Hostapd-0.5.5 and freeradius-server-2.1.1
lolo
lolo at system-linux.net
Tue Oct 28 11:03:03 CET 2008
Le mardi 28 octobre 2008 10:19, tnt at kalik.net a écrit :
> Have you enabled sql in the accounting section? Can you post the
> freeradius debug (radiusd -X)? Accounting-Request should be coming
> straight after Access-Accept.
And a part of my hostapd debug :
RADIUS message: code=1 (Access-Request) identifier=13 length=205
Attribute 1 (User-Name) length=5
Value: 'bea'
Attribute 4 (NAS-IP-Address) length=6
Value: 10.3.1.1
Attribute 32 (NAS-Identifier) length=19
Value: 'private-network-1'
Attribute 5 (NAS-Port) length=6
Value: 0
Attribute 30 (Called-Station-Id) length=29
Value: '00-18-4D-76-22-19:Debian-AP'
Attribute 31 (Calling-Station-Id) length=19
Value: '00-1A-70-AE-D4-53'
Attribute 12 (Framed-MTU) length=6
Value: 1400
Attribute 61 (NAS-Port-Type) length=6
Value: 19
Attribute 77 (Connect-Info) length=22
Value: 'CONNECT 0Mbps 802.11'
Attribute 79 (EAP-Message) length=31
Value: 02 0f 00 1d 19 00 17 03 01 00 12 f9 58 45 e9 d6 44 be bd cf 76 8f 0e 15 39 6d 57 9d 58
Attribute 24 (State) length=18
Value: 2b 6f 35 1a 23 60 2c f5 d4 4f 03 71 be bd d5 61
Attribute 80 (Message-Authenticator) length=18
Value: 4e 6c 17 63 cb 4f 52 41 92 a0 25 8e 8b 93 ab 0e
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
RADIUS message: code=11 (Access-Challenge) identifier=13 length=96
Attribute 79 (EAP-Message) length=40
Value: 01 10 00 26 19 00 17 03 01 00 1b 09 9f db b8 c3 59 e2 08 0e af 65 29 c7 5e 1f 37 57 d3 f9 4b 08 bd 5a 01 bb 08 9b
Attribute 80 (Message-Authenticator) length=18
Value: 55 9e 51 4e b2 1a b9 4f e1 80 9b c2 fd 58 78 a8
Attribute 24 (State) length=18
Value: 2b 6f 35 1a 22 7f 2c f5 d4 4f 03 71 be bd d5 61
RADIUS packet matching with station 00:1a:70:ae:d4:53
IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state REQUEST
IEEE 802.1X: Sending EAP Packet to 00:1a:70:ae:d4:53 (identifier 16)
TX EAPOL - hexdump(len=56): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 00 00 26 01 10 00 26 19 00 17 03 01 00 1b 09 9f db b8 c3 59 e2 08 0e af 65 29 c7 5e 1f 37 57 d3 f9 4b 08 bd 5a 01 bb 08 9b
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 42 bytes from 00:1a:70:ae:d4:53
IEEE 802.1X: version=1 type=0 length=38
EAP: code=2 identifier=16 length=38 (response)
IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state RESPONSE
Encapsulating EAP message into a RADIUS packet
Copied RADIUS State Attribute
RADIUS message: code=1 (Access-Request) identifier=14 length=214
Attribute 1 (User-Name) length=5
Value: 'bea'
Attribute 4 (NAS-IP-Address) length=6
Value: 10.3.1.1
Attribute 32 (NAS-Identifier) length=19
Value: 'private-network-1'
Attribute 5 (NAS-Port) length=6
Value: 0
Attribute 30 (Called-Station-Id) length=29
Value: '00-18-4D-76-22-19:Debian-AP'
Attribute 31 (Calling-Station-Id) length=19
Value: '00-1A-70-AE-D4-53'
Attribute 12 (Framed-MTU) length=6
Value: 1400
Attribute 61 (NAS-Port-Type) length=6
Value: 19
Attribute 77 (Connect-Info) length=22
Value: 'CONNECT 0Mbps 802.11'
Attribute 79 (EAP-Message) length=40
Value: 02 10 00 26 19 00 17 03 01 00 1b 40 ca 97 50 69 d4 77 6f 15 57 b3 ee f3 ec 63 2e dd 93 b0 f1 7b f5 14 81 3b 7f 0b
Attribute 24 (State) length=18
Value: 2b 6f 35 1a 22 7f 2c f5 d4 4f 03 71 be bd d5 61
Attribute 80 (Message-Authenticator) length=18
Value: 6d 79 43 5f 97 d1 ca c6 27 23 a3 60 11 a4 d1 7a
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
RADIUS message: code=2 (Access-Accept) identifier=14 length=165
Attribute 26 (Vendor-Specific) length=58
Value: 00 00 01 37 11 34 81 e4 83 fe 13 8f 20 ac 61 72 f7 4d cc 93 46 7a 66 b5 ab 24 a8 47 a7 bf cf 0a 32 4a 70 03 88 d0 92 07 70 4e a0 8f cc d6 e2 7b 1a 9f b5 39 ad 2a 7e a5
Attribute 26 (Vendor-Specific) length=58
Value: 00 00 01 37 10 34 8a fb be 0d b7 12 ba 6f ff 36 d3 e6 b6 cf 6e 94 fb 85 99 41 66 62 bb b0 31 9e b9 ed 62 49 1a 21 bc 83 81 d1 c9 f9 05 d3 50 a6 9e 37 01 39 23 40 1d 68
Attribute 79 (EAP-Message) length=6
Value: 03 10 00 04
Attribute 80 (Message-Authenticator) length=18
Value: f5 48 97 70 6f 18 70 8d 27 46 16 8c e9 99 80 95
Attribute 1 (User-Name) length=5
Value: 'bea'
RADIUS packet matching with station 00:1a:70:ae:d4:53
MS-MPPE-Send-Key - hexdump(len=32): [REMOVED]
MS-MPPE-Recv-Key - hexdump(len=32): [REMOVED]
RSN: added PMKSA cache entry for 00:1a:70:ae:d4:53
RSN: added PMKID - hexdump(len=16): 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93
IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state SUCCESS
IEEE 802.1X: Sending EAP Packet to 00:1a:70:ae:d4:53 (identifier 16)
TX EAPOL - hexdump(len=22): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 00 00 04 03 10 00 04
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:1a:70:ae:d4:53 BE_AUTH entering state IDLE
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 00:1a:70:ae:d4:53 REAUTH_TIMER entering state INITIALIZE
WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state INITPMK
WPA: PMK from EAPOL state machine (len=32)
WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKSTART
WPA: Send EAPOL(secure=0 mic=0 ack=1 install=0 pairwise=8 kde_len=22 keyidx=0 encr=0)
TX EAPOL - hexdump(len=135): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 03 00 75 02 00 8a 00 10 00 00 00 00 00 00 00 01 8c 1a c0 22 01 b5 17 73 2c 5e 8b 38 3c 2a 5a c5 c6 a7 78 79 0a bd 12 45 26 8b 94 8e 5d 40 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 16 dd 14 00 0f ac 04 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93
IEEE 802.1X: 121 bytes from 00:1a:70:ae:d4:53
IEEE 802.1X: version=1 type=3 length=117
WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKCALCNEGOTIATING
PMK - hexdump(len=32): [REMOVED]
PTK - hexdump(len=64): [REMOVED]
WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKCALCNEGOTIATING2
WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKINITNEGOTIATING
madwifi_get_seqnum: addr=00:00:00:00:00:00 idx=1
WPA: Send EAPOL(secure=1 mic=1 ack=1 install=1 pairwise=8 kde_len=66 keyidx=1 encr=1)
Plaintext EAPOL-Key Key Data - hexdump(len=80): [REMOVED]
TX EAPOL - hexdump(len=193): 00 1a 70 ae d4 53 00 18 4d 76 22 19 88 8e 02 03 00 af 02 13 ca 00 10 00 00 00 00 00 00 00 02 8c 1a c0 22 01 b5 17 73 2c 5e 8b 38 3c 2a 5a c5 c6 a7 78 79 0a bd 12 45 26 8b 94 8e 5d 40 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 50 25 68 b4 cb fc 7c 34 30 1f 98 83 ff 1b c0 00 50 75 6a d4 10 9f c4 77 31 ca 59 eb ef 27 9d be bf 81 15 5b 78 70 0a 10 50 9f fd 33 71 9d fd 3e a2 1c ae 6d 6b d1 15 6c 61 13 3f ed 1b a8 86 1b a9 db 4d 3f d9 c4 f7 a4 21 91 fc 07 33 93 9e 3b d0 f2 6c ef 32 91 d3 13 06 1b 3a 32 e7 e0 62 ea 0b
IEEE 802.1X: 99 bytes from 00:1a:70:ae:d4:53
IEEE 802.1X: version=1 type=3 length=95
WPA: 00:1a:70:ae:d4:53 WPA_PTK entering state PTKINITDONE
madwifi_set_key: alg=CCMP addr=00:1a:70:ae:d4:53 key_idx=0
IEEE 802.1X: 00:1a:70:ae:d4:53 AUTH_PAE entering state AUTHENTICATED
madwifi_set_sta_authorized: addr=00:1a:70:ae:d4:53 authorized=1
madwifi_sta_clear_stats: addr=00:1a:70:ae:d4:53
RADIUS message: code=4 (Accounting-Request) identifier=15 length=163
Attribute 44 (Acct-Session-Id) length=19
Value: '4906E22C-00000000'
Attribute 40 (Acct-Status-Type) length=6
Value: 1
Attribute 45 (Acct-Authentic) length=6
Value: 1
Attribute 1 (User-Name) length=5
Value: 'bea'
Attribute 4 (NAS-IP-Address) length=6
Value: 10.3.1.1
Attribute 32 (NAS-Identifier) length=19
Value: 'private-network-1'
Attribute 5 (NAS-Port) length=6
Value: 0
Attribute 30 (Called-Station-Id) length=29
Value: '00-18-4D-76-22-19:Debian-AP'
Attribute 31 (Calling-Station-Id) length=19
Value: '00-1A-70-AE-D4-53'
Attribute 61 (NAS-Port-Type) length=6
Value: 19
Attribute 77 (Connect-Info) length=22
Value: 'CONNECT 0Mbps 802.11'
RSN: added PMKSA cache entry for 00:1a:70:ae:d4:53
RSN: added PMKID - hexdump(len=16): 20 80 83 37 6b 8f 4c 12 1c ad 8a 0f 08 20 a7 93
IEEE 802.1X: 00:1a:70:ae:d4:53 - aWhile --> 0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20081028/bd51d292/attachment.html>
More information about the Freeradius-Users
mailing list