Crashing on startup - no errors in debug
Version: 3.0.21 Host: Debian 11 Additional modules: pam, google-authenticator Since upgrading (via a Debian dist-upgrade), freeradius is now stopping immediately on startup. Running the server in debugging server mode produces no obvious errors and starts successfully. I have modified the systemctl script to include the '-X' in to rule out an environmental or context difference, and the server runs with this flag included. The output is too verbose to run this for an extended period in production. What's the next step to try to isolate the issue? Thanks, Phil Standard output: Oct 26 21:25:29 wdcds01 freeradius[660551]: FreeRADIUS Version 3.0.21 Oct 26 21:25:29 wdcds01 freeradius[660551]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:25:29 wdcds01 freeradius[660551]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:25:29 wdcds01 freeradius[660551]: PARTICULAR PURPOSE Oct 26 21:25:29 wdcds01 freeradius[660551]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:25:29 wdcds01 freeradius[660551]: GNU General Public License Oct 26 21:25:29 wdcds01 freeradius[660551]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:25:29 wdcds01 freeradius[660551]: Starting - reading configuration files ... Oct 26 21:25:29 wdcds01 freeradius[660551]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:25:29 wdcds01 freeradius[660551]: Creating attribute Unix-Group Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_mschap (mschap): using internal authentication Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:25:29 wdcds01 freeradius[660551]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:25:29 wdcds01 freeradius[660551]: Configuration appears to be OK Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Main process exited, code=exited, status=1/FAILURE Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Failed with result 'exit-code'. Debugging output: Oct 26 21:20:55 wdcds01 freeradius[660356]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660356]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660356]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660356]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660356]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660356]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660356]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660356]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660356]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660356]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660356]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660356]: Configuration appears to be OK Oct 26 21:20:55 wdcds01 freeradius[660357]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660357]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660357]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660357]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660357]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660357]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660357]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660357]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.vqp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /etc/freeradius/3.0/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/proxy.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/clients.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/mods-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/policy.d/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/abfab-tr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/control Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/debug Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/rfc7542 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/cui Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/canonicalization Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/operator-name Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/sites-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: main { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011name = "freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011prefix = "/usr" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011localstatedir = "/var" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011sbindir = "/usr/sbin" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011logdir = "/var/log/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011run_dir = "/var/run/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011libdir = "/usr/lib/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radacctdir = "/var/log/freeradius/radacct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hostname_lookups = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_request_time = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cleanup_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pidfile = "/var/run/freeradius/freeradius.pid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011checkrad = "/usr/sbin/checkrad" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011debug_level = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_requests = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011stripped_names = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_badpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_goodpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011colourise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011msg_denied = "You are already logged in - access denied" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: resources { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: security { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_attributes = 200 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reject_delay = 1.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_server = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Realms and Home Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: proxy server { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_count = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_fallback = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dead_time = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wake_all_if_all_dead = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 1812 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_window = 20.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_timeouts = 1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_outstanding = 65536 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011zombie_period = 40 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_check = "status-server" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ping_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_timeout = 4 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011num_answers_to_alive = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011revive_interval = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: coa { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011irt = 2 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrt = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrc = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrd = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server_pool my_auth_failover { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = fail-over Oct 26 21:20:55 wdcds01 freeradius[660357]: #011home_server = localhost Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm example.com { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_pool = my_auth_failover Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm LOCAL { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Clients #### Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011nas_type = "other" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost_ipv6 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv6addr = ::1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localnet { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 192.168.76.0/24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660357]: systemd watchdog interval is 30.00 secs Oct 26 21:20:55 wdcds01 freeradius[660357]: Emitting systemd watchdog notification Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = PAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = MS-CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = pam Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Instantiating modules #### Oct 26 21:20:55 wdcds01 freeradius[660357]: modules { Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "replicate" from file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "sradutmp" from file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp sradutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/sradutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 420 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timer_expire = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_unknown_eap_types = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cisco_accounting_username_bug = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_sessions = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "This is a log message for %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "messages.%{%{reply:Packet-Type}:-default}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog log_accounting { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog-accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail auth_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail reply_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail pre_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail post_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_soh Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "soh" from file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: soh { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dhcp = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "utf8" from file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: passwd etc_passwd { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/passwd" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "*User-Name:Crypt-Password:" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = ":" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_nislike = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_empty = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_multiple_keys = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hash_size = 100 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: mschap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_mppe = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_encryption = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_strong = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: passchange { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_retry = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011winbind_retry_with_normalised_username = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_cache Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: cache cache_eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011driver = "rlm_cache_rbtree" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ttl = 15 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011epoch = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011add_stats = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: logintime { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011minimum_timeout = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "chap" from file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_exec Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "exec" from file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: exec { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 10 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "dynamic_clients" from file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.post-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.pre-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_challenge { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.accounting_response { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: detail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "digest" from file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: preprocess { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hints = "/etc/freeradius/3.0/mods-config/preprocess/hints" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ascend_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ascend_channels_per_line = 23 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_specialix_jetstream_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_cisco_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_alvarion_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm IPASS { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm suffix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "@" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm bangpath { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "!" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm realmpercent { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "%" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm ntdomain { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "\\" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pam Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: pam { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pam_auth = "radiusd" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expr Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: expr { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unix Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unix" from file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: unix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radwtmp = "/var/log/freeradius/radwtmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_files Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: files { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/files/authorize" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011acctusersfile = "/etc/freeradius/3.0/mods-config/files/accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011preproxy_usersfile = "/etc/freeradius/3.0/mods-config/files/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: pap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011normalise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unpack" from file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntlm_auth" from file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: exec ntlm_auth { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always fail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "fail" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always ok { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "ok" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always handled { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "handled" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always invalid { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "invalid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always userlock { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "userlock" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always notfound { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "notfound" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always noop { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "noop" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always updated { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "updated" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "echo" from file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: exec echo { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/bin/echo %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011output_pairs = "reply" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: instantiate { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_md5 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_leap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_gtc Oct 26 21:20:55 wdcds01 freeradius[660357]: gtc { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011challenge = "Password: " Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_type = "PAP" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_tls Oct 26 21:20:55 wdcds01 freeradius[660357]: tls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls-config tls-common { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011verify_depth = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_path = "/etc/freeradius/3.0/certs" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pem_file_type = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_file = "/etc/ssl/private/ssl-cert-snakeoil.key" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011certificate_file = "/etc/ssl/certs/ssl-cert-snakeoil.pem" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_file = "/etc/ssl/certs/ca-certificates.crt" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_password = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dh_file = "/etc/freeradius/3.0/certs/dh" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011fragment_size = 1024 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auto_chain = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_all_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_list = "DEFAULT" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_server_preference = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ecdh_curve = "prime256v1" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1_1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_max_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_min_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: cache { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 255 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: verify { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011skip_if_ocsp_ok = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: ocsp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011override_cert_url = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011url = " http://127.0.0.1/ocsp/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_nonce = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011softfail = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_ttls Oct 26 21:20:55 wdcds01 freeradius[660357]: ttls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_peap Oct 26 21:20:55 wdcds01 freeradius[660357]: peap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "mschapv2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_tunneled_request_as_eap = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011soh = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_mschapv2 Oct 26 21:20:55 wdcds01 freeradius[660357]: mschapv2 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011send_error = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/authorize Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: } # modules Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Virtual Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: server { # from file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server Oct 26 21:20:55 wdcds01 freeradius[660357]: server inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading session {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: server default { # from file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading preacct {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading accounting {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server default Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Opening IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 18120 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv4addr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "acct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address * port 1812 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on acct address * port 1813 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on proxy address * port 57062 Oct 26 21:20:55 wdcds01 freeradius[660357]: Waking up in 29.9 seconds.
Permissions maybe, starting debug you're using root usually
On Oct 26, 2021, at 5:25 PM, Phil Leinster <philleinster@gmail.com> wrote:
Version: 3.0.21 Host: Debian 11 Additional modules: pam, google-authenticator
Since upgrading (via a Debian dist-upgrade), freeradius is now stopping immediately on startup. Running the server in debugging server mode produces no obvious errors and starts successfully. I have modified the systemctl script to include the '-X' in to rule out an environmental or context difference, and the server runs with this flag included. The output is too verbose to run this for an extended period in production.
What's the next step to try to isolate the issue?
Thanks,
Phil
Standard output: Oct 26 21:25:29 wdcds01 freeradius[660551]: FreeRADIUS Version 3.0.21 Oct 26 21:25:29 wdcds01 freeradius[660551]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:25:29 wdcds01 freeradius[660551]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:25:29 wdcds01 freeradius[660551]: PARTICULAR PURPOSE Oct 26 21:25:29 wdcds01 freeradius[660551]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:25:29 wdcds01 freeradius[660551]: GNU General Public License Oct 26 21:25:29 wdcds01 freeradius[660551]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:25:29 wdcds01 freeradius[660551]: Starting - reading configuration files ... Oct 26 21:25:29 wdcds01 freeradius[660551]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:25:29 wdcds01 freeradius[660551]: Creating attribute Unix-Group Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_mschap (mschap): using internal authentication Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:25:29 wdcds01 freeradius[660551]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:25:29 wdcds01 freeradius[660551]: Configuration appears to be OK Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Main process exited, code=exited, status=1/FAILURE Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Failed with result 'exit-code'.
Debugging output: Oct 26 21:20:55 wdcds01 freeradius[660356]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660356]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660356]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660356]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660356]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660356]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660356]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660356]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660356]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660356]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660356]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660356]: Configuration appears to be OK Oct 26 21:20:55 wdcds01 freeradius[660357]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660357]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660357]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660357]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660357]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660357]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660357]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660357]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.vqp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /etc/freeradius/3.0/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/proxy.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/clients.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/mods-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/policy.d/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/abfab-tr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/control Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/debug Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/rfc7542 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/cui Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/canonicalization Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/operator-name Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/sites-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: main { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011name = "freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011prefix = "/usr" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011localstatedir = "/var" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011sbindir = "/usr/sbin" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011logdir = "/var/log/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011run_dir = "/var/run/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011libdir = "/usr/lib/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radacctdir = "/var/log/freeradius/radacct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hostname_lookups = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_request_time = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cleanup_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pidfile = "/var/run/freeradius/freeradius.pid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011checkrad = "/usr/sbin/checkrad" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011debug_level = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_requests = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011stripped_names = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_badpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_goodpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011colourise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011msg_denied = "You are already logged in - access denied" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: resources { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: security { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_attributes = 200 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reject_delay = 1.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_server = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Realms and Home Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: proxy server { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_count = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_fallback = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dead_time = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wake_all_if_all_dead = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 1812 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_window = 20.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_timeouts = 1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_outstanding = 65536 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011zombie_period = 40 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_check = "status-server" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ping_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_timeout = 4 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011num_answers_to_alive = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011revive_interval = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: coa { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011irt = 2 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrt = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrc = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrd = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server_pool my_auth_failover { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = fail-over Oct 26 21:20:55 wdcds01 freeradius[660357]: #011home_server = localhost Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm example.com { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_pool = my_auth_failover Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm LOCAL { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Clients #### Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011nas_type = "other" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost_ipv6 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv6addr = ::1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localnet { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 192.168.76.0/24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660357]: systemd watchdog interval is 30.00 secs Oct 26 21:20:55 wdcds01 freeradius[660357]: Emitting systemd watchdog notification Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = PAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = MS-CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = pam Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Instantiating modules #### Oct 26 21:20:55 wdcds01 freeradius[660357]: modules { Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "replicate" from file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "sradutmp" from file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp sradutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/sradutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 420 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timer_expire = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_unknown_eap_types = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cisco_accounting_username_bug = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_sessions = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "This is a log message for %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "messages.%{%{reply:Packet-Type}:-default}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog log_accounting { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog-accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail auth_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail reply_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail pre_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail post_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_soh Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "soh" from file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: soh { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dhcp = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "utf8" from file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: passwd etc_passwd { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/passwd" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "*User-Name:Crypt-Password:" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = ":" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_nislike = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_empty = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_multiple_keys = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hash_size = 100 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: mschap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_mppe = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_encryption = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_strong = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: passchange { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_retry = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011winbind_retry_with_normalised_username = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_cache Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: cache cache_eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011driver = "rlm_cache_rbtree" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ttl = 15 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011epoch = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011add_stats = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: logintime { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011minimum_timeout = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "chap" from file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_exec Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "exec" from file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: exec { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 10 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "dynamic_clients" from file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.post-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.pre-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_challenge { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.accounting_response { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: detail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "digest" from file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: preprocess { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hints = "/etc/freeradius/3.0/mods-config/preprocess/hints" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ascend_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ascend_channels_per_line = 23 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_specialix_jetstream_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_cisco_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_alvarion_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm IPASS { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm suffix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "@" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm bangpath { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "!" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm realmpercent { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "%" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm ntdomain { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "\\" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pam Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: pam { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pam_auth = "radiusd" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expr Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: expr { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unix Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unix" from file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: unix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radwtmp = "/var/log/freeradius/radwtmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_files Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: files { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/files/authorize" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011acctusersfile = "/etc/freeradius/3.0/mods-config/files/accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011preproxy_usersfile = "/etc/freeradius/3.0/mods-config/files/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: pap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011normalise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unpack" from file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntlm_auth" from file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: exec ntlm_auth { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always fail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "fail" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always ok { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "ok" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always handled { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "handled" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always invalid { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "invalid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always userlock { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "userlock" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always notfound { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "notfound" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always noop { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "noop" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always updated { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "updated" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "echo" from file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: exec echo { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/bin/echo %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011output_pairs = "reply" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: instantiate { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_md5 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_leap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_gtc Oct 26 21:20:55 wdcds01 freeradius[660357]: gtc { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011challenge = "Password: " Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_type = "PAP" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_tls Oct 26 21:20:55 wdcds01 freeradius[660357]: tls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls-config tls-common { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011verify_depth = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_path = "/etc/freeradius/3.0/certs" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pem_file_type = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_file = "/etc/ssl/private/ssl-cert-snakeoil.key" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011certificate_file = "/etc/ssl/certs/ssl-cert-snakeoil.pem" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_file = "/etc/ssl/certs/ca-certificates.crt" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_password = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dh_file = "/etc/freeradius/3.0/certs/dh" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011fragment_size = 1024 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auto_chain = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_all_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_list = "DEFAULT" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_server_preference = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ecdh_curve = "prime256v1" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1_1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_max_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_min_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: cache { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 255 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: verify { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011skip_if_ocsp_ok = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: ocsp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011override_cert_url = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011url = " http://127.0.0.1/ocsp/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_nonce = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011softfail = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_ttls Oct 26 21:20:55 wdcds01 freeradius[660357]: ttls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_peap Oct 26 21:20:55 wdcds01 freeradius[660357]: peap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "mschapv2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_tunneled_request_as_eap = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011soh = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_mschapv2 Oct 26 21:20:55 wdcds01 freeradius[660357]: mschapv2 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011send_error = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/authorize Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: } # modules Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Virtual Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: server { # from file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server Oct 26 21:20:55 wdcds01 freeradius[660357]: server inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading session {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: server default { # from file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading preacct {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading accounting {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server default Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Opening IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 18120 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv4addr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "acct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address * port 1812 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on acct address * port 1813 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on proxy address * port 57062 Oct 26 21:20:55 wdcds01 freeradius[660357]: Waking up in 29.9 seconds. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Starting with -X it stays in the foreground. The systemd unit may be expecting it to stay in the foreground, and thinks that it exiting is a failure. It may also be expecting a systemd notification that it’s running, when it does background. There’s a lot of ways to configure systemd. Can you post your systemd unit, @Phil?
On 27/10/2021, at 10:53 AM, Jonathan Davis <jonathan@prioritycolo.com> wrote:
Permissions maybe, starting debug you're using root usually
On Oct 26, 2021, at 5:25 PM, Phil Leinster <philleinster@gmail.com> wrote:
Version: 3.0.21 Host: Debian 11 Additional modules: pam, google-authenticator
Since upgrading (via a Debian dist-upgrade), freeradius is now stopping immediately on startup. Running the server in debugging server mode produces no obvious errors and starts successfully. I have modified the systemctl script to include the '-X' in to rule out an environmental or context difference, and the server runs with this flag included. The output is too verbose to run this for an extended period in production.
What's the next step to try to isolate the issue?
Thanks,
Phil
Standard output: Oct 26 21:25:29 wdcds01 freeradius[660551]: FreeRADIUS Version 3.0.21 Oct 26 21:25:29 wdcds01 freeradius[660551]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:25:29 wdcds01 freeradius[660551]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:25:29 wdcds01 freeradius[660551]: PARTICULAR PURPOSE Oct 26 21:25:29 wdcds01 freeradius[660551]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:25:29 wdcds01 freeradius[660551]: GNU General Public License Oct 26 21:25:29 wdcds01 freeradius[660551]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:25:29 wdcds01 freeradius[660551]: Starting - reading configuration files ... Oct 26 21:25:29 wdcds01 freeradius[660551]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:25:29 wdcds01 freeradius[660551]: Creating attribute Unix-Group Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_mschap (mschap): using internal authentication Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:25:29 wdcds01 freeradius[660551]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:25:29 wdcds01 freeradius[660551]: Configuration appears to be OK Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Main process exited, code=exited, status=1/FAILURE Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Failed with result 'exit-code'.
Debugging output: Oct 26 21:20:55 wdcds01 freeradius[660356]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660356]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660356]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660356]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660356]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660356]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660356]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660356]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660356]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660356]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660356]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660356]: Configuration appears to be OK Oct 26 21:20:55 wdcds01 freeradius[660357]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660357]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660357]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660357]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660357]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660357]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660357]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660357]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.vqp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /etc/freeradius/3.0/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/proxy.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/clients.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/mods-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/policy.d/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/abfab-tr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/control Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/debug Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/rfc7542 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/cui Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/canonicalization Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/operator-name Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/sites-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: main { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011name = "freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011prefix = "/usr" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011localstatedir = "/var" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011sbindir = "/usr/sbin" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011logdir = "/var/log/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011run_dir = "/var/run/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011libdir = "/usr/lib/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radacctdir = "/var/log/freeradius/radacct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hostname_lookups = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_request_time = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cleanup_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pidfile = "/var/run/freeradius/freeradius.pid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011checkrad = "/usr/sbin/checkrad" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011debug_level = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_requests = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011stripped_names = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_badpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_goodpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011colourise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011msg_denied = "You are already logged in - access denied" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: resources { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: security { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_attributes = 200 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reject_delay = 1.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_server = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Realms and Home Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: proxy server { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_count = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_fallback = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dead_time = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wake_all_if_all_dead = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 1812 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_window = 20.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_timeouts = 1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_outstanding = 65536 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011zombie_period = 40 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_check = "status-server" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ping_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_timeout = 4 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011num_answers_to_alive = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011revive_interval = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: coa { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011irt = 2 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrt = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrc = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrd = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server_pool my_auth_failover { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = fail-over Oct 26 21:20:55 wdcds01 freeradius[660357]: #011home_server = localhost Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm example.com { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_pool = my_auth_failover Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm LOCAL { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Clients #### Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011nas_type = "other" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost_ipv6 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv6addr = ::1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localnet { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 192.168.76.0/24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660357]: systemd watchdog interval is 30.00 secs Oct 26 21:20:55 wdcds01 freeradius[660357]: Emitting systemd watchdog notification Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = PAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = MS-CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = pam Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Instantiating modules #### Oct 26 21:20:55 wdcds01 freeradius[660357]: modules { Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "replicate" from file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "sradutmp" from file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp sradutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/sradutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 420 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timer_expire = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_unknown_eap_types = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cisco_accounting_username_bug = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_sessions = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "This is a log message for %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "messages.%{%{reply:Packet-Type}:-default}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog log_accounting { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog-accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail auth_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail reply_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail pre_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail post_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_soh Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "soh" from file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: soh { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dhcp = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "utf8" from file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: passwd etc_passwd { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/passwd" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "*User-Name:Crypt-Password:" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = ":" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_nislike = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_empty = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_multiple_keys = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hash_size = 100 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: mschap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_mppe = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_encryption = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_strong = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: passchange { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_retry = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011winbind_retry_with_normalised_username = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_cache Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: cache cache_eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011driver = "rlm_cache_rbtree" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ttl = 15 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011epoch = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011add_stats = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: logintime { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011minimum_timeout = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "chap" from file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_exec Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "exec" from file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: exec { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 10 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "dynamic_clients" from file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.post-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.pre-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_challenge { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.accounting_response { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: detail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "digest" from file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: preprocess { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hints = "/etc/freeradius/3.0/mods-config/preprocess/hints" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ascend_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ascend_channels_per_line = 23 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_specialix_jetstream_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_cisco_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_alvarion_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm IPASS { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm suffix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "@" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm bangpath { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "!" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm realmpercent { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "%" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm ntdomain { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "\\" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pam Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: pam { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pam_auth = "radiusd" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expr Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: expr { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unix Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unix" from file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: unix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radwtmp = "/var/log/freeradius/radwtmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_files Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: files { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/files/authorize" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011acctusersfile = "/etc/freeradius/3.0/mods-config/files/accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011preproxy_usersfile = "/etc/freeradius/3.0/mods-config/files/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: pap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011normalise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unpack" from file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntlm_auth" from file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: exec ntlm_auth { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always fail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "fail" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always ok { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "ok" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always handled { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "handled" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always invalid { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "invalid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always userlock { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "userlock" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always notfound { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "notfound" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always noop { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "noop" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always updated { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "updated" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "echo" from file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: exec echo { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/bin/echo %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011output_pairs = "reply" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: instantiate { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_md5 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_leap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_gtc Oct 26 21:20:55 wdcds01 freeradius[660357]: gtc { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011challenge = "Password: " Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_type = "PAP" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_tls Oct 26 21:20:55 wdcds01 freeradius[660357]: tls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls-config tls-common { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011verify_depth = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_path = "/etc/freeradius/3.0/certs" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pem_file_type = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_file = "/etc/ssl/private/ssl-cert-snakeoil.key" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011certificate_file = "/etc/ssl/certs/ssl-cert-snakeoil.pem" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_file = "/etc/ssl/certs/ca-certificates.crt" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_password = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dh_file = "/etc/freeradius/3.0/certs/dh" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011fragment_size = 1024 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auto_chain = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_all_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_list = "DEFAULT" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_server_preference = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ecdh_curve = "prime256v1" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1_1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_max_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_min_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: cache { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 255 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: verify { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011skip_if_ocsp_ok = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: ocsp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011override_cert_url = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011url = " http://127.0.0.1/ocsp/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_nonce = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011softfail = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_ttls Oct 26 21:20:55 wdcds01 freeradius[660357]: ttls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_peap Oct 26 21:20:55 wdcds01 freeradius[660357]: peap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "mschapv2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_tunneled_request_as_eap = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011soh = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_mschapv2 Oct 26 21:20:55 wdcds01 freeradius[660357]: mschapv2 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011send_error = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/authorize Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: } # modules Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Virtual Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: server { # from file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server Oct 26 21:20:55 wdcds01 freeradius[660357]: server inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading session {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: server default { # from file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading preacct {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading accounting {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server default Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Opening IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 18120 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv4addr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "acct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address * port 1812 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on acct address * port 1813 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on proxy address * port 57062 Oct 26 21:20:55 wdcds01 freeradius[660357]: Waking up in 29.9 seconds. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Nathan, Thanks for the sanity check... I think I found the problem. The package was configured with options that were incompatible with the configuration in the unit. Namely, I had to change the user and group from 'freerad' to 'root', as this was changed as part of the google-authenticator integration in the conf file. A bit embarrassing I didn't find it sooner, to be honest. I believe root is a requirement for the G-A module. Trying to make sense of this, the dist-upgrade must have changed the systemd unit file when the updated package was installed, or the previous version had a different behaviour that didn't require this change. I don't remember having to make this change previously, but maybe the implementation went by undocumented by me during the original setup. Thanks again, Phil On Wed, 27 Oct 2021 at 03:25, Nathan Ward <lists+freeradius@daork.net> wrote:
Starting with -X it stays in the foreground. The systemd unit may be expecting it to stay in the foreground, and thinks that it exiting is a failure. It may also be expecting a systemd notification that it’s running, when it does background. There’s a lot of ways to configure systemd.
Can you post your systemd unit, @Phil?
On 27/10/2021, at 10:53 AM, Jonathan Davis <jonathan@prioritycolo.com> wrote:
Permissions maybe, starting debug you're using root usually
On Oct 26, 2021, at 5:25 PM, Phil Leinster <philleinster@gmail.com> wrote:
Version: 3.0.21 Host: Debian 11 Additional modules: pam, google-authenticator
Since upgrading (via a Debian dist-upgrade), freeradius is now stopping immediately on startup. Running the server in debugging server mode produces no obvious errors and starts successfully. I have modified the systemctl script to include the '-X' in to rule out an environmental or context difference, and the server runs with this flag included. The output is too verbose to run this for an extended period in production.
What's the next step to try to isolate the issue?
Thanks,
Phil
Standard output: Oct 26 21:25:29 wdcds01 freeradius[660551]: FreeRADIUS Version 3.0.21 Oct 26 21:25:29 wdcds01 freeradius[660551]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:25:29 wdcds01 freeradius[660551]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:25:29 wdcds01 freeradius[660551]: PARTICULAR PURPOSE Oct 26 21:25:29 wdcds01 freeradius[660551]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:25:29 wdcds01 freeradius[660551]: GNU General Public License Oct 26 21:25:29 wdcds01 freeradius[660551]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:25:29 wdcds01 freeradius[660551]: Starting - reading configuration files ... Oct 26 21:25:29 wdcds01 freeradius[660551]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:25:29 wdcds01 freeradius[660551]: Creating attribute Unix-Group Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:25:29 wdcds01 freeradius[660551]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: tls: Using cached TLS configuration from previous invocation Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_mschap (mschap): using internal authentication Oct 26 21:25:29 wdcds01 freeradius[660551]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:25:29 wdcds01 freeradius[660551]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:25:29 wdcds01 freeradius[660551]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:25:29 wdcds01 freeradius[660551]: Configuration appears to be OK Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Main process exited, code=exited, status=1/FAILURE Oct 26 21:25:29 wdcds01 systemd[1]: freeradius.service: Failed with result 'exit-code'.
Debugging output: Oct 26 21:20:55 wdcds01 freeradius[660356]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660356]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660356]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660356]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660356]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660356]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660356]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660356]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660356]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660356]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660356]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660356]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660356]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660356]: radiusd: #### Skipping IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660356]: Configuration appears to be OK Oct 26 21:20:55 wdcds01 freeradius[660357]: FreeRADIUS Version 3.0.21 Oct 26 21:20:55 wdcds01 freeradius[660357]: Copyright (C) 1999-2019 The FreeRADIUS server project and contributors Oct 26 21:20:55 wdcds01 freeradius[660357]: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Oct 26 21:20:55 wdcds01 freeradius[660357]: PARTICULAR PURPOSE Oct 26 21:20:55 wdcds01 freeradius[660357]: You may redistribute copies of FreeRADIUS under the terms of the Oct 26 21:20:55 wdcds01 freeradius[660357]: GNU General Public License Oct 26 21:20:55 wdcds01 freeradius[660357]: For more information about these matters, see the file named COPYRIGHT Oct 26 21:20:55 wdcds01 freeradius[660357]: Starting - reading configuration files ... Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /usr/share/freeradius/dictionary.vqp Oct 26 21:20:55 wdcds01 freeradius[660357]: including dictionary file /etc/freeradius/3.0/dictionary Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/proxy.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/clients.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/mods-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/policy.d/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/abfab-tr Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/control Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/filter Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/debug Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/rfc7542 Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/dhcp Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/cui Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/canonicalization Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/operator-name Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids Oct 26 21:20:55 wdcds01 freeradius[660357]: including files in directory /etc/freeradius/3.0/sites-enabled/ Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: including configuration file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: main { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011name = "freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011prefix = "/usr" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011localstatedir = "/var" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011sbindir = "/usr/sbin" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011logdir = "/var/log/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011run_dir = "/var/run/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011libdir = "/usr/lib/freeradius" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radacctdir = "/var/log/freeradius/radacct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hostname_lookups = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_request_time = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cleanup_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pidfile = "/var/run/freeradius/freeradius.pid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011checkrad = "/usr/sbin/checkrad" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011debug_level = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_requests = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011stripped_names = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_badpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_goodpass = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011colourise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011msg_denied = "You are already logged in - access denied" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: resources { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: security { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_attributes = 200 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reject_delay = 1.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_server = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Realms and Home Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: proxy server { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_delay = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011retry_count = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_fallback = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dead_time = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wake_all_if_all_dead = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 1812 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_window = 20.000000 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011response_timeouts = 1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_outstanding = 65536 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011zombie_period = 40 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011status_check = "status-server" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ping_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_interval = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_timeout = 4 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011num_answers_to_alive = 3 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011revive_interval = 120 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_requests = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: coa { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011irt = 2 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrt = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrc = 5 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mrd = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: home_server_pool my_auth_failover { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = fail-over Oct 26 21:20:55 wdcds01 freeradius[660357]: #011home_server = localhost Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm example.com { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_pool = my_auth_failover Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: realm LOCAL { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Clients #### Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011nas_type = "other" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localhost_ipv6 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv6addr = ::1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: client localnet { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 192.168.76.0/24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_message_authenticator = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011secret = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proto = "*" Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Debug state unknown (cap_sys_ptrace capability not set) Oct 26 21:20:55 wdcds01 freeradius[660357]: systemd watchdog interval is 30.00 secs Oct 26 21:20:55 wdcds01 freeradius[660357]: Emitting systemd watchdog notification Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = PAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = MS-CHAP Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Creating Auth-Type = pam Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Instantiating modules #### Oct 26 21:20:55 wdcds01 freeradius[660357]: modules { Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "replicate" from file /etc/freeradius/3.0/mods-enabled/replicate Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "sradutmp" from file /etc/freeradius/3.0/mods-enabled/sradutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp sradutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/sradutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 420 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timer_expire = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_unknown_eap_types = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cisco_accounting_username_bug = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_sessions = 16384 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "This is a log message for %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "messages.%{%{reply:Packet-Type}:-default}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: linelog log_accounting { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/linelog-accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011syslog_severity = "info" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail auth_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename =
"/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail reply_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename =
"/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail pre_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename =
"/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: detail post_proxy_log { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename =
"/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_soh Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "soh" from file /etc/freeradius/3.0/mods-enabled/soh Oct 26 21:20:55 wdcds01 freeradius[660357]: soh { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dhcp = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "utf8" from file /etc/freeradius/3.0/mods-enabled/utf8 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "radutmp" from file /etc/freeradius/3.0/mods-enabled/radutmp Oct 26 21:20:55 wdcds01 freeradius[660357]: radutmp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/var/log/freeradius/radutmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011username = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011case_sensitive = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_with_nas = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011caller_id = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: passwd etc_passwd { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/passwd" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "*User-Name:Crypt-Password:" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = ":" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_nislike = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_empty = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_multiple_keys = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hash_size = 100 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: mschap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_mppe = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_encryption = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_strong = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: passchange { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: #011allow_retry = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011winbind_retry_with_normalised_username = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_cache Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: cache cache_eap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011driver = "rlm_cache_rbtree" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ttl = 15 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011epoch = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011add_stats = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: logintime { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011minimum_timeout = 60 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "chap" from file /etc/freeradius/3.0/mods-enabled/chap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_exec Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "exec" from file /etc/freeradius/3.0/mods-enabled/exec Oct 26 21:20:55 wdcds01 freeradius[660357]: exec { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 10 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "dynamic_clients" from file /etc/freeradius/3.0/mods-enabled/dynamic_clients Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.post-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.pre-proxy { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{Realm}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.access_challenge { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: attr_filter attr_filter.accounting_response { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011key = "%{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011relaxed = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: detail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename =
"/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
Oct 26 21:20:55 wdcds01 freeradius[660357]: #011header = "%t" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011permissions = 384 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011locking = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011escape_filenames = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011log_packet_header = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "digest" from file /etc/freeradius/3.0/mods-enabled/digest Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: preprocess { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011hints = "/etc/freeradius/3.0/mods-config/preprocess/hints" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ascend_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ascend_channels_per_line = 23 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_specialix_jetstream_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_cisco_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_alvarion_vsa_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm IPASS { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm suffix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "@" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm bangpath { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "!" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm realmpercent { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "suffix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "%" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: realm ntdomain { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011format = "prefix" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011delimiter = "\\" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_default = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ignore_null = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pam Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam Oct 26 21:20:55 wdcds01 freeradius[660357]: pam { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pam_auth = "radiusd" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_expr Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr Oct 26 21:20:55 wdcds01 freeradius[660357]: expr { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unix Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unix" from file /etc/freeradius/3.0/mods-enabled/unix Oct 26 21:20:55 wdcds01 freeradius[660357]: unix { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011radwtmp = "/var/log/freeradius/radwtmp" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Creating attribute Unix-Group Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_files Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: files { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011filename = "/etc/freeradius/3.0/mods-config/files/authorize" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011acctusersfile = "/etc/freeradius/3.0/mods-config/files/accounting" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011preproxy_usersfile = "/etc/freeradius/3.0/mods-config/files/pre-proxy" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: pap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011normalise = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "unpack" from file /etc/freeradius/3.0/mods-enabled/unpack Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ntlm_auth" from file /etc/freeradius/3.0/mods-enabled/ntlm_auth Oct 26 21:20:55 wdcds01 freeradius[660357]: exec ntlm_auth { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loaded module rlm_always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always reject { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "reject" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always fail { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "fail" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always ok { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "ok" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always handled { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "handled" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always invalid { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "invalid" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always userlock { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "userlock" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always notfound { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "notfound" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always noop { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "noop" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: always updated { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011rcode = "updated" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011simulcount = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011mpp = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading module "echo" from file /etc/freeradius/3.0/mods-enabled/echo Oct 26 21:20:55 wdcds01 freeradius[660357]: exec echo { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011wait = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011program = "/bin/echo %{User-Name}" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011input_pairs = "request" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011output_pairs = "reply" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011shell_escape = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: instantiate { Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_md5 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_leap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_gtc Oct 26 21:20:55 wdcds01 freeradius[660357]: gtc { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011challenge = "Password: " Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auth_type = "PAP" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_tls Oct 26 21:20:55 wdcds01 freeradius[660357]: tls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls-config tls-common { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011verify_depth = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_path = "/etc/freeradius/3.0/certs" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011pem_file_type = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_file = "/etc/ssl/private/ssl-cert-snakeoil.key" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011certificate_file = "/etc/ssl/certs/ssl-cert-snakeoil.pem" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ca_file = "/etc/ssl/certs/ca-certificates.crt" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011private_key_password = <<< secret >>> Oct 26 21:20:55 wdcds01 freeradius[660357]: #011dh_file = "/etc/freeradius/3.0/certs/dh" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011fragment_size = 1024 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011auto_chain = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011check_all_crl = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_list = "DEFAULT" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011cipher_server_preference = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ecdh_curve = "prime256v1" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011disable_tlsv1_1 = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_max_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls_min_version = "1.2" Oct 26 21:20:55 wdcds01 freeradius[660357]: cache { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 24 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_entries = 255 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: verify { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011skip_if_ocsp_ok = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: ocsp { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011enable = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011override_cert_url = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011url = " http://127.0.0.1/ocsp/" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_nonce = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011timeout = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011softfail = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1 Oct 26 21:20:55 wdcds01 freeradius[660357]: Please use tls_min_version and tls_max_version instead of disable_tlsv1_2 Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_ttls Oct 26 21:20:55 wdcds01 freeradius[660357]: ttls { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "md5" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011include_length = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_peap Oct 26 21:20:55 wdcds01 freeradius[660357]: peap { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011tls = "tls-common" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011default_eap_type = "mschapv2" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011copy_request_to_tunnel = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011use_tunneled_reply = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011proxy_tunneled_request_as_eap = yes Oct 26 21:20:55 wdcds01 freeradius[660357]: #011virtual_server = "inner-tunnel" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011soh = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011require_client_cert = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: tls: Using cached TLS configuration from previous invocation Oct 26 21:20:55 wdcds01 freeradius[660357]: # Linked to sub-module rlm_eap_mschapv2 Oct 26 21:20:55 wdcds01 freeradius[660357]: mschapv2 { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011with_ntdomain_hack = no Oct 26 21:20:55 wdcds01 freeradius[660357]: #011send_error = no Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "etc_passwd" from file /etc/freeradius/3.0/mods-enabled/passwd Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_mschap (mschap): using internal authentication Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "cache_eap" from file /etc/freeradius/3.0/mods-enabled/cache_eap Oct 26 21:20:55 wdcds01 freeradius[660357]: rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "logintime" from file /etc/freeradius/3.0/mods-enabled/logintime Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "files" from file /etc/freeradius/3.0/mods-enabled/files Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/authorize Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/accounting Oct 26 21:20:55 wdcds01 freeradius[660357]: reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: # Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always Oct 26 21:20:55 wdcds01 freeradius[660357]: } # modules Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Loading Virtual Servers #### Oct 26 21:20:55 wdcds01 freeradius[660357]: server { # from file /etc/freeradius/3.0/radiusd.conf Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server Oct 26 21:20:55 wdcds01 freeradius[660357]: server inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "sql" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: Ignoring "ldap" (see raddb/mods-available/README.rst) Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading session {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/3.0/sites-enabled/inner-tunnel:336 Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: server default { # from file /etc/freeradius/3.0/sites-enabled/default Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authenticate {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading authorize {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading preacct {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading accounting {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-proxy {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: # Loading post-auth {...} Oct 26 21:20:55 wdcds01 freeradius[660357]: } # server default Oct 26 21:20:55 wdcds01 freeradius[660357]: radiusd: #### Opening IP addresses and Ports #### Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = 127.0.0.1 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 18120 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "auth" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipv4addr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: listen { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011type = "acct" Oct 26 21:20:55 wdcds01 freeradius[660357]: #011ipaddr = * Oct 26 21:20:55 wdcds01 freeradius[660357]: #011port = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: limit { Oct 26 21:20:55 wdcds01 freeradius[660357]: #011max_connections = 16 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011lifetime = 0 Oct 26 21:20:55 wdcds01 freeradius[660357]: #011idle_timeout = 30 Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: } Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on auth address * port 1812 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on acct address * port 1813 bound to server default Oct 26 21:20:55 wdcds01 freeradius[660357]: Listening on proxy address * port 57062 Oct 26 21:20:55 wdcds01 freeradius[660357]: Waking up in 29.9 seconds. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Oct 27, 2021, at 4:56 AM, Phil Leinster <philleinster@gmail.com> wrote:
The package was configured with options that were incompatible with the configuration in the unit. Namely, I had to change the user and group from 'freerad' to 'root',
It's best to not run it as root. While we try to make everything secure, we're not perfect.
as this was changed as part of the google-authenticator integration in the conf file. A bit embarrassing I didn't find it sooner, to be honest. I believe root is a requirement for the G-A module.
3.0.25 contains a TOTP module, which can run the algorithm used by Google Authenticator. And it doesn't need root. I'm not sure why the google authenticator stuff needs root. It really shouldn't. Alan DeKok.
participants (4)
-
Alan DeKok -
Jonathan Davis -
Nathan Ward -
Phil Leinster