8fe5d3e02fe12dd77ac882fbbf97 (8) Message-Authenticator = 0x00000000000000000000000000000000 (8) State = 0x8e5e79f886026037fcc8affbd9e63c1c (8) Finished request Waking up in 3.0 seconds. Waking up in 3.0 seconds. (0) Cleaning up request packet ID 82 with timestamp +39 (1) Cleaning up request packet ID 83 with timestamp +39 (2) Cleaning up request packet ID 84 with timestamp +39 (3) Cleaning up request packet ID 85 with timestamp +39 (4) Cleaning up request packet ID 86 with timestamp +39 (5) Cleaning up request packet ID 87 with timestamp +39 (6) Cleaning up request packet ID 88 with timestamp +39 (7) Cleaning up request packet ID 89 with timestamp +39 Waking up in 6.8 seconds. (8) Cleaning up request packet ID 90 with timestamp +39 Ready to process requests (9) Received Access-Request Id 91 from 192.168.1.7:40573 to 192.168.1.27:1812 length 245 (9) User-Name = "oktaradius@contentful.com" (9) NAS-IP-Address = 192.168.1.7 (9) NAS-Identifier = "F09FC2307B82DFB616DF" (9) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (9) NAS-Port-Type = Wireless-802.11 (9) Service-Type = Framed-User (9) Calling-Station-Id = "8C-85-90-C9-C4-A5" (9) Connect-Info = "CONNECT 0Mbps 802.11b" (9) Acct-Session-Id = "F4E3DF614E08A6E7" (9) WLAN-Pairwise-Cipher = 1027076 (9) WLAN-Group-Cipher = 1027074 (9) WLAN-AKM-Suite = 1027073 (9) Framed-MTU = 1400 (9) EAP-Message = 0x02ff001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (9) Message-Authenticator = 0x6814d8a702b65f36ca7679d3c30d6abf (9) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (9) authorize { (9) update control { (9) Proxy-To-Realm := LOCAL (9) } # update control = noop (9) eap: Peer sent EAP Response (code 2) ID 255 length 30 (9) eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize (9) [eap] = ok (9) } # authorize = ok (9) Found Auth-Type = eap (9) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (9) authenticate { (9) eap: Peer sent packet with method EAP Identity (1) (9) eap: Calling submodule eap_tls to process data (9) eap_tls: Initiating new EAP-TLS session (9) eap_tls: Setting verify mode to require certificate from client (9) eap_tls: [eaptls start] = request (9) eap: Sending EAP Request (code 1) ID 0 length 6 (9) eap: EAP session adding &reply:State = 0x45a1b60045a1bb20 (9) [eap] = handled (9) } # authenticate = handled (9) Using Post-Auth-Type Challenge (9) Post-Auth-Type sub-section not found. Ignoring. (9) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (9) Sent Access-Challenge Id 91 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (9) EAP-Message = 0x010000060d20 (9) Message-Authenticator = 0x00000000000000000000000000000000 (9) State = 0x45a1b60045a1bb203cf58ce5a6130bac (9) Finished request Waking up in 4.9 seconds. (10) Received Access-Request Id 92 from 192.168.1.7:40573 to 192.168.1.27:1812 length 241 (10) User-Name = "oktaradius@contentful.com" (10) NAS-IP-Address = 192.168.1.7 (10) NAS-Identifier = "F09FC2307B82DFB616DF" (10) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (10) NAS-Port-Type = Wireless-802.11 (10) Service-Type = Framed-User (10) Calling-Station-Id = "8C-85-90-C9-C4-A5" (10) Connect-Info = "CONNECT 0Mbps 802.11b" (10) Acct-Session-Id = "F4E3DF614E08A6E7" (10) WLAN-Pairwise-Cipher = 1027076 (10) WLAN-Group-Cipher = 1027074 (10) WLAN-AKM-Suite = 1027073 (10) Framed-MTU = 1400 (10) EAP-Message = 0x020000080319152b (10) State = 0x45a1b60045a1bb203cf58ce5a6130bac (10) Message-Authenticator = 0xd26c1062637c92beeaf01d2c1b916ad1 (10) session-state: No cached attributes (10) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (10) authorize { (10) update control { (10) Proxy-To-Realm := LOCAL (10) } # update control = noop (10) eap: Peer sent EAP Response (code 2) ID 0 length 8 (10) eap: No EAP Start, assuming it's an on-going EAP conversation (10) [eap] = updated (10) [pap] = noop (10) if (User-Password) { (10) if (User-Password) -> FALSE (10) } # authorize = updated (10) Found Auth-Type = eap (10) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (10) authenticate { (10) eap: Expiring EAP session with state 0x8e5e79f886026037 (10) eap: Finished EAP session with state 0x45a1b60045a1bb20 (10) eap: Previous EAP request found for state 0x45a1b60045a1bb20, released from the list (10) eap: Peer sent packet with method EAP NAK (3) (10) eap: Found mutually acceptable type PEAP (25) (10) eap: Calling submodule eap_peap to process data (10) eap_peap: Initiating new EAP-TLS session (10) eap_peap: [eaptls start] = request (10) eap: Sending EAP Request (code 1) ID 1 length 6 (10) eap: EAP session adding &reply:State = 0x45a1b60044a0af20 (10) [eap] = handled (10) } # authenticate = handled (10) Using Post-Auth-Type Challenge (10) Post-Auth-Type sub-section not found. Ignoring. (10) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (10) Sent Access-Challenge Id 92 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (10) EAP-Message = 0x010100061920 (10) Message-Authenticator = 0x00000000000000000000000000000000 (10) State = 0x45a1b60044a0af203cf58ce5a6130bac (10) Finished request Waking up in 4.9 seconds. (11) Received Access-Request Id 93 from 192.168.1.7:40573 to 192.168.1.27:1812 length 394 (11) User-Name = "oktaradius@contentful.com" (11) NAS-IP-Address = 192.168.1.7 (11) NAS-Identifier = "F09FC2307B82DFB616DF" (11) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (11) NAS-Port-Type = Wireless-802.11 (11) Service-Type = Framed-User (11) Calling-Station-Id = "8C-85-90-C9-C4-A5" (11) Connect-Info = "CONNECT 0Mbps 802.11b" (11) Acct-Session-Id = "F4E3DF614E08A6E7" (11) WLAN-Pairwise-Cipher = 1027076 (11) WLAN-Group-Cipher = 1027074 (11) WLAN-AKM-Suite = 1027073 (11) Framed-MTU = 1400 (11) EAP-Message = 0x020100a119800000009716030100920100008e03035d3b1e7215b3678f88d097ae9174a206a45b0ff2c31450ec4417b02c0a38eec800002c00ffc02cc02bc024c023c00ac009c008c030c02fc028c027c014c013c012009d009c003d003c0035002f000a01000039000a00080006001700180019000b00 (11) State = 0x45a1b60044a0af203cf58ce5a6130bac (11) Message-Authenticator = 0x594cea32c50ad57f863d8a9ec6948b2e (11) session-state: No cached attributes (11) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (11) authorize { (11) update control { (11) Proxy-To-Realm := LOCAL (11) } # update control = noop (11) eap: Peer sent EAP Response (code 2) ID 1 length 161 (11) eap: Continuing tunnel setup (11) [eap] = ok (11) } # authorize = ok (11) Found Auth-Type = eap (11) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (11) authenticate { (11) eap: Expiring EAP session with state 0x8e5e79f886026037 (11) eap: Finished EAP session with state 0x45a1b60044a0af20 (11) eap: Previous EAP request found for state 0x45a1b60044a0af20, released from the list (11) eap: Peer sent packet with method EAP PEAP (25) (11) eap: Calling submodule eap_peap to process data (11) eap_peap: Continuing EAP-TLS (11) eap_peap: Peer indicated complete TLS record size will be 151 bytes (11) eap_peap: Got complete TLS record (151 bytes) (11) eap_peap: [eaptls verify] = length included (11) eap_peap: (other): before SSL initialization (11) eap_peap: TLS_accept: before SSL initialization (11) eap_peap: TLS_accept: before SSL initialization (11) eap_peap: <<< recv UNKNOWN TLS VERSION ?0304? [length 0092] (11) eap_peap: TLS_accept: SSLv3/TLS read client hello (11) eap_peap: >>> send TLS 1.2 [length 003d] (11) eap_peap: TLS_accept: SSLv3/TLS write server hello (11) eap_peap: >>> send TLS 1.2 [length 08d3] (11) eap_peap: TLS_accept: SSLv3/TLS write certificate (11) eap_peap: >>> send TLS 1.2 [length 014d] (11) eap_peap: TLS_accept: SSLv3/TLS write key exchange (11) eap_peap: >>> send TLS 1.2 [length 0004] (11) eap_peap: TLS_accept: SSLv3/TLS write server done (11) eap_peap: TLS_accept: Need to read more data: SSLv3/TLS write server done (11) eap_peap: In SSL Handshake Phase (11) eap_peap: In SSL Accept mode (11) eap_peap: [eaptls process] = handled (11) eap: Sending EAP Request (code 1) ID 2 length 1004 (11) eap: EAP session adding &reply:State = 0x45a1b60047a3af20 (11) [eap] = handled (11) } # authenticate = handled (11) Using Post-Auth-Type Challenge (11) Post-Auth-Type sub-section not found. Ignoring. (11) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (11) Sent Access-Challenge Id 93 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (11) EAP-Message = 0x010203ec19c000000a75160303003d020000390303af8f364d831067979b542ea739eaa440ab008d66ab057417430d84bddc45b08600c030000011ff01000100000b0004030001020017000016030308d30b0008cf0008cc0003de308203da308202c2a003020102020101300d06092a864886f70d0101 (11) Message-Authenticator = 0x00000000000000000000000000000000 (11) State = 0x45a1b60047a3af203cf58ce5a6130bac (11) Finished request Waking up in 4.9 seconds. (12) Received Access-Request Id 94 from 192.168.1.7:40573 to 192.168.1.27:1812 length 239 (12) User-Name = "oktaradius@contentful.com" (12) NAS-IP-Address = 192.168.1.7 (12) NAS-Identifier = "F09FC2307B82DFB616DF" (12) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (12) NAS-Port-Type = Wireless-802.11 (12) Service-Type = Framed-User (12) Calling-Station-Id = "8C-85-90-C9-C4-A5" (12) Connect-Info = "CONNECT 0Mbps 802.11b" (12) Acct-Session-Id = "F4E3DF614E08A6E7" (12) WLAN-Pairwise-Cipher = 1027076 (12) WLAN-Group-Cipher = 1027074 (12) WLAN-AKM-Suite = 1027073 (12) Framed-MTU = 1400 (12) EAP-Message = 0x020200061900 (12) State = 0x45a1b60047a3af203cf58ce5a6130bac (12) Message-Authenticator = 0x7de649bfa0533526fa345816cd065d6a (12) session-state: No cached attributes (12) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (12) authorize { (12) update control { (12) Proxy-To-Realm := LOCAL (12) } # update control = noop (12) eap: Peer sent EAP Response (code 2) ID 2 length 6 (12) eap: Continuing tunnel setup (12) [eap] = ok (12) } # authorize = ok (12) Found Auth-Type = eap (12) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (12) authenticate { (12) eap: Expiring EAP session with state 0x8e5e79f886026037 (12) eap: Finished EAP session with state 0x45a1b60047a3af20 (12) eap: Previous EAP request found for state 0x45a1b60047a3af20, released from the list (12) eap: Peer sent packet with method EAP PEAP (25) (12) eap: Calling submodule eap_peap to process data (12) eap_peap: Continuing EAP-TLS (12) eap_peap: Peer ACKed our handshake fragment (12) eap_peap: [eaptls verify] = request (12) eap_peap: [eaptls process] = handled (12) eap: Sending EAP Request (code 1) ID 3 length 1000 (12) eap: EAP session adding &reply:State = 0x45a1b60046a2af20 (12) [eap] = handled (12) } # authenticate = handled (12) Using Post-Auth-Type Challenge (12) Post-Auth-Type sub-section not found. Ignoring. (12) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (12) Sent Access-Challenge Id 94 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (12) EAP-Message = 0x010303e819401243396539a2f1ad1b6a17603569def5a0794b3af441b40273fd27a0361b18742b5e898d798d94b85c2aaa4ede14cfe7c5f7406c7d5eb178bc1e609fbfefb1920ce1f720d4bbd7ea7e4c91a2b00004e8308204e4308203cca003020102020900c803dae017bc13c5300d06092a864886f7 (12) Message-Authenticator = 0x00000000000000000000000000000000 (12) State = 0x45a1b60046a2af203cf58ce5a6130bac (12) Finished request Waking up in 4.9 seconds. (13) Received Access-Request Id 95 from 192.168.1.7:40573 to 192.168.1.27:1812 length 239 (13) User-Name = "oktaradius@contentful.com" (13) NAS-IP-Address = 192.168.1.7 (13) NAS-Identifier = "F09FC2307B82DFB616DF" (13) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (13) NAS-Port-Type = Wireless-802.11 (13) Service-Type = Framed-User (13) Calling-Station-Id = "8C-85-90-C9-C4-A5" (13) Connect-Info = "CONNECT 0Mbps 802.11b" (13) Acct-Session-Id = "F4E3DF614E08A6E7" (13) WLAN-Pairwise-Cipher = 1027076 (13) WLAN-Group-Cipher = 1027074 (13) WLAN-AKM-Suite = 1027073 (13) Framed-MTU = 1400 (13) EAP-Message = 0x020300061900 (13) State = 0x45a1b60046a2af203cf58ce5a6130bac (13) Message-Authenticator = 0xc28f2af0b0b0b49e5b2414cf69a55d65 (13) session-state: No cached attributes (13) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (13) authorize { (13) update control { (13) Proxy-To-Realm := LOCAL (13) } # update control = noop (13) eap: Peer sent EAP Response (code 2) ID 3 length 6 (13) eap: Continuing tunnel setup (13) [eap] = ok (13) } # authorize = ok (13) Found Auth-Type = eap (13) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (13) authenticate { (13) eap: Expiring EAP session with state 0x8e5e79f886026037 (13) eap: Finished EAP session with state 0x45a1b60046a2af20 (13) eap: Previous EAP request found for state 0x45a1b60046a2af20, released from the list (13) eap: Peer sent packet with method EAP PEAP (25) (13) eap: Calling submodule eap_peap to process data (13) eap_peap: Continuing EAP-TLS (13) eap_peap: Peer ACKed our handshake fragment (13) eap_peap: [eaptls verify] = request (13) eap_peap: [eaptls process] = handled (13) eap: Sending EAP Request (code 1) ID 4 length 695 (13) eap: EAP session adding &reply:State = 0x45a1b60041a5af20 (13) [eap] = handled (13) } # authenticate = handled (13) Using Post-Auth-Type Challenge (13) Post-Auth-Type sub-section not found. Ignoring. (13) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (13) Sent Access-Challenge Id 95 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (13) EAP-Message = 0x010402b719000101ff040530030101ff30360603551d1f042f302d302ba029a0278625687474703a2f2f7777772e6578616d706c652e6f72672f6578616d706c655f63612e63726c300d06092a864886f70d01010b0500038201010093b7088d1eca7efc8d6342f26a50a6514cb1333be0b8cce368e35f (13) Message-Authenticator = 0x00000000000000000000000000000000 (13) State = 0x45a1b60041a5af203cf58ce5a6130bac (13) Finished request Waking up in 4.9 seconds. (14) Received Access-Request Id 96 from 192.168.1.7:40573 to 192.168.1.27:1812 length 369 (14) User-Name = "oktaradius@contentful.com" (14) NAS-IP-Address = 192.168.1.7 (14) NAS-Identifier = "F09FC2307B82DFB616DF" (14) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (14) NAS-Port-Type = Wireless-802.11 (14) Service-Type = Framed-User (14) Calling-Station-Id = "8C-85-90-C9-C4-A5" (14) Connect-Info = "CONNECT 0Mbps 802.11b" (14) Acct-Session-Id = "F4E3DF614E08A6E7" (14) WLAN-Pairwise-Cipher = 1027076 (14) WLAN-Group-Cipher = 1027074 (14) WLAN-AKM-Suite = 1027073 (14) Framed-MTU = 1400 (14) EAP-Message = 0x0204008819800000007e160303004610000042410489af273349ec0aff39ef9b564988ef3fcc4972fb8903571c2dd74944f09cb378d5cd184f17c90f37cbfd46fcbcf3f592510e4aaa79bd7af5e85b9cfeb6fe18f91403030001011603030028809cad750f6dbea104571008c2ec8a3004448fddd75f8d (14) State = 0x45a1b60041a5af203cf58ce5a6130bac (14) Message-Authenticator = 0x1619952b015d109a3971e25afe8d6c71 (14) session-state: No cached attributes (14) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (14) authorize { (14) update control { (14) Proxy-To-Realm := LOCAL (14) } # update control = noop (14) eap: Peer sent EAP Response (code 2) ID 4 length 136 (14) eap: Continuing tunnel setup (14) [eap] = ok (14) } # authorize = ok (14) Found Auth-Type = eap (14) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (14) authenticate { (14) eap: Expiring EAP session with state 0x8e5e79f886026037 (14) eap: Finished EAP session with state 0x45a1b60041a5af20 (14) eap: Previous EAP request found for state 0x45a1b60041a5af20, released from the list (14) eap: Peer sent packet with method EAP PEAP (25) (14) eap: Calling submodule eap_peap to process data (14) eap_peap: Continuing EAP-TLS (14) eap_peap: Peer indicated complete TLS record size will be 126 bytes (14) eap_peap: Got complete TLS record (126 bytes) (14) eap_peap: [eaptls verify] = length included (14) eap_peap: TLS_accept: SSLv3/TLS write server done (14) eap_peap: <<< recv TLS 1.2 [length 0046] (14) eap_peap: TLS_accept: SSLv3/TLS read client key exchange (14) eap_peap: TLS_accept: SSLv3/TLS read change cipher spec (14) eap_peap: <<< recv TLS 1.2 [length 0010] (14) eap_peap: TLS_accept: SSLv3/TLS read finished (14) eap_peap: >>> send TLS 1.2 [length 0001] (14) eap_peap: TLS_accept: SSLv3/TLS write change cipher spec (14) eap_peap: >>> send TLS 1.2 [length 0010] (14) eap_peap: TLS_accept: SSLv3/TLS write finished (14) eap_peap: (other): SSL negotiation finished successfully (14) eap_peap: SSL Connection Established (14) eap_peap: [eaptls process] = handled (14) eap: Sending EAP Request (code 1) ID 5 length 57 (14) eap: EAP session adding &reply:State = 0x45a1b60040a4af20 (14) [eap] = handled (14) } # authenticate = handled (14) Using Post-Auth-Type Challenge (14) Post-Auth-Type sub-section not found. Ignoring. (14) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (14) Sent Access-Challenge Id 96 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (14) EAP-Message = 0x0105003919001403030001011603030028d50708081d6cd0f58618ff3be735cc543b658761fdbcb9c916f17f8e5c75ea2d052c68aa9d948577 (14) Message-Authenticator = 0x00000000000000000000000000000000 (14) State = 0x45a1b60040a4af203cf58ce5a6130bac (14) Finished request Waking up in 4.9 seconds. (15) Received Access-Request Id 97 from 192.168.1.7:40573 to 192.168.1.27:1812 length 239 (15) User-Name = "oktaradius@contentful.com" (15) NAS-IP-Address = 192.168.1.7 (15) NAS-Identifier = "F09FC2307B82DFB616DF" (15) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (15) NAS-Port-Type = Wireless-802.11 (15) Service-Type = Framed-User (15) Calling-Station-Id = "8C-85-90-C9-C4-A5" (15) Connect-Info = "CONNECT 0Mbps 802.11b" (15) Acct-Session-Id = "F4E3DF614E08A6E7" (15) WLAN-Pairwise-Cipher = 1027076 (15) WLAN-Group-Cipher = 1027074 (15) WLAN-AKM-Suite = 1027073 (15) Framed-MTU = 1400 (15) EAP-Message = 0x020500061900 (15) State = 0x45a1b60040a4af203cf58ce5a6130bac (15) Message-Authenticator = 0x90b0f463f5ece750c76938493bef73e4 (15) session-state: No cached attributes (15) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (15) authorize { (15) update control { (15) Proxy-To-Realm := LOCAL (15) } # update control = noop (15) eap: Peer sent EAP Response (code 2) ID 5 length 6 (15) eap: Continuing tunnel setup (15) [eap] = ok (15) } # authorize = ok (15) Found Auth-Type = eap (15) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (15) authenticate { (15) eap: Expiring EAP session with state 0x8e5e79f886026037 (15) eap: Finished EAP session with state 0x45a1b60040a4af20 (15) eap: Previous EAP request found for state 0x45a1b60040a4af20, released from the list (15) eap: Peer sent packet with method EAP PEAP (25) (15) eap: Calling submodule eap_peap to process data (15) eap_peap: Continuing EAP-TLS (15) eap_peap: Peer ACKed our handshake fragment. handshake is finished (15) eap_peap: [eaptls verify] = success (15) eap_peap: [eaptls process] = success (15) eap_peap: Session established. Decoding tunneled attributes (15) eap_peap: PEAP state TUNNEL ESTABLISHED (15) eap: Sending EAP Request (code 1) ID 6 length 40 (15) eap: EAP session adding &reply:State = 0x45a1b60043a7af20 (15) [eap] = handled (15) } # authenticate = handled (15) Using Post-Auth-Type Challenge (15) Post-Auth-Type sub-section not found. Ignoring. (15) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (15) Sent Access-Challenge Id 97 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (15) EAP-Message = 0x010600281900170303001dd50708081d6cd0f6eebf0296c3de40ed139ef68f1f5f6d24dca9580567 (15) Message-Authenticator = 0x00000000000000000000000000000000 (15) State = 0x45a1b60043a7af203cf58ce5a6130bac (15) Finished request Waking up in 4.9 seconds. (16) Received Access-Request Id 98 from 192.168.1.7:40573 to 192.168.1.27:1812 length 294 (16) User-Name = "oktaradius@contentful.com" (16) NAS-IP-Address = 192.168.1.7 (16) NAS-Identifier = "F09FC2307B82DFB616DF" (16) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (16) NAS-Port-Type = Wireless-802.11 (16) Service-Type = Framed-User (16) Calling-Station-Id = "8C-85-90-C9-C4-A5" (16) Connect-Info = "CONNECT 0Mbps 802.11b" (16) Acct-Session-Id = "F4E3DF614E08A6E7" (16) WLAN-Pairwise-Cipher = 1027076 (16) WLAN-Group-Cipher = 1027074 (16) WLAN-AKM-Suite = 1027073 (16) Framed-MTU = 1400 (16) EAP-Message = 0x0206003d19001703030032809cad750f6dbea296105b25d092639083e9f94364d1542cb7346480cd940bb4db72582cbab017c3eb64fcd418b590f53045 (16) State = 0x45a1b60043a7af203cf58ce5a6130bac (16) Message-Authenticator = 0x30f9a4cf8ef936618752f4c9cde86cca (16) session-state: No cached attributes (16) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (16) authorize { (16) update control { (16) Proxy-To-Realm := LOCAL (16) } # update control = noop (16) eap: Peer sent EAP Response (code 2) ID 6 length 61 (16) eap: Continuing tunnel setup (16) [eap] = ok (16) } # authorize = ok (16) Found Auth-Type = eap (16) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (16) authenticate { (16) eap: Expiring EAP session with state 0x8e5e79f886026037 (16) eap: Finished EAP session with state 0x45a1b60043a7af20 (16) eap: Previous EAP request found for state 0x45a1b60043a7af20, released from the list (16) eap: Peer sent packet with method EAP PEAP (25) (16) eap: Calling submodule eap_peap to process data (16) eap_peap: Continuing EAP-TLS (16) eap_peap: [eaptls verify] = ok (16) eap_peap: Done initial handshake (16) eap_peap: [eaptls process] = ok (16) eap_peap: Session established. Decoding tunneled attributes (16) eap_peap: PEAP state WAITING FOR INNER IDENTITY (16) eap_peap: Identity - oktaradius@contentful.com (16) eap_peap: Got inner identity 'oktaradius@contentful.com' (16) eap_peap: Setting default EAP type for tunneled EAP session (16) eap_peap: Got tunneled request (16) eap_peap: EAP-Message = 0x0206001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (16) eap_peap: Setting User-Name to oktaradius@contentful.com (16) eap_peap: Sending tunneled request to inner-tunnel (16) eap_peap: EAP-Message = 0x0206001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (16) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (16) eap_peap: User-Name = "oktaradius@contentful.com" (16) eap_peap: NAS-IP-Address = 192.168.1.7 (16) eap_peap: NAS-Identifier = "F09FC2307B82DFB616DF" (16) eap_peap: Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (16) eap_peap: NAS-Port-Type = Wireless-802.11 (16) eap_peap: Service-Type = Framed-User (16) eap_peap: Calling-Station-Id = "8C-85-90-C9-C4-A5" (16) eap_peap: Connect-Info = "CONNECT 0Mbps 802.11b" (16) eap_peap: Acct-Session-Id = "F4E3DF614E08A6E7" (16) eap_peap: WLAN-Pairwise-Cipher = 1027076 (16) eap_peap: WLAN-Group-Cipher = 1027074 (16) eap_peap: WLAN-AKM-Suite = 1027073 (16) eap_peap: Framed-MTU = 1400 (16) Virtual server inner-tunnel received request (16) EAP-Message = 0x0206001e016f6b746172616469757340636f6e74656e7466756c2e636f6d (16) FreeRADIUS-Proxied-To = 127.0.0.1 (16) User-Name = "oktaradius@contentful.com" (16) NAS-IP-Address = 192.168.1.7 (16) NAS-Identifier = "F09FC2307B82DFB616DF" (16) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (16) NAS-Port-Type = Wireless-802.11 (16) Service-Type = Framed-User (16) Calling-Station-Id = "8C-85-90-C9-C4-A5" (16) Connect-Info = "CONNECT 0Mbps 802.11b" (16) Acct-Session-Id = "F4E3DF614E08A6E7" (16) WLAN-Pairwise-Cipher = 1027076 (16) WLAN-Group-Cipher = 1027074 (16) WLAN-AKM-Suite = 1027073 (16) Framed-MTU = 1400 (16) WARNING: Outer and inner identities are the same. User privacy is compromised. (16) server inner-tunnel { (16) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (16) authorize { (16) update control { (16) Proxy-To-Realm := LOCAL (16) } # update control = noop (16) eap: Peer sent EAP Response (code 2) ID 6 length 30 (16) eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize (16) [eap] = ok (16) } # authorize = ok (16) Found Auth-Type = eap (16) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (16) authenticate { (16) eap: Peer sent packet with method EAP Identity (1) (16) eap: Calling submodule eap_gtc to process data (16) eap_gtc: EXPAND Password: (16) eap_gtc: --> Password: (16) eap: Sending EAP Request (code 1) ID 7 length 15 (16) eap: EAP session adding &reply:State = 0x3a620f0e3a650909 (16) [eap] = handled (16) } # authenticate = handled (16) } # server inner-tunnel (16) Virtual server sending reply (16) EAP-Message = 0x0107000f0650617373776f72643a20 (16) Message-Authenticator = 0x00000000000000000000000000000000 (16) State = 0x3a620f0e3a6509095b1e601543adb3d7 (16) eap_peap: Got tunneled reply code 11 (16) eap_peap: EAP-Message = 0x0107000f0650617373776f72643a20 (16) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (16) eap_peap: State = 0x3a620f0e3a6509095b1e601543adb3d7 (16) eap_peap: Got tunneled reply RADIUS code 11 (16) eap_peap: EAP-Message = 0x0107000f0650617373776f72643a20 (16) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (16) eap_peap: State = 0x3a620f0e3a6509095b1e601543adb3d7 (16) eap_peap: Got tunneled Access-Challenge (16) eap: Sending EAP Request (code 1) ID 7 length 46 (16) eap: EAP session adding &reply:State = 0x45a1b60042a6af20 (16) [eap] = handled (16) } # authenticate = handled (16) Using Post-Auth-Type Challenge (16) Post-Auth-Type sub-section not found. Ignoring. (16) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (16) Sent Access-Challenge Id 98 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (16) EAP-Message = 0x0107002e19001703030023d50708081d6cd0f7081aeb7d5b48735ede48e96b552ab53673ac37d4aa7fe1f7caadd0 (16) Message-Authenticator = 0x00000000000000000000000000000000 (16) State = 0x45a1b60042a6af203cf58ce5a6130bac (16) Finished request Waking up in 4.9 seconds. (17) Received Access-Request Id 99 from 192.168.1.7:40573 to 192.168.1.27:1812 length 281 (17) User-Name = "oktaradius@contentful.com" (17) NAS-IP-Address = 192.168.1.7 (17) NAS-Identifier = "F09FC2307B82DFB616DF" (17) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (17) NAS-Port-Type = Wireless-802.11 (17) Service-Type = Framed-User (17) Calling-Station-Id = "8C-85-90-C9-C4-A5" (17) Connect-Info = "CONNECT 0Mbps 802.11b" (17) Acct-Session-Id = "F4E3DF614E08A6E7" (17) WLAN-Pairwise-Cipher = 1027076 (17) WLAN-Group-Cipher = 1027074 (17) WLAN-AKM-Suite = 1027073 (17) Framed-MTU = 1400 (17) EAP-Message = 0x0207003019001703030025809cad750f6dbea3f1a1f30ac18a7a24bba1605a37789e2b425d90c1973b4210e9111e2b40 (17) State = 0x45a1b60042a6af203cf58ce5a6130bac (17) Message-Authenticator = 0x9fd2a36dd28c1f5e53e1c8e60cfc589e (17) session-state: No cached attributes (17) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) authorize { (17) update control { (17) Proxy-To-Realm := LOCAL (17) } # update control = noop (17) eap: Peer sent EAP Response (code 2) ID 7 length 48 (17) eap: Continuing tunnel setup (17) [eap] = ok (17) } # authorize = ok (17) Found Auth-Type = eap (17) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) authenticate { (17) eap: Expiring EAP session with state 0x8e5e79f886026037 (17) eap: Finished EAP session with state 0x45a1b60042a6af20 (17) eap: Previous EAP request found for state 0x45a1b60042a6af20, released from the list (17) eap: Peer sent packet with method EAP PEAP (25) (17) eap: Calling submodule eap_peap to process data (17) eap_peap: Continuing EAP-TLS (17) eap_peap: [eaptls verify] = ok (17) eap_peap: Done initial handshake (17) eap_peap: [eaptls process] = ok (17) eap_peap: Session established. Decoding tunneled attributes (17) eap_peap: PEAP state phase2 (17) eap_peap: EAP method GTC (6) (17) eap_peap: Got tunneled request (17) eap_peap: EAP-Message = 0x0207001106426574415468657441313335 (17) eap_peap: Setting User-Name to oktaradius@contentful.com (17) eap_peap: Sending tunneled request to inner-tunnel (17) eap_peap: EAP-Message = 0x0207001106426574415468657441313335 (17) eap_peap: FreeRADIUS-Proxied-To = 127.0.0.1 (17) eap_peap: User-Name = "oktaradius@contentful.com" (17) eap_peap: State = 0x3a620f0e3a6509095b1e601543adb3d7 (17) eap_peap: NAS-IP-Address = 192.168.1.7 (17) eap_peap: NAS-Identifier = "F09FC2307B82DFB616DF" (17) eap_peap: Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (17) eap_peap: NAS-Port-Type = Wireless-802.11 (17) eap_peap: Service-Type = Framed-User (17) eap_peap: Calling-Station-Id = "8C-85-90-C9-C4-A5" (17) eap_peap: Connect-Info = "CONNECT 0Mbps 802.11b" (17) eap_peap: Acct-Session-Id = "F4E3DF614E08A6E7" (17) eap_peap: WLAN-Pairwise-Cipher = 1027076 (17) eap_peap: WLAN-Group-Cipher = 1027074 (17) eap_peap: WLAN-AKM-Suite = 1027073 (17) eap_peap: Framed-MTU = 1400 (17) Virtual server inner-tunnel received request (17) EAP-Message = 0x0207001106426574415468657441313335 (17) FreeRADIUS-Proxied-To = 127.0.0.1 (17) User-Name = "oktaradius@contentful.com" (17) State = 0x3a620f0e3a6509095b1e601543adb3d7 (17) NAS-IP-Address = 192.168.1.7 (17) NAS-Identifier = "F09FC2307B82DFB616DF" (17) Called-Station-Id = "F0-9F-C2-32-7B-82:Seko" (17) NAS-Port-Type = Wireless-802.11 (17) Service-Type = Framed-User (17) Calling-Station-Id = "8C-85-90-C9-C4-A5" (17) Connect-Info = "CONNECT 0Mbps 802.11b" (17) Acct-Session-Id = "F4E3DF614E08A6E7" (17) WLAN-Pairwise-Cipher = 1027076 (17) WLAN-Group-Cipher = 1027074 (17) WLAN-AKM-Suite = 1027073 (17) Framed-MTU = 1400 (17) WARNING: Outer and inner identities are the same. User privacy is compromised. (17) server inner-tunnel { (17) session-state: No cached attributes (17) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) authorize { (17) update control { (17) Proxy-To-Realm := LOCAL (17) } # update control = noop (17) eap: Peer sent EAP Response (code 2) ID 7 length 17 (17) eap: No EAP Start, assuming it's an on-going EAP conversation (17) [eap] = updated (17) [pap] = noop (17) if (User-Password) { (17) if (User-Password) -> FALSE (17) } # authorize = updated (17) Found Auth-Type = eap (17) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) authenticate { (17) eap: Expiring EAP session with state 0x8e5e79f886026037 (17) eap: Finished EAP session with state 0x3a620f0e3a650909 (17) eap: Previous EAP request found for state 0x3a620f0e3a650909, released from the list (17) eap: Peer sent packet with method EAP GTC (6) (17) eap: Calling submodule eap_gtc to process data (17) eap_gtc: # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) eap_gtc: Auth-Type PAP { rlm_ldap (ldap): Closing connection (1): Hit idle_timeout, was idle for 72 seconds rlm_ldap (ldap): Closing connection (2): Hit idle_timeout, was idle for 71 seconds rlm_ldap (ldap): Closing connection (3): Hit idle_timeout, was idle for 70 seconds rlm_ldap (ldap): Closing connection (4): Hit idle_timeout, was idle for 69 seconds rlm_ldap (ldap): You probably need to lower "min" rlm_ldap (ldap): Reserved connection (0) (17) ldap: Login attempt by "oktaradius@contentful.com" (17) ldap: Waiting for bind result... (17) ldap: Bind successful (17) ldap: EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}}) (17) ldap: --> (uid=oktaradius@contentful.com) (17) ldap: Performing search in "ou=users,dc=contentful, dc=oktapreview, dc=com" with filter "(uid=oktaradius@contentful.com)", scope "sub" (17) ldap: Waiting for search result... (17) ldap: User object found at DN "uid=oktaradius@contentful.com ,ou=users,dc=contentful,dc=oktapreview,dc=com" (17) ldap: Waiting for bind result... (17) ldap: Bind successful (17) ldap: Bind as user "uid=oktaradius@contentful.com,ou=users,dc=contentful,dc=oktapreview,dc=com" was successful rlm_ldap (ldap): Released connection (0) Need 1 more connections to reach min connections (3) rlm_ldap (ldap): Opening additional connection (6), 1 of 30 pending slots used rlm_ldap (ldap): Connecting to ldap://contentful.ldap.oktapreview.com:636 rlm_ldap (ldap): Waiting for bind result... rlm_ldap (ldap): Bind successful (17) [ldap] = ok (17) } # Auth-Type PAP = ok (17) eap: Sending EAP Success (code 3) ID 7 length 4 (17) eap: Freeing handler (17) [eap] = ok (17) } # authenticate = ok (17) # Executing section post-auth from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) } # server inner-tunnel (17) Virtual server sending reply (17) EAP-Message = 0x03070004 (17) Message-Authenticator = 0x00000000000000000000000000000000 (17) User-Name = "oktaradius@contentful.com" (17) eap_peap: Got tunneled reply code 2 (17) eap_peap: EAP-Message = 0x03070004 (17) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (17) eap_peap: User-Name = "oktaradius@contentful.com" (17) eap_peap: Got tunneled reply RADIUS code 2 (17) eap_peap: EAP-Message = 0x03070004 (17) eap_peap: Message-Authenticator = 0x00000000000000000000000000000000 (17) eap_peap: User-Name = "oktaradius@contentful.com" (17) eap_peap: Tunneled authentication was successful (17) eap_peap: SUCCESS (17) eap_peap: Saving tunneled attributes for later (17) eap: Sending EAP Request (code 1) ID 8 length 46 (17) eap: EAP session adding &reply:State = 0x45a1b6004da9af20 (17) [eap] = handled (17) } # authenticate = handled (17) Using Post-Auth-Type Challenge (17) Post-Auth-Type sub-section not found. Ignoring. (17) # Executing group from file /etc/freeradius/3.0/sites-enabled/inner-tunnel (17) Sent Access-Challenge Id 99 from 192.168.1.27:1812 to 192.168.1.7:40573 length 0 (17) EAP-Message = 0x0108002e19001703030023d50708081d6cd0f8afcb22e0f8e0332255e42661c24882389b0d4b344c5bc5d07a9ece (17) Message-Authenticator = 0x00000000000000000000000000000000 (17) State = 0x45a1b6004da9af203cf58ce5a6130bac (17) Finished request Waking up in 2.6 seconds. (9) Cleaning up request packet ID 91 with timestamp +69 (10) Cleaning up request packet ID 92 with timestamp +69 (11) Cleaning up request packet ID 93 with timestamp +69 (12) Cleaning up request packet ID 94 with timestamp +69 (13) Cleaning up request packet ID 95 with timestamp +69 (14) Cleaning up request packet ID 96 with timestamp +69 (15) Cleaning up request packet ID 97 with timestamp +69 (16) Cleaning up request packet ID 98 with timestamp +69 Waking up in 2.2 seconds. (17) Cleaning up request packet ID 99 with timestamp +69 Ready to process requests what do you think ? -- Nawar Al Tarazi IT Working Student nawar.tarazi@contentful.com +4915787991702 www.contentful.com