EAP/TLS PEAP on Suse 9.3 Ldap backend eDirectory
Daniel Hesse
dhesse at mmrcsl.org
Wed Sep 21 21:07:47 CEST 2005
cant seem to make it send the whole log
RALINK SUPPLICANT....last try
rad_recv: Access-Request packet from host 10.10.4.20:2543, id=212,
length=123
NAS-IP-Address = 10.10.4.20
NAS-Port-Type = Wireless-802.11
NAS-Port = 0
Framed-MTU = 1400
User-Name = dhesse
Calling-Station-Id = 001109229950
Called-Station-Id = 000e6acd7ff5
NAS-Identifier = dhlab_3com
EAP-Message = 0x0201000b01646865737365
Message-Authenticator = 0xf3433859c74cded00607917bab4695f2
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module preprocess returns ok for request 0
modcall[authorize]: module chap returns noop for request 0
modcall[authorize]: module mschap returns noop for request 0
rlm_realm: No '@' in User-Name = dhesse, looking up realm NULL
rlm_realm: No such realm NULL
modcall[authorize]: module suffix returns noop for request 0
rlm_eap: EAP packet type response id 1 length 11
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
modcall[authorize]: module eap returns updated for request 0
users: Matched entry DEFAULT at line 152
modcall[authorize]: module files returns ok for request 0
rlm_ldap: - authorize
rlm_ldap: performing user authorization for dhesse
radius_xlat: '(uid=dhesse)'
radius_xlat: 'o=StormLake'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to gwfs1.mmrcsl.org:389, authentication 0
rlm_ldap: setting TLS CACert File to /etc/raddb/certs/mmrc-ca.b64
rlm_ldap: setting TLS Require Cert to demand
rlm_ldap: starting TLS
rlm_ldap: bind as cn=radical,o=StormLake/g0usa^ to gwfs1.mmrcsl.org:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in o=StormLake, with filter (uid=dhesse)
rlm_ldap: Added the eDirectory password in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user dhesse authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
modcall[authorize]: module ldap returns ok for request 0
modcall: group authorize returns updated for request 0
rad_check_password: Found Auth-Type EAP
auth: type EAP
Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
rlm_eap: EAP Identity
rlm_eap: processing type tls
rlm_eap_tls: Initiate
rlm_eap_tls: Start returned 1
modcall[authenticate]: module eap returns handled for request 0
modcall: group authenticate returns handled for request 0
Sending Access-Challenge of id 212 to 10.10.4.20:2543
EAP-Message = 0x010200061920
Message-Authenticator = 0x00000000000000000000000000000000
State = 0xd42ed53b218b1d136112f3f7e82b0a57
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 6 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 212 with timestamp 43318085
Nothing to do. Sleeping until we see a request.
rad_recv: Access-Request packet from host 10.10.4.20:2545, id=213,
length=123
NAS-IP-Address = 10.10.4.20
NAS-Port-Type = Wireless-802.11
NAS-Port = 0
Framed-MTU = 1400
User-Name = dhesse
Calling-Station-Id = 001109229950
Called-Station-Id = 000e6acd7ff5
NAS-Identifier = dhlab_3com
EAP-Message = 0x0201000b01646865737365
Message-Authenticator = 0x8d112d0f7b1bc7d921e7d92af52bd2e6
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
modcall[authorize]: module preprocess returns ok for request 1
modcall[authorize]: module chap returns noop for request 1
modcall[authorize]: module mschap returns noop for request 1
rlm_realm: No '@' in User-Name = dhesse, looking up realm NULL
rlm_realm: No such realm NULL
modcall[authorize]: module suffix returns noop for request 1
rlm_eap: EAP packet type response id 1 length 11
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
modcall[authorize]: module eap returns updated for request 1
users: Matched entry DEFAULT at line 152
modcall[authorize]: module files returns ok for request 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for dhesse
radius_xlat: '(uid=dhesse)'
radius_xlat: 'o=StormLake'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in o=StormLake, with filter (uid=dhesse)
rlm_ldap: Added the eDirectory password in check items
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20050921/5098ade5/attachment.html>
More information about the Freeradius-Users
mailing list