rlm_python works in -X, fatal signal when started using systemctl (pRet is NULL)
Python 3.8.10 Ubuntu 20.04.3 LTS FreeRADIUS 3.0.20 When I go to start freeradius with systemctl I get the following: Job for freeradius.service failed because a fatal signal was delivered to the control process. See "systemctl status freeradius.service" and "journalctl -xe" for details. in journalctl -xe I find: Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:3> Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: radiusd: #### Skipping IP addresses and Ports #### Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: Configuration appears to be OK Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: do_python_single:568, detach - pRet is NULL Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: python_error_log:200, Exception type: <class 'TypeError'>, Exception value: detach() takes 0 positional > Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: do_python_single:676, detach - RLM_MODULE_FAIL Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: Fatal Python error: drop_gil: GIL is not locked Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: Python runtime state: finalizing (tstate=0x5645a861ef50) Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: Current thread 0x00007fbf9fc1c340 (most recent call first): Nov 13 16:28:51 radius-2.tor2 freeradius[318065]: <no Python frame> Nov 13 16:28:51 radius-2.tor2 systemd[1]: freeradius.service: Control process exited, code=killed, status=6/ABRT -- Subject: Unit process exited -- Defined-By: systemd -- Support:http://www.ubuntu.com/support When running freeradius -Xx the I find the following warning: Sat Nov 13 16:23:49 2021 : Debug: # Instantiating module "python3" from file /etc/freeradius/3.0/mods-enabled/python3 Sat Nov 13 16:23:49 2021 : Info: Python version: 3.8.10 (default, Sep 28 2021, 16:10:42) [GCC 9.3.0] Sat Nov 13 16:23:49 2021 : Warning: Libpython is not found among linked libraries Sat Nov 13 16:23:49 2021 : Warning: Failed loading libpython symbols into global symbol table Looking for libpython: 10233824 0 lrwxrwxrwx 1 root root 40 Sep 28 16:10 /usr/lib/python3.8/config-3.8-x86_64-linux-gnu/libpython3.8.so -> ../../x86_64-linux-gnu/libpython3.8.so.1 10224821 5324 -rw-r--r-- 1 root root 5449112 Sep 28 16:10 /usr/lib/x86_64-linux-gnu/libpython3.8.so.1.0 10233826 0 lrwxrwxrwx 1 root root 19 Sep 28 16:10 /usr/lib/x86_64-linux-gnu/libpython3.8.so.1 -> libpython3.8.so.1.0 10226896 0 lrwxrwxrwx 1 root root 17 Sep 28 16:10 /usr/lib/x86_64-linux-gnu/libpython3.8.so -> libpython3.8.so.1 I'm not sure where exactly to start, or if the pRet is NULL error is releated to the libpython warning. In rlm_python3.c I see the following: 541 if (pass_all_vps_dict) { 542 pDictInput = PyDict_New(); 543 if (pDictInput == NULL || 544 PyDict_SetItemString(pDictInput, "request", PyTuple_GET_ITEM(pArgs, 0)) || 545 PyDict_SetItemString(pDictInput, "reply", PyTuple_GET_ITEM(pArgs, 1)) || 546 PyDict_SetItemString(pDictInput, "config", PyTuple_GET_ITEM(pArgs, 2)) || 547 PyDict_SetItemString(pDictInput, "session-state", PyTuple_GET_ITEM(pArgs, 3)) 548 #ifdef WITH_PROXY 549 || 550 PyDict_SetItemString(pDictInput, "proxy-request", PyTuple_GET_ITEM(pArgs, 4)) || 551 PyDict_SetItemString(pDictInput, "proxy-reply", PyTuple_GET_ITEM(pArgs, 5)) 552 #endif 553 ) { 554 555 ERROR("%s:%d, %s - PyDict_SetItemString failed", __func__, __LINE__, funcname); 556 ret = RLM_MODULE_FAIL; 557 goto finish; 558 } 559 pRet = PyObject_CallFunctionObjArgs(pFunc, pDictInput, NULL); 560 } 561 else if (pass_all_vps) 562 pRet = PyObject_CallFunctionObjArgs(pFunc, pArgs, NULL); 563 else 564 pRet = PyObject_CallFunctionObjArgs(pFunc, PyTuple_GET_ITEM(pArgs, 0), NULL); 565 566 if (!pRet) { 567 ERROR("%s:%d, %s - pRet is NULL", __func__, __LINE__, funcname); 568 if (PyErr_Occurred()) { 569 python_error_log(); 570 } 571 ret = RLM_MODULE_FAIL; 572 goto finish; 573 } Which leads me to believe neither a tuple or dictionary is being returned by a python module? My mods-enabled/python3: # # Make sure the PYTHONPATH environmental variable contains the # directory(s) for the modules listed below. # # Uncomment any func_* which are included in your module. If # rlm_python is called for a section which does not have # a function defined, it will return NOOP. # python3 { # Path to the python modules # # Note that due to limitations on Python, this configuration # item is GLOBAL TO THE SERVER. That is, you cannot have two # instances of the python module, each with a different path. # # python_path="/path/to/python/files:/another_path/to/python_files/" module = dr_yubikey python_path = ${modconfdir}/${.:name} # Pass all VPS lists as a 6-tuple to the callbacks # (request, reply, config, state, proxy_req, proxy_reply) #pass_all_vps = yes # Pass all VPS lists as a dictionary to the callbacks # Keys: "request", "reply", "config", "session-state", "proxy-request", # "proxy-reply" # This option prevales over "pass_all_vps" #pass_all_vps_dict = no mod_instantiate = ${.module} func_instantiate = instantiate mod_detach = ${.module} func_detach = detach mod_authorize = ${.module} # func_authorize = authorize mod_authenticate = ${.module} func_authenticate = authenticate mod_preacct = ${.module} # func_preacct = preacct mod_accounting = ${.module} # func_accounting = accounting mod_checksimul = ${.module} # func_checksimul = checksimul mod_pre_proxy = ${.module} # func_pre_proxy = pre_proxy mod_post_proxy = ${.module} # func_post_proxy = post_proxy mod_post_auth = ${.module} # func_post_auth = post_auth mod_recv_coa = ${.module} # func_recv_coa = recv_coa mod_send_coa = ${.module} # func_send_coa = send_coa } Full debug from freeradius -Xx: root@radius-2:/etc/freeradius/3.0# freeradius -Xx Sat Nov 13 16:43:31 2021 : Debug: Server was built with: Sat Nov 13 16:43:31 2021 : Debug: accounting : yes Sat Nov 13 16:43:31 2021 : Debug: authentication : yes Sat Nov 13 16:43:31 2021 : Debug: ascend-binary-attributes : yes Sat Nov 13 16:43:31 2021 : Debug: coa : yes Sat Nov 13 16:43:31 2021 : Debug: control-socket : yes Sat Nov 13 16:43:31 2021 : Debug: detail : yes Sat Nov 13 16:43:31 2021 : Debug: dhcp : yes Sat Nov 13 16:43:31 2021 : Debug: dynamic-clients : yes Sat Nov 13 16:43:31 2021 : Debug: osfc2 : no Sat Nov 13 16:43:31 2021 : Debug: proxy : yes Sat Nov 13 16:43:31 2021 : Debug: regex-pcre : yes Sat Nov 13 16:43:31 2021 : Debug: regex-posix : no Sat Nov 13 16:43:31 2021 : Debug: regex-posix-extended : no Sat Nov 13 16:43:31 2021 : Debug: session-management : yes Sat Nov 13 16:43:31 2021 : Debug: stats : yes Sat Nov 13 16:43:31 2021 : Debug: systemd : yes Sat Nov 13 16:43:31 2021 : Debug: tcp : yes Sat Nov 13 16:43:31 2021 : Debug: threads : yes Sat Nov 13 16:43:31 2021 : Debug: tls : yes Sat Nov 13 16:43:31 2021 : Debug: unlang : yes Sat Nov 13 16:43:31 2021 : Debug: vmps : yes Sat Nov 13 16:43:31 2021 : Debug: developer : no Sat Nov 13 16:43:31 2021 : Debug: Server core libs: Sat Nov 13 16:43:31 2021 : Debug: freeradius-server : 3.0.20 Sat Nov 13 16:43:31 2021 : Debug: talloc : 2.3.* Sat Nov 13 16:43:31 2021 : Debug: ssl : 1.1.1f release Sat Nov 13 16:43:31 2021 : Debug: pcre : 8.39 2016-06-14 Sat Nov 13 16:43:31 2021 : Debug: Endianness: Sat Nov 13 16:43:31 2021 : Debug: little Sat Nov 13 16:43:31 2021 : Debug: Compilation flags: Sat Nov 13 16:43:31 2021 : Debug: cppflags : -Wdate-time -D_FORTIFY_SOURCE=2 Sat Nov 13 16:43:31 2021 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g -O2 -fdebug-prefix-map=/build/freeradius-bYNMsp/freeradius-3.0.20+dfsg=. -fstack-protector-strong -Wformat -Werror=format-security -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 Sat Nov 13 16:43:31 2021 : Debug: ldflags : -Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now Sat Nov 13 16:43:31 2021 : Debug: libs : -lcrypto -lssl -ltalloc -latomic -lpcre -lcap -lnsl -lresolv -ldl -lpthread -lreadline Sat Nov 13 16:43:31 2021 : Debug: Sat Nov 13 16:43:31 2021 : Info: FreeRADIUS Version 3.0.20 Sat Nov 13 16:43:31 2021 : Info: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Sat Nov 13 16:43:31 2021 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Sat Nov 13 16:43:31 2021 : Info: PARTICULAR PURPOSE Sat Nov 13 16:43:31 2021 : Info: You may redistribute copies of FreeRADIUS under the terms of the Sat Nov 13 16:43:31 2021 : Info: GNU General Public License Sat Nov 13 16:43:31 2021 : Info: For more information about these matters, see the file named COPYRIGHT Sat Nov 13 16:43:31 2021 : Info: Starting - reading configuration files ... Sat Nov 13 16:43:31 2021 : Debug: including dictionary file /usr/share/freeradius/dictionary Sat Nov 13 16:43:31 2021 : Debug: including dictionary file /usr/share/freeradius/dictionary.dhcp Sat Nov 13 16:43:31 2021 : Debug: including dictionary file /usr/share/freeradius/dictionary.vqp Sat Nov 13 16:43:31 2021 : Debug: including dictionary file /etc/freeradius/3.0/dictionary Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/radiusd.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/proxy.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/clients.conf Sat Nov 13 16:43:31 2021 : Debug: including files in directory /etc/freeradius/3.0/clients/ Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/clients/raritans.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/clients/sc.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/clients/linux-servers.conf Sat Nov 13 16:43:31 2021 : Debug: including files in directory /etc/freeradius/3.0/mods-enabled/ Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/exec Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/chap Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/cache_eap Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/ntlm_auth Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/sradutmp Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/pap Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/preprocess Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/logintime Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/passwd Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/unpack Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/soh Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/utf8 Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/echo Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/detail Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/python3 Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/mschap Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/radutmp Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/expiration Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/linelog Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/dynamic_clients Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/replicate Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/digest Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/pam Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/unix Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/files Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/mods-enabled/expr Sat Nov 13 16:43:31 2021 : Debug: including files in directory /etc/freeradius/3.0/policy.d/ Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/rfc7542 Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/eap Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/operator-name Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/abfab-tr Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/dhcp Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/filter Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/accounting Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/debug Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/cui Sat Nov 13 16:43:31 2021 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Sat Nov 13 16:43:31 2021 : Debug: OPTIMIZING (no == yes) --> FALSE Sat Nov 13 16:43:31 2021 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE Sat Nov 13 16:43:31 2021 : Debug: OPTIMIZING (no == yes) --> FALSE Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/canonicalization Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/policy.d/control Sat Nov 13 16:43:31 2021 : Debug: including files in directory /etc/freeradius/3.0/sites-enabled/ Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/sites-enabled/default Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/sites-enabled/linux-servers Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/sites-enabled/sc Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/sites-enabled/raritans Sat Nov 13 16:43:31 2021 : Debug: including configuration file /etc/freeradius/3.0/sites-enabled/inner-tunnel Sat Nov 13 16:43:31 2021 : Debug: main { Sat Nov 13 16:43:31 2021 : Debug: security { Sat Nov 13 16:43:31 2021 : Debug: user = "root" Sat Nov 13 16:43:31 2021 : Debug: group = "root" Sat Nov 13 16:43:31 2021 : Debug: allow_core_dumps = no Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[528]: The item 'max_attributes' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[546]: The item 'reject_delay' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[566]: The item 'status_server' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: name = "radiusd" Sat Nov 13 16:43:31 2021 : Debug: prefix = "/usr" Sat Nov 13 16:43:31 2021 : Debug: localstatedir = "/var" Sat Nov 13 16:43:31 2021 : Debug: logdir = "/var/log/radius" Sat Nov 13 16:43:31 2021 : Debug: run_dir = "/var/run/radiusd" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[84]: The item 'exec_prefix' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[97]: The item 'confdir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[99]: The item 'certdir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[100]: The item 'cadir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[103]: The item 'db_dir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[137]: The item 'libdir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[148]: The item 'pidfile' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[169]: The item 'correct_escapes' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[223]: The item 'max_request_time' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[242]: The item 'cleanup_delay' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[261]: The item 'max_requests' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[279]: The item 'hostname_lookups' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[382]: The item 'checkrad' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[587]: The item 'proxy_requests' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: main { Sat Nov 13 16:43:31 2021 : Debug: name = "radiusd" Sat Nov 13 16:43:31 2021 : Debug: prefix = "/usr" Sat Nov 13 16:43:31 2021 : Debug: localstatedir = "/var" Sat Nov 13 16:43:31 2021 : Debug: sbindir = "/usr/sbin" Sat Nov 13 16:43:31 2021 : Debug: logdir = "/var/log/radius" Sat Nov 13 16:43:31 2021 : Debug: run_dir = "/var/run/radiusd" Sat Nov 13 16:43:31 2021 : Debug: libdir = "/usr/lib64/freeradius" Sat Nov 13 16:43:31 2021 : Debug: radacctdir = "/var/log/radius/radacct" Sat Nov 13 16:43:31 2021 : Debug: hostname_lookups = no Sat Nov 13 16:43:31 2021 : Debug: max_request_time = 30 Sat Nov 13 16:43:31 2021 : Debug: cleanup_delay = 5 Sat Nov 13 16:43:31 2021 : Debug: max_requests = 16384 Sat Nov 13 16:43:31 2021 : Debug: pidfile = "/var/run/radiusd/radiusd.pid" Sat Nov 13 16:43:31 2021 : Debug: checkrad = "/usr/sbin/checkrad" Sat Nov 13 16:43:31 2021 : Debug: debug_level = 0 Sat Nov 13 16:43:31 2021 : Debug: proxy_requests = yes Sat Nov 13 16:43:31 2021 : Debug: log { Sat Nov 13 16:43:31 2021 : Debug: stripped_names = no Sat Nov 13 16:43:31 2021 : Debug: auth = no Sat Nov 13 16:43:31 2021 : Debug: auth_badpass = no Sat Nov 13 16:43:31 2021 : Debug: auth_goodpass = no Sat Nov 13 16:43:31 2021 : Debug: colourise = yes Sat Nov 13 16:43:31 2021 : Debug: msg_denied = "You are already logged in - access denied" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[297]: The item 'destination' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[314]: The item 'file' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[322]: The item 'syslog_facility' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: resources { Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: security { Sat Nov 13 16:43:31 2021 : Debug: max_attributes = 200 Sat Nov 13 16:43:31 2021 : Debug: reject_delay = 1.000000 Sat Nov 13 16:43:31 2021 : Debug: status_server = yes Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[84]: The item 'exec_prefix' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[97]: The item 'confdir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[99]: The item 'certdir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[100]: The item 'cadir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[103]: The item 'db_dir' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/radiusd.conf[169]: The item 'correct_escapes' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: radiusd: #### Loading Realms and Home Servers #### Sat Nov 13 16:43:31 2021 : Debug: proxy server { Sat Nov 13 16:43:31 2021 : Debug: retry_delay = 5 Sat Nov 13 16:43:31 2021 : Debug: retry_count = 3 Sat Nov 13 16:43:31 2021 : Debug: default_fallback = no Sat Nov 13 16:43:31 2021 : Debug: dead_time = 120 Sat Nov 13 16:43:31 2021 : Debug: wake_all_if_all_dead = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: home_server localhost { Sat Nov 13 16:43:31 2021 : Debug: ipaddr = 127.0.0.1 Sat Nov 13 16:43:31 2021 : Debug: port = 1812 Sat Nov 13 16:43:31 2021 : Debug: type = "auth" Sat Nov 13 16:43:31 2021 : Debug: secret = "testing123" Sat Nov 13 16:43:31 2021 : Debug: response_window = 20.000000 Sat Nov 13 16:43:31 2021 : Debug: response_timeouts = 1 Sat Nov 13 16:43:31 2021 : Debug: max_outstanding = 65536 Sat Nov 13 16:43:31 2021 : Debug: zombie_period = 40 Sat Nov 13 16:43:31 2021 : Debug: status_check = "status-server" Sat Nov 13 16:43:31 2021 : Debug: ping_interval = 30 Sat Nov 13 16:43:31 2021 : Debug: check_interval = 30 Sat Nov 13 16:43:31 2021 : Debug: check_timeout = 4 Sat Nov 13 16:43:31 2021 : Debug: num_answers_to_alive = 3 Sat Nov 13 16:43:31 2021 : Debug: revive_interval = 120 Sat Nov 13 16:43:31 2021 : Debug: limit { Sat Nov 13 16:43:31 2021 : Debug: max_connections = 16 Sat Nov 13 16:43:31 2021 : Debug: max_requests = 0 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 0 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: coa { Sat Nov 13 16:43:31 2021 : Debug: irt = 2 Sat Nov 13 16:43:31 2021 : Debug: mrt = 16 Sat Nov 13 16:43:31 2021 : Debug: mrc = 5 Sat Nov 13 16:43:31 2021 : Debug: mrd = 30 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: home_server_pool my_auth_failover { Sat Nov 13 16:43:31 2021 : Debug: type = fail-over Sat Nov 13 16:43:31 2021 : Debug: home_server = localhost Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: realm example.com { Sat Nov 13 16:43:31 2021 : Debug: auth_pool = my_auth_failover Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: realm LOCAL { Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: radiusd: #### Loading Clients #### Sat Nov 13 16:43:31 2021 : Debug: client localhost { Sat Nov 13 16:43:31 2021 : Debug: ipaddr = 127.0.0.1 Sat Nov 13 16:43:31 2021 : Debug: require_message_authenticator = no Sat Nov 13 16:43:31 2021 : Debug: secret = "testing123" Sat Nov 13 16:43:31 2021 : Debug: nas_type = "other" Sat Nov 13 16:43:31 2021 : Debug: proto = "*" Sat Nov 13 16:43:31 2021 : Debug: limit { Sat Nov 13 16:43:31 2021 : Debug: max_connections = 16 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 30 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32 Sat Nov 13 16:43:31 2021 : Debug: client localhost_ipv6 { Sat Nov 13 16:43:31 2021 : Debug: ipv6addr = ::1 Sat Nov 13 16:43:31 2021 : Debug: require_message_authenticator = no Sat Nov 13 16:43:31 2021 : Debug: secret = "testing123" Sat Nov 13 16:43:31 2021 : Debug: limit { Sat Nov 13 16:43:31 2021 : Debug: max_connections = 16 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 30 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Adding client XX.XX.XX.XX/32 (XX.XX.XX.XX) to prefix tree 32 Sat Nov 13 16:43:31 2021 : Debug: client raritan-001 { Sat Nov 13 16:43:31 2021 : Debug: ipaddr = XX.XX.XX.XX Sat Nov 13 16:43:31 2021 : Debug: require_message_authenticator = no Sat Nov 13 16:43:31 2021 : Debug: secret = "******" Sat Nov 13 16:43:31 2021 : Debug: nas_type = "other" Sat Nov 13 16:43:31 2021 : Debug: virtual_server = "raritans" Sat Nov 13 16:43:31 2021 : Debug: proto = "*" Sat Nov 13 16:43:31 2021 : Debug: limit { Sat Nov 13 16:43:31 2021 : Debug: max_connections = 8 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 30 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: Debugger not attached Sat Nov 13 16:43:31 2021 : Info: systemd watchdog is disabled Sat Nov 13 16:43:31 2021 : Debug: # Creating Auth-Type = PAP Sat Nov 13 16:43:31 2021 : Debug: # Creating Auth-Type = CHAP Sat Nov 13 16:43:31 2021 : Debug: # Creating Auth-Type = pam Sat Nov 13 16:43:31 2021 : Debug: radiusd: #### Instantiating modules #### Sat Nov 13 16:43:31 2021 : Debug: modules { Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_exec, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_exec Sat Nov 13 16:43:31 2021 : Debug: # Loading module "exec" from file /etc/freeradius/3.0/mods-enabled/exec Sat Nov 13 16:43:31 2021 : Debug: exec { Sat Nov 13 16:43:31 2021 : Debug: wait = no Sat Nov 13 16:43:31 2021 : Debug: input_pairs = "request" Sat Nov 13 16:43:31 2021 : Debug: shell_escape = yes Sat Nov 13 16:43:31 2021 : Debug: timeout = 10 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_chap, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_chap Sat Nov 13 16:43:31 2021 : Debug: # Loading module "chap" from file /etc/freeradius/3.0/mods-enabled/chap Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_cache, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_cache Sat Nov 13 16:43:31 2021 : Debug: # Loading module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Sat Nov 13 16:43:31 2021 : Debug: cache cache_eap { Sat Nov 13 16:43:31 2021 : Debug: driver = "rlm_cache_rbtree" Sat Nov 13 16:43:31 2021 : Debug: key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" Sat Nov 13 16:43:31 2021 : Debug: ttl = 15 Sat Nov 13 16:43:31 2021 : Debug: max_entries = 0 Sat Nov 13 16:43:31 2021 : Debug: epoch = 0 Sat Nov 13 16:43:31 2021 : Debug: add_stats = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "ntlm_auth" from file /etc/freeradius/3.0/mods-enabled/ntlm_auth Sat Nov 13 16:43:31 2021 : Debug: exec ntlm_auth { Sat Nov 13 16:43:31 2021 : Debug: wait = yes Sat Nov 13 16:43:31 2021 : Debug: program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Sat Nov 13 16:43:31 2021 : Debug: shell_escape = yes Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_radutmp, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_radutmp Sat Nov 13 16:43:31 2021 : Debug: # Loading module "sradutmp" from file /etc/freeradius/3.0/mods-enabled/sradutmp Sat Nov 13 16:43:31 2021 : Debug: radutmp sradutmp { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/sradutmp" Sat Nov 13 16:43:31 2021 : Debug: username = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: case_sensitive = yes Sat Nov 13 16:43:31 2021 : Debug: check_with_nas = yes Sat Nov 13 16:43:31 2021 : Debug: permissions = 420 Sat Nov 13 16:43:31 2021 : Debug: caller_id = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_pap, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_pap Sat Nov 13 16:43:31 2021 : Debug: # Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Sat Nov 13 16:43:31 2021 : Debug: pap { Sat Nov 13 16:43:31 2021 : Debug: normalise = yes Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_preprocess, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_preprocess Sat Nov 13 16:43:31 2021 : Debug: # Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Sat Nov 13 16:43:31 2021 : Debug: preprocess { Sat Nov 13 16:43:31 2021 : Debug: huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups" Sat Nov 13 16:43:31 2021 : Debug: hints = "/etc/freeradius/3.0/mods-config/preprocess/hints" Sat Nov 13 16:43:31 2021 : Debug: with_ascend_hack = no Sat Nov 13 16:43:31 2021 : Debug: ascend_channels_per_line = 23 Sat Nov 13 16:43:31 2021 : Debug: with_ntdomain_hack = no Sat Nov 13 16:43:31 2021 : Debug: with_specialix_jetstream_hack = no Sat Nov 13 16:43:31 2021 : Debug: with_cisco_vsa_hack = no Sat Nov 13 16:43:31 2021 : Debug: with_alvarion_vsa_hack = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_logintime, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_logintime Sat Nov 13 16:43:31 2021 : Debug: # Loading module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Sat Nov 13 16:43:31 2021 : Debug: logintime { Sat Nov 13 16:43:31 2021 : Debug: minimum_timeout = 60 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_attr_filter, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_attr_filter Sat Nov 13 16:43:31 2021 : Debug: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: attr_filter attr_filter.post-proxy { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy" Sat Nov 13 16:43:31 2021 : Debug: key = "%{Realm}" Sat Nov 13 16:43:31 2021 : Debug: relaxed = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: attr_filter attr_filter.pre-proxy { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy" Sat Nov 13 16:43:31 2021 : Debug: key = "%{Realm}" Sat Nov 13 16:43:31 2021 : Debug: relaxed = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: attr_filter attr_filter.access_reject { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject" Sat Nov 13 16:43:31 2021 : Debug: key = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: relaxed = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: attr_filter attr_filter.access_challenge { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge" Sat Nov 13 16:43:31 2021 : Debug: key = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: relaxed = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: attr_filter attr_filter.accounting_response { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response" Sat Nov 13 16:43:31 2021 : Debug: key = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: relaxed = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_passwd, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_passwd Sat Nov 13 16:43:31 2021 : Debug: # Loading module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Sat Nov 13 16:43:31 2021 : Debug: passwd etc_passwd { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/passwd" Sat Nov 13 16:43:31 2021 : Debug: format = "*User-Name:Crypt-Password:" Sat Nov 13 16:43:31 2021 : Debug: delimiter = ":" Sat Nov 13 16:43:31 2021 : Debug: ignore_nislike = no Sat Nov 13 16:43:31 2021 : Debug: ignore_empty = yes Sat Nov 13 16:43:31 2021 : Debug: allow_multiple_keys = no Sat Nov 13 16:43:31 2021 : Debug: hash_size = 100 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_always, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_always Sat Nov 13 16:43:31 2021 : Debug: # Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always reject { Sat Nov 13 16:43:31 2021 : Debug: rcode = "reject" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always fail { Sat Nov 13 16:43:31 2021 : Debug: rcode = "fail" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always ok { Sat Nov 13 16:43:31 2021 : Debug: rcode = "ok" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always handled { Sat Nov 13 16:43:31 2021 : Debug: rcode = "handled" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always invalid { Sat Nov 13 16:43:31 2021 : Debug: rcode = "invalid" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always userlock { Sat Nov 13 16:43:31 2021 : Debug: rcode = "userlock" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always notfound { Sat Nov 13 16:43:31 2021 : Debug: rcode = "notfound" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always noop { Sat Nov 13 16:43:31 2021 : Debug: rcode = "noop" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: always updated { Sat Nov 13 16:43:31 2021 : Debug: rcode = "updated" Sat Nov 13 16:43:31 2021 : Debug: simulcount = 0 Sat Nov 13 16:43:31 2021 : Debug: mpp = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_unpack, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_unpack Sat Nov 13 16:43:31 2021 : Debug: # Loading module "unpack" from file /etc/freeradius/3.0/mods-enabled/unpack Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_detail, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_detail Sat Nov 13 16:43:31 2021 : Debug: # Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: detail auth_log { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Sat Nov 13 16:43:31 2021 : Debug: header = "%t" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: locking = no Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: log_packet_header = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: detail reply_log { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Sat Nov 13 16:43:31 2021 : Debug: header = "%t" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: locking = no Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: log_packet_header = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: detail pre_proxy_log { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Sat Nov 13 16:43:31 2021 : Debug: header = "%t" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: locking = no Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: log_packet_header = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: detail post_proxy_log { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Sat Nov 13 16:43:31 2021 : Debug: header = "%t" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: locking = no Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: log_packet_header = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_soh, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_soh Sat Nov 13 16:43:31 2021 : Debug: # Loading module "soh" from file /etc/freeradius/3.0/mods-enabled/soh Sat Nov 13 16:43:31 2021 : Debug: soh { Sat Nov 13 16:43:31 2021 : Debug: dhcp = yes Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_utf8, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_utf8 Sat Nov 13 16:43:31 2021 : Debug: # Loading module "utf8" from file /etc/freeradius/3.0/mods-enabled/utf8 Sat Nov 13 16:43:31 2021 : Debug: # Loading module "echo" from file /etc/freeradius/3.0/mods-enabled/echo Sat Nov 13 16:43:31 2021 : Debug: exec echo { Sat Nov 13 16:43:31 2021 : Debug: wait = yes Sat Nov 13 16:43:31 2021 : Debug: program = "/bin/echo %{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: input_pairs = "request" Sat Nov 13 16:43:31 2021 : Debug: output_pairs = "reply" Sat Nov 13 16:43:31 2021 : Debug: shell_escape = yes Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Sat Nov 13 16:43:31 2021 : Debug: detail { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Sat Nov 13 16:43:31 2021 : Debug: header = "%t" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: locking = no Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: log_packet_header = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_python3, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_python3 Sat Nov 13 16:43:31 2021 : Debug: # Loading module "python3" from file /etc/freeradius/3.0/mods-enabled/python3 Sat Nov 13 16:43:31 2021 : Debug: python3 { Sat Nov 13 16:43:31 2021 : Debug: mod_instantiate = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: func_instantiate = "instantiate" Sat Nov 13 16:43:31 2021 : Debug: mod_authorize = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_authenticate = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: func_authenticate = "authenticate" Sat Nov 13 16:43:31 2021 : Debug: mod_preacct = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_accounting = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_checksimul = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_pre_proxy = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_post_proxy = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_post_auth = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_recv_coa = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_send_coa = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: mod_detach = "dr_yubikey" Sat Nov 13 16:43:31 2021 : Debug: func_detach = "detach" Sat Nov 13 16:43:31 2021 : Debug: python_path = "/etc/freeradius/3.0/mods-config/python3" Sat Nov 13 16:43:31 2021 : Debug: cext_compat = yes Sat Nov 13 16:43:31 2021 : Debug: pass_all_vps = no Sat Nov 13 16:43:31 2021 : Debug: pass_all_vps_dict = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_mschap, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_mschap Sat Nov 13 16:43:31 2021 : Debug: # Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Sat Nov 13 16:43:31 2021 : Debug: mschap { Sat Nov 13 16:43:31 2021 : Debug: use_mppe = yes Sat Nov 13 16:43:31 2021 : Debug: require_encryption = no Sat Nov 13 16:43:31 2021 : Debug: require_strong = no Sat Nov 13 16:43:31 2021 : Debug: with_ntdomain_hack = yes Sat Nov 13 16:43:31 2021 : Debug: passchange { Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: allow_retry = yes Sat Nov 13 16:43:31 2021 : Debug: winbind_retry_with_normalised_username = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Sat Nov 13 16:43:31 2021 : Debug: radutmp { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/radutmp" Sat Nov 13 16:43:31 2021 : Debug: username = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: case_sensitive = yes Sat Nov 13 16:43:31 2021 : Debug: check_with_nas = yes Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: caller_id = yes Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_expiration, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_expiration Sat Nov 13 16:43:31 2021 : Debug: # Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_realm, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_realm Sat Nov 13 16:43:31 2021 : Debug: # Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: realm IPASS { Sat Nov 13 16:43:31 2021 : Debug: format = "prefix" Sat Nov 13 16:43:31 2021 : Debug: delimiter = "/" Sat Nov 13 16:43:31 2021 : Debug: ignore_default = no Sat Nov 13 16:43:31 2021 : Debug: ignore_null = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: realm suffix { Sat Nov 13 16:43:31 2021 : Debug: format = "suffix" Sat Nov 13 16:43:31 2021 : Debug: delimiter = "@" Sat Nov 13 16:43:31 2021 : Debug: ignore_default = no Sat Nov 13 16:43:31 2021 : Debug: ignore_null = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: realm bangpath { Sat Nov 13 16:43:31 2021 : Debug: format = "prefix" Sat Nov 13 16:43:31 2021 : Debug: delimiter = "!" Sat Nov 13 16:43:31 2021 : Debug: ignore_default = no Sat Nov 13 16:43:31 2021 : Debug: ignore_null = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: realm realmpercent { Sat Nov 13 16:43:31 2021 : Debug: format = "suffix" Sat Nov 13 16:43:31 2021 : Debug: delimiter = "%" Sat Nov 13 16:43:31 2021 : Debug: ignore_default = no Sat Nov 13 16:43:31 2021 : Debug: ignore_null = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: realm ntdomain { Sat Nov 13 16:43:31 2021 : Debug: format = "prefix" Sat Nov 13 16:43:31 2021 : Debug: delimiter = "\\" Sat Nov 13 16:43:31 2021 : Debug: ignore_default = no Sat Nov 13 16:43:31 2021 : Debug: ignore_null = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_linelog, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_linelog Sat Nov 13 16:43:31 2021 : Debug: # Loading module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Sat Nov 13 16:43:31 2021 : Debug: linelog { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/linelog" Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: syslog_severity = "info" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: format = "This is a log message for %{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: reference = "messages.%{%{reply:Packet-Type}:-default}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Loading module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Sat Nov 13 16:43:31 2021 : Debug: linelog log_accounting { Sat Nov 13 16:43:31 2021 : Debug: filename = "/var/log/radius/linelog-accounting" Sat Nov 13 16:43:31 2021 : Debug: escape_filenames = no Sat Nov 13 16:43:31 2021 : Debug: syslog_severity = "info" Sat Nov 13 16:43:31 2021 : Debug: permissions = 384 Sat Nov 13 16:43:31 2021 : Debug: format = "" Sat Nov 13 16:43:31 2021 : Debug: reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_sql, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_sql Sat Nov 13 16:43:31 2021 : Debug: # Loading module "sql" from file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Debug: sql { Sat Nov 13 16:43:31 2021 : Debug: driver = "rlm_sql_sqlite" Sat Nov 13 16:43:31 2021 : Debug: server = "" Sat Nov 13 16:43:31 2021 : Debug: port = 0 Sat Nov 13 16:43:31 2021 : Debug: login = "" Sat Nov 13 16:43:31 2021 : Debug: password = "" Sat Nov 13 16:43:31 2021 : Debug: radius_db = "radius" Sat Nov 13 16:43:31 2021 : Debug: read_groups = yes Sat Nov 13 16:43:31 2021 : Debug: read_profiles = yes Sat Nov 13 16:43:31 2021 : Debug: read_clients = no Sat Nov 13 16:43:31 2021 : Debug: delete_stale_sessions = yes Sat Nov 13 16:43:31 2021 : Debug: sql_user_name = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: default_user_profile = "" Sat Nov 13 16:43:31 2021 : Debug: client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" Sat Nov 13 16:43:31 2021 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Sat Nov 13 16:43:31 2021 : Debug: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Sat Nov 13 16:43:31 2021 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-Group}' AND acctstoptime IS NULL" Sat Nov 13 16:43:31 2021 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Sat Nov 13 16:43:31 2021 : Debug: auto_escape = no Sat Nov 13 16:43:31 2021 : Debug: accounting { Sat Nov 13 16:43:31 2021 : Debug: reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}" Sat Nov 13 16:43:31 2021 : Debug: type { Sat Nov 13 16:43:31 2021 : Debug: accounting-on { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = (%{%{integer:Event-Timestamp}:-strftime('%%s', 'now')} - strftime('%%s', acctstarttime)), acctterminatecause = '%{Acct-Terminate-Cause}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= %{integer:Event-Timestamp}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: accounting-off { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = (%{%{integer:Event-Timestamp}:-strftime('%%s', 'now')} - strftime('%%s', acctstarttime)), acctterminatecause = '%{Acct-Terminate-Cause}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= %{integer:Event-Timestamp}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: start { Sat Nov 13 16:43:31 2021 : Debug: query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', %{%{integer:Event-Timestamp}:-date('now')}, %{%{integer:Event-Timestamp}:-date('now')}, NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Framed-IPv6-Address}', '%{Framed-IPv6-Prefix}', '%{Framed-Interface-Id}', '%{Delegated-IPv6-Prefix}')" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[355]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: interim-update { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctupdatetime = %{%{integer:Event-Timestamp}:-date('now')}, acctinterval = 0, framedipaddress = '%{Framed-IP-Address}', framedipv6address = '%{Framed-IPv6-Address}', framedipv6prefix = '%{Framed-IPv6-Prefix}', framedinterfaceid = '%{Framed-Interface-Id}', delegatedipv6prefix = '%{Delegated-IPv6-Prefix}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = %{%{Acct-Input-Gigawords}:-0} << 32 | %{%{Acct-Input-Octets}:-0}, acctoutputoctets = %{%{Acct-Output-Gigawords}:-0} << 32 | %{%{Acct-Output-Octets}:-0} WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[462]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: stop { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = %{%{Acct-Input-Gigawords}:-0} << 32 | %{%{Acct-Input-Octets}:-0}, acctoutputoctets = %{%{Acct-Output-Gigawords}:-0} << 32 | %{%{Acct-Output-Octets}:-0}, acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[555]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: post-auth { Sat Nov 13 16:43:31 2021 : Debug: reference = ".query" Sat Nov 13 16:43:31 2021 : Debug: query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Driver rlm_sql_sqlite (module rlm_sql_sqlite) loaded and linked Sat Nov 13 16:43:31 2021 : Debug: Creating attribute SQL-Group Sat Nov 13 16:43:31 2021 : Debug: # Loading module "sql_raritans" from file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Debug: sql sql_raritans { Sat Nov 13 16:43:31 2021 : Debug: driver = "rlm_sql_sqlite" Sat Nov 13 16:43:31 2021 : Debug: server = "" Sat Nov 13 16:43:31 2021 : Debug: port = 0 Sat Nov 13 16:43:31 2021 : Debug: login = "" Sat Nov 13 16:43:31 2021 : Debug: password = "" Sat Nov 13 16:43:31 2021 : Debug: radius_db = "radius" Sat Nov 13 16:43:31 2021 : Debug: read_groups = yes Sat Nov 13 16:43:31 2021 : Debug: read_profiles = yes Sat Nov 13 16:43:31 2021 : Debug: read_clients = no Sat Nov 13 16:43:31 2021 : Debug: delete_stale_sessions = yes Sat Nov 13 16:43:31 2021 : Debug: sql_user_name = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: logfile = "/var/log/radius/sql_raritans_log.sql" Sat Nov 13 16:43:31 2021 : Debug: default_user_profile = "" Sat Nov 13 16:43:31 2021 : Debug: client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" Sat Nov 13 16:43:31 2021 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Sat Nov 13 16:43:31 2021 : Debug: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Sat Nov 13 16:43:31 2021 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-Group}' AND acctstoptime IS NULL" Sat Nov 13 16:43:31 2021 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Sat Nov 13 16:43:31 2021 : Debug: auto_escape = no Sat Nov 13 16:43:31 2021 : Debug: accounting { Sat Nov 13 16:43:31 2021 : Debug: reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}" Sat Nov 13 16:43:31 2021 : Debug: type { Sat Nov 13 16:43:31 2021 : Debug: accounting-on { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = (%{%{integer:Event-Timestamp}:-strftime('%%s', 'now')} - strftime('%%s', acctstarttime)), acctterminatecause = '%{Acct-Terminate-Cause}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= %{integer:Event-Timestamp}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: accounting-off { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = (%{%{integer:Event-Timestamp}:-strftime('%%s', 'now')} - strftime('%%s', acctstarttime)), acctterminatecause = '%{Acct-Terminate-Cause}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= %{integer:Event-Timestamp}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: start { Sat Nov 13 16:43:31 2021 : Debug: query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', %{%{integer:Event-Timestamp}:-date('now')}, %{%{integer:Event-Timestamp}:-date('now')}, NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Framed-IPv6-Address}', '%{Framed-IPv6-Prefix}', '%{Framed-Interface-Id}', '%{Delegated-IPv6-Prefix}')" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[355]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: interim-update { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctupdatetime = %{%{integer:Event-Timestamp}:-date('now')}, acctinterval = 0, framedipaddress = '%{Framed-IP-Address}', framedipv6address = '%{Framed-IPv6-Address}', framedipv6prefix = '%{Framed-IPv6-Prefix}', framedinterfaceid = '%{Framed-Interface-Id}', delegatedipv6prefix = '%{Delegated-IPv6-Prefix}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = %{%{Acct-Input-Gigawords}:-0} << 32 | %{%{Acct-Input-Octets}:-0}, acctoutputoctets = %{%{Acct-Output-Gigawords}:-0} << 32 | %{%{Acct-Output-Octets}:-0} WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[462]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: stop { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = %{%{Acct-Input-Gigawords}:-0} << 32 | %{%{Acct-Input-Octets}:-0}, acctoutputoctets = %{%{Acct-Output-Gigawords}:-0} << 32 | %{%{Acct-Output-Octets}:-0}, acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[555]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: post-auth { Sat Nov 13 16:43:31 2021 : Debug: reference = ".query" Sat Nov 13 16:43:31 2021 : Debug: query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Driver rlm_sql_sqlite (module rlm_sql_sqlite) loaded and linked Sat Nov 13 16:43:31 2021 : Debug: Creating attribute sql_raritans-SQL-Group Sat Nov 13 16:43:31 2021 : Debug: # Loading module "sql_sc" from file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Debug: sql sql_sc { Sat Nov 13 16:43:31 2021 : Debug: driver = "rlm_sql_sqlite" Sat Nov 13 16:43:31 2021 : Debug: server = "" Sat Nov 13 16:43:31 2021 : Debug: port = 0 Sat Nov 13 16:43:31 2021 : Debug: login = "" Sat Nov 13 16:43:31 2021 : Debug: password = "" Sat Nov 13 16:43:31 2021 : Debug: radius_db = "radius" Sat Nov 13 16:43:31 2021 : Debug: read_groups = yes Sat Nov 13 16:43:31 2021 : Debug: read_profiles = yes Sat Nov 13 16:43:31 2021 : Debug: read_clients = no Sat Nov 13 16:43:31 2021 : Debug: delete_stale_sessions = yes Sat Nov 13 16:43:31 2021 : Debug: sql_user_name = "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: logfile = "/var/log/radius/sql_sc_log.sql" Sat Nov 13 16:43:31 2021 : Debug: default_user_profile = "" Sat Nov 13 16:43:31 2021 : Debug: client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas" Sat Nov 13 16:43:31 2021 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{SQL-Group}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id" Sat Nov 13 16:43:31 2021 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority" Sat Nov 13 16:43:31 2021 : Debug: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" Sat Nov 13 16:43:31 2021 : Debug: simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-Group}' AND acctstoptime IS NULL" Sat Nov 13 16:43:31 2021 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Sat Nov 13 16:43:31 2021 : Debug: auto_escape = no Sat Nov 13 16:43:31 2021 : Debug: accounting { Sat Nov 13 16:43:31 2021 : Debug: reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}" Sat Nov 13 16:43:31 2021 : Debug: type { Sat Nov 13 16:43:31 2021 : Debug: accounting-on { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = (%{%{integer:Event-Timestamp}:-strftime('%%s', 'now')} - strftime('%%s', acctstarttime)), acctterminatecause = '%{Acct-Terminate-Cause}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= %{integer:Event-Timestamp}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: accounting-off { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = (%{%{integer:Event-Timestamp}:-strftime('%%s', 'now')} - strftime('%%s', acctstarttime)), acctterminatecause = '%{Acct-Terminate-Cause}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= %{integer:Event-Timestamp}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: start { Sat Nov 13 16:43:31 2021 : Debug: query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, framedipv6address, framedipv6prefix, framedinterfaceid, delegatedipv6prefix) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', %{%{integer:Event-Timestamp}:-date('now')}, %{%{integer:Event-Timestamp}:-date('now')}, NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Framed-IPv6-Address}', '%{Framed-IPv6-Prefix}', '%{Framed-Interface-Id}', '%{Delegated-IPv6-Prefix}')" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[355]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: interim-update { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctupdatetime = %{%{integer:Event-Timestamp}:-date('now')}, acctinterval = 0, framedipaddress = '%{Framed-IP-Address}', framedipv6address = '%{Framed-IPv6-Address}', framedipv6prefix = '%{Framed-IPv6-Prefix}', framedinterfaceid = '%{Framed-Interface-Id}', delegatedipv6prefix = '%{Delegated-IPv6-Prefix}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = %{%{Acct-Input-Gigawords}:-0} << 32 | %{%{Acct-Input-Octets}:-0}, acctoutputoctets = %{%{Acct-Output-Gigawords}:-0} << 32 | %{%{Acct-Output-Octets}:-0} WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[462]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: stop { Sat Nov 13 16:43:31 2021 : Debug: query = "UPDATE radacct SET acctstoptime = %{%{integer:Event-Timestamp}:-date('now')}, acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = %{%{Acct-Input-Gigawords}:-0} << 32 | %{%{Acct-Input-Octets}:-0}, acctoutputoctets = %{%{Acct-Output-Gigawords}:-0} << 32 | %{%{Acct-Output-Octets}:-0}, acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'" Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-config/sql/main/sqlite/queries.conf[555]: The item '-query' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: post-auth { Sat Nov 13 16:43:31 2021 : Debug: reference = ".query" Sat Nov 13 16:43:31 2021 : Debug: query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Driver rlm_sql_sqlite (module rlm_sql_sqlite) loaded and linked Sat Nov 13 16:43:31 2021 : Debug: Creating attribute sql_sc-SQL-Group Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_dynamic_clients, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_dynamic_clients Sat Nov 13 16:43:31 2021 : Debug: # Loading module "dynamic_clients" from file /etc/freeradius/3.0/mods-enabled/dynamic_clients Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_replicate, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_replicate Sat Nov 13 16:43:31 2021 : Debug: # Loading module "replicate" from file /etc/freeradius/3.0/mods-enabled/replicate Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_digest, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_digest Sat Nov 13 16:43:31 2021 : Debug: # Loading module "digest" from file /etc/freeradius/3.0/mods-enabled/digest Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_pam, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_pam Sat Nov 13 16:43:31 2021 : Debug: # Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam Sat Nov 13 16:43:31 2021 : Debug: pam { Sat Nov 13 16:43:31 2021 : Debug: pam_auth = "radiusd" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_unix, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_unix Sat Nov 13 16:43:31 2021 : Debug: # Loading module "unix" from file /etc/freeradius/3.0/mods-enabled/unix Sat Nov 13 16:43:31 2021 : Debug: unix { Sat Nov 13 16:43:31 2021 : Debug: radwtmp = "/var/log/radius/radwtmp" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Creating attribute Unix-Group Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_files, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_files Sat Nov 13 16:43:31 2021 : Debug: # Loading module "files" from file /etc/freeradius/3.0/mods-enabled/files Sat Nov 13 16:43:31 2021 : Debug: files { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/mods-config/files/authorize" Sat Nov 13 16:43:31 2021 : Debug: acctusersfile = "/etc/freeradius/3.0/mods-config/files/accounting" Sat Nov 13 16:43:31 2021 : Debug: preproxy_usersfile = "/etc/freeradius/3.0/mods-config/files/pre-proxy" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Loaded rlm_expr, checking if it's valid Sat Nov 13 16:43:31 2021 : Debug: # Loaded module rlm_expr Sat Nov 13 16:43:31 2021 : Debug: # Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr Sat Nov 13 16:43:31 2021 : Debug: expr { Sat Nov 13 16:43:31 2021 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: instantiate { Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Sat Nov 13 16:43:31 2021 : Debug: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Sat Nov 13 16:43:31 2021 : Debug: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "python3" from file /etc/freeradius/3.0/mods-enabled/python3 Sat Nov 13 16:43:31 2021 : Info: Python version: 3.8.10 (default, Sep 28 2021, 16:10:42) [GCC 9.3.0] Sat Nov 13 16:43:31 2021 : Warning: Libpython is not found among linked libraries Sat Nov 13 16:43:31 2021 : Warning: Failed loading libpython symbols into global symbol table *** instantiate *** None Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Sat Nov 13 16:43:31 2021 : Debug: rlm_mschap (mschap): using internal authentication Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "sql" from file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Warning: rlm_sql_sqlite: libsqlite version changed since the server was built Sat Nov 13 16:43:31 2021 : Warning: rlm_sql_sqlite: linked: 3.31.1 built: 3.30.1 Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: libsqlite version: 3.31.1 Sat Nov 13 16:43:31 2021 : Debug: sqlite { Sat Nov 13 16:43:31 2021 : Debug: filename = "/tmp/freeradius.db" Sat Nov 13 16:43:31 2021 : Debug: busy_timeout = 200 Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-enabled/sql[82]: The item 'bootstrap' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Attempting to connect to database "radius" Sat Nov 13 16:43:31 2021 : Debug: rlm_sql (sql): Initialising connection pool Sat Nov 13 16:43:31 2021 : Debug: pool { Sat Nov 13 16:43:31 2021 : Debug: start = 5 Sat Nov 13 16:43:31 2021 : Debug: min = 3 Sat Nov 13 16:43:31 2021 : Debug: max = 32 Sat Nov 13 16:43:31 2021 : Debug: spare = 10 Sat Nov 13 16:43:31 2021 : Debug: uses = 0 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: cleanup_interval = 30 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 60 Sat Nov 13 16:43:31 2021 : Debug: retry_delay = 30 Sat Nov 13 16:43:31 2021 : Debug: spread = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Opening additional connection (0), 1 of 32 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/tmp/freeradius.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Opening additional connection (1), 1 of 31 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/tmp/freeradius.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Opening additional connection (2), 1 of 30 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/tmp/freeradius.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Opening additional connection (3), 1 of 29 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/tmp/freeradius.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql): Opening additional connection (4), 1 of 28 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/tmp/freeradius.db" Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "sql_raritans" from file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Debug: sqlite { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/databases/radius_raritans.db" Sat Nov 13 16:43:31 2021 : Debug: busy_timeout = 200 Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-enabled/sql[352]: The item 'bootstrap' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Attempting to connect to database "radius" Sat Nov 13 16:43:31 2021 : Debug: rlm_sql (sql_raritans): Initialising connection pool Sat Nov 13 16:43:31 2021 : Debug: pool { Sat Nov 13 16:43:31 2021 : Debug: start = 5 Sat Nov 13 16:43:31 2021 : Debug: min = 3 Sat Nov 13 16:43:31 2021 : Debug: max = 32 Sat Nov 13 16:43:31 2021 : Debug: spare = 10 Sat Nov 13 16:43:31 2021 : Debug: uses = 0 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: cleanup_interval = 30 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 60 Sat Nov 13 16:43:31 2021 : Debug: retry_delay = 30 Sat Nov 13 16:43:31 2021 : Debug: spread = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Opening additional connection (0), 1 of 32 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_raritans.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Opening additional connection (1), 1 of 31 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_raritans.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Opening additional connection (2), 1 of 30 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_raritans.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Opening additional connection (3), 1 of 29 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_raritans.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_raritans): Opening additional connection (4), 1 of 28 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_raritans.db" Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "sql_sc" from file /etc/freeradius/3.0/mods-enabled/sql Sat Nov 13 16:43:31 2021 : Debug: sqlite { Sat Nov 13 16:43:31 2021 : Debug: filename = "/etc/freeradius/3.0/databases/radius_sc.db" Sat Nov 13 16:43:31 2021 : Debug: busy_timeout = 200 Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/mods-enabled/sql[398]: The item 'bootstrap' is defined, but is unused by the configuration Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Attempting to connect to database "radius" Sat Nov 13 16:43:31 2021 : Debug: rlm_sql (sql_sc): Initialising connection pool Sat Nov 13 16:43:31 2021 : Debug: pool { Sat Nov 13 16:43:31 2021 : Debug: start = 5 Sat Nov 13 16:43:31 2021 : Debug: min = 3 Sat Nov 13 16:43:31 2021 : Debug: max = 32 Sat Nov 13 16:43:31 2021 : Debug: spare = 10 Sat Nov 13 16:43:31 2021 : Debug: uses = 0 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: cleanup_interval = 30 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 60 Sat Nov 13 16:43:31 2021 : Debug: retry_delay = 30 Sat Nov 13 16:43:31 2021 : Debug: spread = no Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Opening additional connection (0), 1 of 32 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_sc.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Opening additional connection (1), 1 of 31 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_sc.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Opening additional connection (2), 1 of 30 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_sc.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Opening additional connection (3), 1 of 29 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_sc.db" Sat Nov 13 16:43:31 2021 : Info: rlm_sql (sql_sc): Opening additional connection (4), 1 of 28 pending slots used Sat Nov 13 16:43:31 2021 : Info: rlm_sql_sqlite: Opening SQLite database "/etc/freeradius/3.0/databases/radius_sc.db" Sat Nov 13 16:43:31 2021 : Debug: # Instantiating module "files" from file /etc/freeradius/3.0/mods-enabled/files Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/files/authorize Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/files/accounting Sat Nov 13 16:43:31 2021 : Debug: reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy Sat Nov 13 16:43:31 2021 : Debug: } # modules Sat Nov 13 16:43:31 2021 : Debug: radiusd: #### Loading Virtual Servers #### Sat Nov 13 16:43:31 2021 : Debug: server { # from file /etc/freeradius/3.0/radiusd.conf Sat Nov 13 16:43:31 2021 : Debug: } # server Sat Nov 13 16:43:31 2021 : Debug: server default { # from file /etc/freeradius/3.0/sites-enabled/default Sat Nov 13 16:43:31 2021 : Debug: # Loading authenticate {...} Sat Nov 13 16:43:31 2021 : Debug: # Loading authorize {...} Sat Nov 13 16:43:31 2021 : Debug: policy filter_username { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name) { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ / /) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@[^@]*@/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: preprocess Sat Nov 13 16:43:31 2021 : Debug: auth_log Sat Nov 13 16:43:31 2021 : Debug: chap Sat Nov 13 16:43:31 2021 : Debug: mschap Sat Nov 13 16:43:31 2021 : Debug: files Sat Nov 13 16:43:31 2021 : Debug: sql Sat Nov 13 16:43:31 2021 : Debug: pap Sat Nov 13 16:43:31 2021 : Debug: # Loading preacct {...} Sat Nov 13 16:43:31 2021 : Debug: preprocess Sat Nov 13 16:43:31 2021 : Debug: policy acct_unique { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Tmp-String-9 := "ai:" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if ("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/ && "%{string:&Class}" =~ /^ai:([0-9a-f]{32})/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Acct-Unique-Session-Id := "%{md5:%{1},%{Acct-Session-ID}}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: else { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: files Sat Nov 13 16:43:31 2021 : Debug: # Loading accounting {...} Sat Nov 13 16:43:31 2021 : Debug: detail Sat Nov 13 16:43:31 2021 : Debug: unix Sat Nov 13 16:43:31 2021 : Debug: exec Sat Nov 13 16:43:31 2021 : Debug: attr_filter.accounting_response Sat Nov 13 16:43:31 2021 : Debug: # Loading post-auth {...} Sat Nov 13 16:43:31 2021 : Debug: if (&session-state:User-Name && &reply:User-Name && &User-Name && &reply:User-Name == &User-Name) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &reply:User-Name !* ANY Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &reply:[*] += &session-state:[*] Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: exec Sat Nov 13 16:43:31 2021 : Debug: policy remove_reply_message_if_eap { Sat Nov 13 16:43:31 2021 : Debug: if (&reply:EAP-Message && &reply:Reply-Message) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &reply:Reply-Message !* ANY Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: else { Sat Nov 13 16:43:31 2021 : Debug: noop Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } # server default Sat Nov 13 16:43:31 2021 : Debug: server linux-servers { # from file /etc/freeradius/3.0/sites-enabled/linux-servers Sat Nov 13 16:43:31 2021 : Debug: # Loading authenticate {...} Sat Nov 13 16:43:31 2021 : Debug: pam Sat Nov 13 16:43:31 2021 : Debug: # Loading authorize {...} Sat Nov 13 16:43:31 2021 : Debug: policy filter_username { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name) { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ / /) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@[^@]*@/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &control:Pam-Auth := "radiusd_linux_servers" Sat Nov 13 16:43:31 2021 : Debug: &control:Auth-Type := pam Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if ("%{client:allow_users_without_yubikeys}" == yes) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &control:Pam-Auth := "radiusd_linux_servers_nullok" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &User-Name := "%{Client-Shortname}_%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: preprocess Sat Nov 13 16:43:31 2021 : Debug: auth_log Sat Nov 13 16:43:31 2021 : Debug: # Loading post-auth {...} Sat Nov 13 16:43:31 2021 : Debug: exec Sat Nov 13 16:43:31 2021 : Debug: } # server linux-servers Sat Nov 13 16:43:31 2021 : Debug: server sc { # from file /etc/freeradius/3.0/sites-enabled/sc Sat Nov 13 16:43:31 2021 : Debug: # Loading authenticate {...} Sat Nov 13 16:43:31 2021 : Debug: # Loading authorize {...} Sat Nov 13 16:43:31 2021 : Debug: policy filter_username { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name) { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ / /) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@[^@]*@/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Warning: /etc/freeradius/3.0/sites-enabled/sc[11]: Please change attribute reference to '&Pam-Auth := ...' Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &control:Pam-Auth := "radiusd_sc" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &User-Name := "%{Client-Shortname}_%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: preprocess Sat Nov 13 16:43:31 2021 : Debug: auth_log Sat Nov 13 16:43:31 2021 : Debug: sql_sc Sat Nov 13 16:43:31 2021 : Debug: pap Sat Nov 13 16:43:31 2021 : Debug: # Loading post-auth {...} Sat Nov 13 16:43:31 2021 : Debug: exec Sat Nov 13 16:43:31 2021 : Debug: } # server sc Sat Nov 13 16:43:31 2021 : Debug: server raritans { # from file /etc/freeradius/3.0/sites-enabled/raritans Sat Nov 13 16:43:31 2021 : Debug: # Loading authenticate {...} Sat Nov 13 16:43:31 2021 : Debug: # Loading authorize {...} Sat Nov 13 16:43:31 2021 : Debug: policy filter_username { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name) { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ / /) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@[^@]*@/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Yubikey-Map := "radiusd_raritans" Sat Nov 13 16:43:31 2021 : Debug: &Raritan-Group := "%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: &User-Name := "%{Client-Shortname}_%{User-Name}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if ("%{client:allow_users_without_yubikeys}" == yes) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Yubikey-Null-Ok := "yes" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: preprocess Sat Nov 13 16:43:31 2021 : Debug: auth_log Sat Nov 13 16:43:31 2021 : Debug: sql_raritans Sat Nov 13 16:43:31 2021 : Debug: pap Sat Nov 13 16:43:31 2021 : Debug: # Loading post-auth {...} Sat Nov 13 16:43:31 2021 : Debug: exec Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &reply:Filter-Id = "Raritan:G{%{Raritan-Group}}" Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } # server raritans Sat Nov 13 16:43:31 2021 : Debug: server inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/inner-tunnel Sat Nov 13 16:43:31 2021 : Debug: # Loading authenticate {...} Sat Nov 13 16:43:31 2021 : Debug: # Loading authorize {...} Sat Nov 13 16:43:31 2021 : Debug: policy filter_username { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name) { Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ / /) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@[^@]*@/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /\.$/) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: if (&User-Name =~ /@\./) { Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot' Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: reject Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: suffix Sat Nov 13 16:43:31 2021 : Debug: update { Sat Nov 13 16:43:31 2021 : Debug: &control:Proxy-To-Realm := LOCAL Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: files Sat Nov 13 16:43:31 2021 : Debug: sql Sat Nov 13 16:43:31 2021 : Warning: Ignoring "ldap" (see raddb/mods-available/README.rst) Sat Nov 13 16:43:31 2021 : Debug: expiration Sat Nov 13 16:43:31 2021 : Debug: logintime Sat Nov 13 16:43:31 2021 : Debug: pap Sat Nov 13 16:43:31 2021 : Debug: # Loading session {...} Sat Nov 13 16:43:31 2021 : Debug: radutmp Sat Nov 13 16:43:31 2021 : Debug: # Loading post-auth {...} Sat Nov 13 16:43:31 2021 : Info: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:337 Sat Nov 13 16:43:31 2021 : Debug: if (false) { Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } # server inner-tunnel Sat Nov 13 16:43:31 2021 : Debug: radiusd: #### Opening IP addresses and Ports #### Sat Nov 13 16:43:31 2021 : Debug: listen { Sat Nov 13 16:43:31 2021 : Debug: type = "auth" Sat Nov 13 16:43:31 2021 : Debug: ipaddr = * Sat Nov 13 16:43:31 2021 : Debug: port = 0 Sat Nov 13 16:43:31 2021 : Debug: limit { Sat Nov 13 16:43:31 2021 : Debug: max_connections = 16 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 30 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: listen { Sat Nov 13 16:43:31 2021 : Debug: type = "acct" Sat Nov 13 16:43:31 2021 : Debug: ipaddr = * Sat Nov 13 16:43:31 2021 : Debug: port = 0 Sat Nov 13 16:43:31 2021 : Debug: limit { Sat Nov 13 16:43:31 2021 : Debug: max_connections = 16 Sat Nov 13 16:43:31 2021 : Debug: lifetime = 0 Sat Nov 13 16:43:31 2021 : Debug: idle_timeout = 30 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: listen { Sat Nov 13 16:43:31 2021 : Debug: type = "auth" Sat Nov 13 16:43:31 2021 : Debug: ipaddr = 127.0.0.1 Sat Nov 13 16:43:31 2021 : Debug: port = 18120 Sat Nov 13 16:43:31 2021 : Debug: } Sat Nov 13 16:43:31 2021 : Debug: Listening on auth address * port 1812 bound to server default Sat Nov 13 16:43:31 2021 : Debug: Listening on acct address * port 1813 bound to server default Sat Nov 13 16:43:31 2021 : Debug: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Sat Nov 13 16:43:31 2021 : Debug: Opened new proxy socket 'proxy address * port 53587' Sat Nov 13 16:43:31 2021 : Debug: Listening on proxy address * port 53587 Sat Nov 13 16:43:31 2021 : Info: Ready to process requests
On Nov 13, 2021, at 11:58 AM, Jonathan Davis <jonathan@prioritycolo.com> wrote:
Python 3.8.10 Ubuntu 20.04.3 LTS FreeRADIUS 3.0.20
Upgrade to 3.0.25. Packages are on http://packages.networkradius.com If the problem goes away, then it's already been fixed. Alan DeKok.
I am now on FreeRADIUS Version 3.0.25 When I go and mod-enable python3, and start in debug I get the error: /etc/freeradius/mods-enabled/python3[9]: Failed to link to module 'rlm_python3': /usr/lib/freeradius/rlm_python3.so: cannot open shared object file: No such file or directory And it's not wrong, in /usr/lib/freeradius there is no rlm_python3.so, only rlm_python.so Trying to install freeradius-python3 gives me: freeradius-python3 : Depends: freeradius (= 3.0.20+dfsg-3build1) but 3.0.25-2 is to be installed If I go with mods-available/python, I can see: # Instantiating module "python" from file /etc/freeradius/mods-enabled/python Python version: 2.7.18 (default, Mar 8 2021, 13:02:45) [GCC 9.3.0] python_function_load - Module 'dr_yubikey' not found <type 'exceptions.ImportError'> (No module named requests) [0] /etc/freeradius/mods-config/python/dr_yubikey.py:13 at <module>() python_function_load - Failed to import python function 'dr_yubikey.authenticate' /etc/freeradius/mods-enabled/python[9]: Instantiation failed for module "python" But dr_yubikey.py exists in mods-config/python/ but it's def trying 2.7.18 not 3.8 I'm going to hit this fresh in the morning, removing FreeRadius and installing 3.0.20 again, then upgrading. For some reason I removed 3.0.20 I think before installing 3.0.25, as I didn't catch it installed to /etc/freeradius and I was still in /etc/freeradius/3.0 from 3.0.20 wondering what when wrong. On 2021-11-13 12:36 p.m., Alan DeKok wrote:
On Nov 13, 2021, at 11:58 AM, Jonathan Davis<jonathan@prioritycolo.com> wrote:
Python 3.8.10 Ubuntu 20.04.3 LTS FreeRADIUS 3.0.20 Upgrade to 3.0.25. Packages are onhttp://packages.networkradius.com
If the problem goes away, then it's already been fixed.
Alan DeKok.
- List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
On 13 Nov 2021, at 20:42, Jonathan Davis <jonathan@prioritycolo.com> wrote:
I am now on FreeRADIUS Version 3.0.25
Great
When I go and mod-enable python3, and start in debug I get the error:
/etc/freeradius/mods-enabled/python3[9]: Failed to link to module 'rlm_python3': /usr/lib/freeradius/rlm_python3.so: cannot open shared object file: No such file or directory
And it's not wrong, in /usr/lib/freeradius there is no rlm_python3.so, only rlm_python.so
Trying to install freeradius-python3 gives me:
freeradius-python3 : Depends: freeradius (= 3.0.20+dfsg-3build1) but 3.0.25-2 is to be installed
My suggestion is remove all existing *radius* packages, then update to the latest 3.0.25
If I go with mods-available/python, I can see:
# Instantiating module "python" from file /etc/freeradius/mods-enabled/python Python version: 2.7.18 (default, Mar 8 2021, 13:02:45) [GCC 9.3.0] python_function_load - Module 'dr_yubikey' not found <type 'exceptions.ImportError'> (No module named requests) [0] /etc/freeradius/mods-config/python/dr_yubikey.py:13 at <module>() python_function_load - Failed to import python function 'dr_yubikey.authenticate'
Can’t find the “dr_yubikey” path, please check where is the dr_yubikey module. e.g: /my/path/whatever/ and add it into the variable “python_path” in /etc/freeradius/mods-enabled/python Also, double check if exist the function called “authenticate” in dr_yubikey
/etc/freeradius/mods-enabled/python[9]: Instantiation failed for module "python"
But dr_yubikey.py exists in mods-config/python/ but it's def trying 2.7.18 not 3.8
I'm going to hit this fresh in the morning, removing FreeRadius and installing 3.0.20 again, then upgrading. For some reason I removed 3.0.20 I think before installing 3.0.25, as I didn't catch it installed to /etc/freeradius and I was still in /etc/freeradius/3.0 from 3.0.20 wondering what when wrong.
The Ubuntu/Debian packages goes to /etc/freeradius/3.0 and our official packages is in /etc/freeradius.
On Nov 13, 2021, at 11:58 AM, Jonathan Davis<jonathan@prioritycolo.com> wrote:
Python 3.8.10 Ubuntu 20.04.3 LTS FreeRADIUS 3.0.20 Upgrade to 3.0.25. Packages are onhttp://packages.networkradius.com
If the problem goes away, then it's already been fixed.
Alan DeKok.
- List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
On 2021-11-13 12:36 p.m., Alan DeKok wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jorge Pereira jpereira@networkradius.com
participants (3)
-
Alan DeKok -
Jonathan Davis -
Jorge Pereira