Problem with MySQL and Accouting-On record
Ángel L. Mateo
amateo at um.es
Tue Nov 10 10:23:13 CET 2020
Ok. I think I'm closer to the problem.
I have attached 2 debug files, for 2 different tests I have run. Boths
tests have been run with an empty mysql.
In the debug_works.txt I have done this:
* Start freeradius
* Send accounting start record for one user (request (1)). This record
is stored in mysql and deleted from the buffered file.
* Send another start record for other user from other NAS, the one I
want to send later an "Accouting-On" (request (2) and (3)). This record
is also stored in the mysql and deleted from the buffered file.
* Send "Accouting-On" packet from the same NAS than previous (request
(4) and (5)). This requests updates one record in the mysql (line 3443)
and is deleted from the buffered file.
* Later requests are also processed (I don't have tested this, but as
buffered files are empty, it should be no problem to be processed).
In the debug_dontwork.txt I have done this:
* Start freeradius
* Send accounting start record for one user (request (1)). This record
is stored in mysql and deleted from the buffered file. This NAS
(155.54.213.5) is different than the one sending Accouting-On packets
(155.54.213.6)
* Send "Accouting-On" packet from other NAS than previous (request (2)
and (3)). This request updates no record (line 3267) and is not deleted
from the buffered file. It doesn't update any record because I don't any
record stored from this NAS, so it's correct not to update any record.
* Send accouting stop record for the previous user (request (5)). This
request is never been processed from buffered files, because (6) and
later always tries to make first the pending "Accouting-On"
El 9/11/20 a las 14:55, Alan DeKok escribió:
>
>
>> On Nov 9, 2020, at 8:42 AM, Ángel L. Mateo <amateo at um.es> wrote:
>>
>> Sorry... I was describing the config, I thought it would be enough. The whole config is:
>>
>> * this is the server config:
>
> Read this before doing anything else: http://wiki.freeradius.org/list-help
>
> The mailing list strips attachments which are "zip" files. We don't need to see the server configuration. And we REALLY don't need to see the default configuration files. It's a mystery to me why people post the default configuration files to the list. Do people think we haven't seen it before?
>
> We ask for the debug output because NOTHING else lets us figure out what the server is doing. We put this recommendation _everywhere_, and still people don't follow it. And people still don't understand _why_ it's necessary, despite all the documentation explaining it.
>
> 20 years of writing documentation and having people ignore it will make anyone cranky.
>
> In short, post the debug output. And when you need to fix an issue, _read_ the debug output. It tells you exactly what the server is doing, and why.
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información
y las Comunicaciones Aplicadas (ATICA)
http://www.um.es/atica
Tfo: 868889150
Fax: 868888337
-------------- next part --------------
FreeRADIUS Version 3.0.19
Copyright (C) 1999-2019 The FreeRADIUS server project and contributors
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License
For more information about these matters, see the file named COPYRIGHT
Starting - reading configuration files ...
including dictionary file /usr/share/freeradius/dictionary
including dictionary file /usr/share/freeradius/dictionary.dhcp
including dictionary file /usr/share/freeradius/dictionary.vqp
including dictionary file /etc/freeradius/3.0/dictionary
including configuration file /etc/freeradius/3.0/radiusd.conf
including configuration file /etc/freeradius/3.0/proxy.conf
including files in directory /etc/freeradius/3.0/clients.d/
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod9.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod8.conf
including configuration file /etc/freeradius/3.0/clients.d/inanna.conf
including configuration file /etc/freeradius/3.0/clients.d/pbxapp.conf
including configuration file /etc/freeradius/3.0/clients.d/sestertium-desa.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod6.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod10.conf
including configuration file /etc/freeradius/3.0/clients.d/cloto.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod11.conf
including configuration file /etc/freeradius/3.0/clients.d/vpn-mikrotik-ccr-1.conf
including configuration file /etc/freeradius/3.0/clients.d/arrixaca.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod1.conf
including configuration file /etc/freeradius/3.0/clients.d/sestertium2.conf
including configuration file /etc/freeradius/3.0/clients.d/histclinicpruebas.conf
including configuration file /etc/freeradius/3.0/clients.d/firewall.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa1.conf
including configuration file /etc/freeradius/3.0/clients.d/eufrosine.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa3.conf
including configuration file /etc/freeradius/3.0/clients.d/climene2.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa4.conf
including configuration file /etc/freeradius/3.0/clients.d/fvives.conf
including configuration file /etc/freeradius/3.0/clients.d/harmonia.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl4.conf
including configuration file /etc/freeradius/3.0/clients.d/aglaya.conf
including configuration file /etc/freeradius/3.0/clients.d/asa5500.conf
including configuration file /etc/freeradius/3.0/clients.d/talia.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-test2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod12.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-desa.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod4.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod5.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturna.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa2.conf
including configuration file /etc/freeradius/3.0/clients.d/venus.conf
including configuration file /etc/freeradius/3.0/clients.d/nona.conf
including configuration file /etc/freeradius/3.0/clients.d/esmirna.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod3.conf
including configuration file /etc/freeradius/3.0/clients.d/portalcautivo.conf
including configuration file /etc/freeradius/3.0/clients.d/climene.conf
including configuration file /etc/freeradius/3.0/clients.d/vlan_atica.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-desa2.conf
including configuration file /etc/freeradius/3.0/clients.d/decima.conf
including configuration file /etc/freeradius/3.0/clients.d/hospital_santalucia.conf
including configuration file /etc/freeradius/3.0/clients.d/oltest2.conf
including configuration file /etc/freeradius/3.0/clients.d/suma.conf
including configuration file /etc/freeradius/3.0/clients.d/pluton.conf
including configuration file /etc/freeradius/3.0/clients.d/moralesmeseguer.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturna2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod7.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesisfa1.conf
including configuration file /etc/freeradius/3.0/clients.d/libra42_605.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesis2.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-1.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod15.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod14.conf
including configuration file /etc/freeradius/3.0/clients.d/grado.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturnafatest.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod13.conf
including configuration file /etc/freeradius/3.0/clients.d/libra41_618.conf
including configuration file /etc/freeradius/3.0/clients.d/hydra-hydra-db02.conf
including configuration file /etc/freeradius/3.0/clients.d/artemis.conf
including configuration file /etc/freeradius/3.0/clients.d/isis.conf
including configuration file /etc/freeradius/3.0/clients.d/oltest1.conf
including configuration file /etc/freeradius/3.0/clients.d/puestosoc.conf
including configuration file /etc/freeradius/3.0/clients.d/localhost.conf
including configuration file /etc/freeradius/3.0/clients.d/cassotisfatest.conf
including configuration file /etc/freeradius/3.0/clients.d/radius2-rediris.conf
including configuration file /etc/freeradius/3.0/clients.d/pbxws.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl2.conf
including configuration file /etc/freeradius/3.0/clients.d/hydra-hydra-db01.conf
including configuration file /etc/freeradius/3.0/clients.d/joaquin_lopez.conf
including configuration file /etc/freeradius/3.0/clients.d/monitorum_nyctalus3x.conf
including configuration file /etc/freeradius/3.0/clients.d/egeria.conf
including configuration file /etc/freeradius/3.0/clients.d/mikrotic_facinf.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl3.conf
including configuration file /etc/freeradius/3.0/clients.d/araneus.conf
including configuration file /etc/freeradius/3.0/clients.d/ananke.conf
including configuration file /etc/freeradius/3.0/clients.d/radius-rediris.conf
including configuration file /etc/freeradius/3.0/clients.d/monitor.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod2.conf
including configuration file /etc/freeradius/3.0/clients.d/aps.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-3.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-4.conf
including configuration file /etc/freeradius/3.0/clients.d/aglae.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesisfatest.conf
including configuration file /etc/freeradius/3.0/clients.d/libra42_618.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-test1.conf
including configuration file /etc/freeradius/3.0/clients.d/decima2.conf
including configuration file /etc/freeradius/3.0/clients.d/libra41_605.conf
including configuration file /etc/freeradius/3.0/clients.d/isen.conf
including configuration file /etc/freeradius/3.0/clients.d/hospital_losarcos.conf
including configuration file /etc/freeradius/3.0/clients.d/pas.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl1.conf
including files in directory /etc/freeradius/3.0/mods-enabled/
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
including configuration file /etc/freeradius/3.0/mods-enabled/pam
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
including configuration file /etc/freeradius/3.0/mods-enabled/realm
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
including configuration file /etc/freeradius/3.0/mods-enabled/files_ecopas
including configuration file /etc/freeradius/3.0/mods-enabled/eap
including configuration file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
including configuration file /etc/freeradius/3.0/mods-enabled/always
including configuration file /etc/freeradius/3.0/mods-enabled/detail
including configuration file /etc/freeradius/3.0/mods-enabled/preprocess
including configuration file /etc/freeradius/3.0/mods-enabled/sql_pool
including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
including configuration file /etc/freeradius/3.0/mods-enabled/files_puestosoc
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
including configuration file /etc/freeradius/3.0/mods-enabled/files_vpn
including configuration file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
including configuration file /etc/freeradius/3.0/mods-enabled/sqlippool
including configuration file /etc/freeradius/3.0/mods-config/sql/ippool/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
including configuration file /etc/freeradius/3.0/mods-enabled/expr
including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter
including configuration file /etc/freeradius/3.0/mods-enabled/sql
including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
including configuration file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
including configuration file /etc/freeradius/3.0/mods-enabled/pap
including configuration file /etc/freeradius/3.0/mods-enabled/expiration
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
including configuration file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
including configuration file /etc/freeradius/3.0/mods-enabled/files_adminslogin
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
including configuration file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
including configuration file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
including configuration file /etc/freeradius/3.0/mods-enabled/files_monitorum
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
including configuration file /etc/freeradius/3.0/mods-enabled/ldap
including configuration file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
including configuration file /etc/freeradius/3.0/mods-enabled/mschap
including files in directory /etc/freeradius/3.0/instantiate/
including configuration file /etc/freeradius/3.0/templates.conf
including files in directory /etc/freeradius/3.0/policy.d/
including configuration file /etc/freeradius/3.0/policy.d/accounting
including configuration file /etc/freeradius/3.0/policy.d/operator-name
including configuration file /etc/freeradius/3.0/policy.d/dhcp
including configuration file /etc/freeradius/3.0/policy.d/eap
including configuration file /etc/freeradius/3.0/policy.d/rfc7542
including configuration file /etc/freeradius/3.0/policy.d/canonicalization
including configuration file /etc/freeradius/3.0/policy.d/cui
including configuration file /etc/freeradius/3.0/policy.d/control
including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids
including configuration file /etc/freeradius/3.0/policy.d/abfab-tr
including configuration file /etc/freeradius/3.0/policy.d/filter
including configuration file /etc/freeradius/3.0/policy.d/debug
including files in directory /etc/freeradius/3.0/listen.d/
including configuration file /etc/freeradius/3.0/listen.d/proxy.conf
including configuration file /etc/freeradius/3.0/listen.d/acct.conf
including configuration file /etc/freeradius/3.0/listen.d/auth.conf
including files in directory /etc/freeradius/3.0/sites-enabled/
including configuration file /etc/freeradius/3.0/sites-enabled/adminslogin
including configuration file /etc/freeradius/3.0/sites-enabled/aplicaciones
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam
including configuration file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
including configuration file /etc/freeradius/3.0/sites-enabled/status
including files in directory /etc/freeradius/3.0/statusclients.d/
including configuration file /etc/freeradius/3.0/statusclients.d/monitorum_nyctalus21.conf
including configuration file /etc/freeradius/3.0/statusclients.d/admin.conf
including configuration file /etc/freeradius/3.0/statusclients.d/monitorum_nyctalus3x.conf
including configuration file /etc/freeradius/3.0/statusclients.d/nyctalus20.conf
including configuration file /etc/freeradius/3.0/sites-enabled/vpn
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-inner-tunnel
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-rediris
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-rediris-inner-tunnel
including configuration file /etc/freeradius/3.0/sites-enabled/monitorum
including configuration file /etc/freeradius/3.0/sites-enabled/ecopas
including configuration file /etc/freeradius/3.0/sites-enabled/control-socket
including configuration file /etc/freeradius/3.0/sites-enabled/puestosoc
main {
security {
user = "freerad"
group = "freerad"
allow_core_dumps = no
}
name = "freeradius"
prefix = "/usr"
localstatedir = "/var"
logdir = "/var/log/freeradius"
run_dir = "/var/run/freeradius"
}
main {
name = "freeradius"
prefix = "/usr"
localstatedir = "/var"
sbindir = "/usr/sbin"
logdir = "/var/log/freeradius"
run_dir = "/var/run/freeradius"
libdir = "/usr/lib/freeradius"
radacctdir = "/var/log/freeradius/radacct"
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5
max_requests = 4096
pidfile = "/var/run/freeradius/freeradius.pid"
checkrad = "/usr/sbin/checkrad"
debug_level = 0
proxy_requests = yes
log {
stripped_names = no
auth = no
auth_badpass = no
auth_goodpass = no
colourise = yes
msg_denied = "You are already logged in - access denied"
}
resources {
}
security {
max_attributes = 200
reject_delay = 1.000000
status_server = yes
}
}
radiusd: #### Loading Realms and Home Servers ####
home_server radius.rediris.es {
ipaddr = radius.rediris.es IPv4 address [130.206.1.106]
port = 1812
type = "auth+acct"
proto = "udp"
secret = <<< secret >>>
response_window = 30.000000
response_timeouts = 1
max_outstanding = 65536
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_timeout = 4
num_answers_to_alive = 3
revive_interval = 300
limit {
max_connections = 16
max_requests = 0
lifetime = 0
idle_timeout = 0
}
coa {
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
}
home_server radius2.rediris.es {
ipaddr = radius2.rediris.es IPv4 address [130.206.1.107]
port = 1812
type = "auth+acct"
proto = "udp"
secret = <<< secret >>>
response_window = 30.000000
response_timeouts = 1
max_outstanding = 65536
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_timeout = 4
num_answers_to_alive = 3
revive_interval = 300
limit {
max_connections = 16
max_requests = 0
lifetime = 0
idle_timeout = 0
}
coa {
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
}
home_server_pool rediris {
type = fail-over
home_server = radius.rediris.es
home_server = radius2.rediris.es
}
realm DEFAULT {
auth_pool = rediris
nostrip
}
realm NULL {
}
realm cii-murcia.es {
}
realm lcu.es {
}
realm ticarum.es {
}
realm um.es {
}
realm ~.+\.um\.es$ {
}
radiusd: #### Loading Clients ####
client sakaiprod9 {
ipaddr = 155.54.216.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod9"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod8 {
ipaddr = 155.54.216.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod8"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client inanna {
ipaddr = 155.54.221.9
require_message_authenticator = no
secret = <<< secret >>>
shortname = "inanna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pbxapp {
ipaddr = 155.54.213.197
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pbxapp"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sestertium-desa {
ipaddr = 155.54.66.44
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sestertium-desa"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod6 {
ipaddr = 155.54.216.20
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod6"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod10 {
ipaddr = 155.54.216.36
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod10"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client cloto {
ipaddr = 155.54.208.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "cloto"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod11 {
ipaddr = 155.54.216.37
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod11"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client vpn-mikrotik-ccr-1 {
ipaddr = 155.54.213.6
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vpn-mikrotik-ccr-1"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client arrixaca {
ipaddr = 147.84.199.3
require_message_authenticator = no
secret = <<< secret >>>
shortname = "arrixaca"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod1 {
ipaddr = 155.54.216.11
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sestertium2 {
ipaddr = 155.54.216.70
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sestertium2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client histclinicpruebas {
ipaddr = 155.54.215.40
require_message_authenticator = no
secret = <<< secret >>>
shortname = "histclinicpruebas"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client firewall {
ipaddr = 155.54.212.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "firewall"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa1 {
ipaddr = 155.54.208.135
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client eufrosine {
ipaddr = 155.54.208.21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "eufrosine"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa3 {
ipaddr = 155.54.208.137
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client climene2 {
ipaddr = 155.54.215.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "climene2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa4 {
ipaddr = 155.54.208.138
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client fvives {
ipaddr = 155.54.67.8
require_message_authenticator = no
secret = <<< secret >>>
shortname = "fvives"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client harmonia {
ipaddr = 155.54.221.14
require_message_authenticator = no
secret = <<< secret >>>
shortname = "harmonia"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl4 {
ipaddr = 155.54.216.224
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aglaya {
ipaddr = 155.54.221.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aglaya"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client asa5500 {
ipaddr = 155.54.213.5
require_message_authenticator = no
secret = <<< secret >>>
shortname = "asa5500"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client talia {
ipaddr = 155.54.215.30
require_message_authenticator = no
secret = <<< secret >>>
shortname = "talia"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-test2 {
ipaddr = 155.54.215.42
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-test2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod12 {
ipaddr = 155.54.216.38
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod12"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-desa {
ipaddr = 155.54.215.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-desa"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod4 {
ipaddr = 155.54.216.14
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-2 {
ipaddr = 155.54.1.22
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-2"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod5 {
ipaddr = 155.54.216.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod5"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturna {
ipaddr = 155.54.216.100
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa2 {
ipaddr = 155.54.208.136
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client venus {
ipaddr = 155.54.208.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "venus"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client nona {
ipaddr = 155.54.216.99
require_message_authenticator = no
secret = <<< secret >>>
shortname = "nona"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client esmirna {
ipaddr = 155.54.215.26
require_message_authenticator = no
secret = <<< secret >>>
shortname = "esmirna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod3 {
ipaddr = 155.54.216.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client portalcautivo {
ipaddr = 155.54.213.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "portalcautivo"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client climene {
ipaddr = 155.54.215.31
require_message_authenticator = no
secret = <<< secret >>>
shortname = "climene"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client vlan_atica {
ipaddr = 155.54.66.0/23
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vlan_atica"
virtual_server = "ecopas"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-desa2 {
ipaddr = 155.54.215.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-desa2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client decima {
ipaddr = 155.54.216.127
require_message_authenticator = no
secret = <<< secret >>>
shortname = "decima"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hospital_santalucia {
ipaddr = 147.84.199.6
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hospital_santalucia"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client oltest2 {
ipaddr = 155.54.215.20
require_message_authenticator = no
secret = <<< secret >>>
shortname = "oltest2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client suma {
ipaddr = 155.54.216.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "suma"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pluton {
ipaddr = 155.54.66.182
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pluton"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client moralesmeseguer {
ipaddr = 147.84.199.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "moralesmeseguer"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturna2 {
ipaddr = 155.54.216.200
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturna2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod7 {
ipaddr = 155.54.216.23
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod7"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesisfa1 {
ipaddr = 155.54.216.144
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesisfa1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra42_605 {
ipaddr = 155.54.212.221
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra42_605"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesis2 {
ipaddr = 155.54.216.117
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesis2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-1 {
ipaddr = 155.54.1.21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-1"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod15 {
ipaddr = 155.54.216.35
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod15"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod14 {
ipaddr = 155.54.216.33
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod14"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client grado {
ipaddr = 155.54.208.2
require_message_authenticator = no
secret = <<< secret >>>
shortname = "grado"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturnafatest {
ipaddr = 155.54.215.17
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturnafatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod13 {
ipaddr = 155.54.216.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod13"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra41_618 {
ipaddr = 155.54.218.60
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra41_618"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hydra-hydra-db02 {
ipaddr = 155.54.208.102
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hydra-hydra-db02"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client artemis {
ipaddr = 155.54.208.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "artemis"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client isis {
ipaddr = 155.54.221.12
require_message_authenticator = no
secret = <<< secret >>>
shortname = "isis"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client oltest1 {
ipaddr = 155.54.215.19
require_message_authenticator = no
secret = <<< secret >>>
shortname = "oltest1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client puestosoc {
ipaddr = 155.54.144.0/22
require_message_authenticator = no
secret = <<< secret >>>
shortname = "puestosoc"
virtual_server = "puestosoc"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client localhost {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vpn-mikrotik-ccr-1-prueba"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client cassotisfatest {
ipaddr = 155.54.215.18
require_message_authenticator = no
secret = <<< secret >>>
shortname = "cassotisfatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client radius2-rediris {
ipaddr = 130.206.1.107
require_message_authenticator = no
secret = <<< secret >>>
shortname = "radius2-rediris"
virtual_server = "eduroam-rediris"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pbxws {
ipaddr = 155.54.213.215
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pbxws"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl2 {
ipaddr = 155.54.216.221
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hydra-hydra-db01 {
ipaddr = 155.54.208.100
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hydra-hydra-db01"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client joaquin_lopez {
ipaddr = 155.54.66.68
require_message_authenticator = no
secret = <<< secret >>>
shortname = "joaquin_lopez"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitorum_nyctalus3x {
ipaddr = 155.54.212.48/29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus3x"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client egeria {
ipaddr = 155.54.215.27
require_message_authenticator = no
secret = <<< secret >>>
shortname = "egeria"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client mikrotic_facinf {
ipaddr = 155.54.204.113
require_message_authenticator = no
secret = <<< secret >>>
shortname = "mikrotic_facinf"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl3 {
ipaddr = 155.54.216.223
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client araneus {
ipaddr = 155.54.212.224/27
require_message_authenticator = no
secret = <<< secret >>>
shortname = "araneus"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client ananke {
ipaddr = 155.54.221.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "ananke"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client radius-rediris {
ipaddr = 130.206.1.106
require_message_authenticator = no
secret = <<< secret >>>
shortname = "radius-rediris"
virtual_server = "eduroam-rediris"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitor {
ipaddr = 155.54.67.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitor"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod2 {
ipaddr = 155.54.216.12
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aps {
ipaddr = 10.57.0.0/16
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aps"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-3 {
ipaddr = 155.54.1.31
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-3"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-4 {
ipaddr = 155.54.1.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-4"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aglae {
ipaddr = 155.54.221.11
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aglae"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesisfatest {
ipaddr = 155.54.215.16
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesisfatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra42_618 {
ipaddr = 155.54.218.61
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra42_618"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-test1 {
ipaddr = 155.54.215.41
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-test1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client decima2 {
ipaddr = 155.54.216.67
require_message_authenticator = no
secret = <<< secret >>>
shortname = "decima2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra41_605 {
ipaddr = 155.54.212.220
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra41_605"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client isen {
ipaddr = 62.43.188.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "isen"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hospital_losarcos {
ipaddr = 147.84.199.5
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hospital_losarcos"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pas {
ipaddr = 155.54.16.0/21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pas"
virtual_server = "ecopas"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl1 {
ipaddr = 155.54.216.220
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
Debugger not attached
# Creating Auth-Type = pam
# Creating Auth-Type = PAP
# Creating Auth-Type = eap
# Creating Autz-Type = Status-Server
# Creating Auth-Type = MS-CHAP
# Creating Auth-Type = eap-eduroam-rediris
radiusd: #### Instantiating modules ####
modules {
# Loaded module rlm_files
# Loading module "files_eduroam_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
files files_eduroam_inner {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_inner/authorize"
}
# Loaded module rlm_pam
# Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam
pam {
pam_auth = "radiusd"
}
# Loaded module rlm_linelog
# Loading module "syslog" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog
linelog syslog {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.%{%{%{reply:Packet-Type}:-%{Packet-Type}}:-default}"
}
# Loaded module rlm_detail
# Loading module "eduroam_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
detail eduroam_log {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "aplicaciones_log" from file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
detail aplicaciones_log {
filename = "/var/log/freeradius/radacct/%{%{client:Client-Id}:-%{%{Calling-Station-Id}:-%{Client-IP-Address}}}/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_realm
# Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm
realm IPASS {
format = "prefix"
delimiter = "/"
ignore_default = no
ignore_null = no
}
# Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm
realm suffix {
format = "suffix"
delimiter = "@"
ignore_default = no
ignore_null = no
}
# Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm
realm bangpath {
format = "prefix"
delimiter = "!"
ignore_default = no
ignore_null = no
}
# Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm
realm realmpercent {
format = "suffix"
delimiter = "%"
ignore_default = no
ignore_null = no
}
# Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm
realm ntdomain {
format = "prefix"
delimiter = "\\"
ignore_default = no
ignore_null = no
}
# Loading module "files_eduroam_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
files files_eduroam_outer {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_outer/authorize"
}
# Loading module "files_ecopas" from file /etc/freeradius/3.0/mods-enabled/files_ecopas
files files_ecopas {
filename = "/etc/freeradius/3.0/mods-config/files_ecopas/authorize"
}
# Loaded module rlm_eap
# Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap
eap {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
# Loading module "eap-eduroam-rediris" from file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
eap eap-eduroam-rediris {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
# Loaded module rlm_ippool
# Loading module "pool_vpn_ingenia" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
ippool pool_vpn_ingenia {
filename = "/etc/freeradius/3.0/db.pool_vpn_ingenia.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_ingenia.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.40
range_stop = 155.54.194.41
netmask = 255.255.255.255
cache_size = 2
override = no
maximum_timeout = 0
}
# Loaded module rlm_always
# Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always
always reject {
rcode = "reject"
simulcount = 0
mpp = no
}
# Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always
always fail {
rcode = "fail"
simulcount = 0
mpp = no
}
# Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always
always ok {
rcode = "ok"
simulcount = 0
mpp = no
}
# Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always
always handled {
rcode = "handled"
simulcount = 0
mpp = no
}
# Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always
always invalid {
rcode = "invalid"
simulcount = 0
mpp = no
}
# Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always
always userlock {
rcode = "userlock"
simulcount = 0
mpp = no
}
# Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always
always notfound {
rcode = "notfound"
simulcount = 0
mpp = no
}
# Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always
always noop {
rcode = "noop"
simulcount = 0
mpp = no
}
# Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always
always updated {
rcode = "updated"
simulcount = 0
mpp = no
}
# Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail
detail {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_preprocess
# Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess
preprocess {
huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups"
hints = "/etc/freeradius/3.0/mods-config/preprocess/hints"
with_ascend_hack = no
ascend_channels_per_line = 23
with_ntdomain_hack = no
with_specialix_jetstream_hack = no
with_cisco_vsa_hack = no
with_alvarion_vsa_hack = no
}
# Loaded module rlm_sql
# Loading module "sql_pool" from file /etc/freeradius/3.0/mods-enabled/sql_pool
sql sql_pool {
driver = "rlm_sql_mysql"
server = "sqldbtelematica.um.es"
port = 3306
login = "usradiuslogop"
password = <<< secret >>>
radius_db = "dbradius"
read_groups = yes
read_profiles = yes
read_clients = no
delete_stale_sessions = yes
sql_user_name = "%{User-Name}"
default_user_profile = ""
client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{sql_pool-sql-Group}' ORDER BY id"
authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{sql_pool-sql-Group}' ORDER BY id"
group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
auto_escape = no
accounting {
reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}"
type {
accounting-on {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
accounting-off {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
start {
query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')"
}
interim-update {
query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
stop {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
}
}
post-auth {
reference = ".query"
query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
}
}
rlm_sql (sql_pool): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Creating attribute sql_pool-SQL-Group
# Loading module "files_eduroam_rediris_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
files files_eduroam_rediris_inner {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_rediris_inner/authorize"
}
# Loading module "files_puestosoc" from file /etc/freeradius/3.0/mods-enabled/files_puestosoc
files files_puestosoc {
filename = "/etc/freeradius/3.0/mods-config/files_puestosoc/authorize"
}
# Loading module "pool_vpn_gnoss" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
ippool pool_vpn_gnoss {
filename = "/etc/freeradius/3.0/db.pool_vpn_gnoss.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_gnoss.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.16
range_stop = 155.54.194.18
netmask = 255.255.255.255
cache_size = 3
override = no
maximum_timeout = 0
}
# Loading module "files_vpn" from file /etc/freeradius/3.0/mods-enabled/files_vpn
files files_vpn {
filename = "/etc/freeradius/3.0/mods-config/files_vpn/authorize"
}
# Loading module "files_aplicaciones" from file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
files files_aplicaciones {
filename = "/etc/freeradius/3.0/mods-config/files_aplicaciones/authorize"
}
# Loaded module rlm_sqlippool
# Loading module "sqlippool" from file /etc/freeradius/3.0/mods-enabled/sqlippool
sqlippool {
sql_module_instance = "sql_pool"
lease_duration = 3600
pool_name = "Pool-Name"
default_pool = "main_pool"
attribute_name = "Framed-IP-Address"
allocate_begin = "START TRANSACTION"
allocate_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE expiry_time <= NOW() - INTERVAL 1 SECOND AND nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
allocate_clear_timeout = 1
allocate_find = "SELECT framedipaddress FROM radippool WHERE pool_name = '%{control:Pool-Name}' AND (expiry_time < NOW() OR expiry_time IS NULL) ORDER BY (username <> '%{User-Name}'), (callingstationid <> '%{Calling-Station-Id}'), expiry_time LIMIT 1 FOR UPDATE"
allocate_update = "UPDATE radippool SET nasipaddress = '%{NAS-IP-Address}', pool_key = '%{NAS-Port}', callingstationid = '%{Calling-Station-Id}', username = '%{User-Name}', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE framedipaddress = '%I'"
allocate_commit = "COMMIT"
pool_check = "SELECT id FROM radippool WHERE pool_name='%{control:Pool-Name}' LIMIT 1"
start_begin = "START TRANSACTION"
start_update = "UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
start_commit = "COMMIT"
alive_begin = "START TRANSACTION"
alive_update = "UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
alive_commit = "COMMIT"
stop_begin = "START TRANSACTION"
stop_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
stop_commit = "COMMIT"
on_begin = "START TRANSACTION"
on_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
on_commit = "COMMIT"
off_begin = "START TRANSACTION"
off_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
off_commit = "COMMIT"
messages {
exists = "Existing IP: %{reply:Framed-IP-Address} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
success = "Allocated IP: %{reply:Framed-IP-Address} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
clear = "Released IP Framed-IP-Address (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name})"
failed = "IP Allocation FAILED from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
nopool = "No Pool-Name defined (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
}
}
# Loading module "eduroam_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
detail eduroam_rediris_log {
filename = "/var/log/freeradius/radacct/eduroam-rediris/eduroam_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "pool_vpn_ext_pas" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
ippool pool_vpn_ext_pas {
filename = "/etc/freeradius/3.0/db.pool_vpn_ext_pas.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_ext_pas.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.32
range_stop = 155.54.194.35
netmask = 255.255.255.255
cache_size = 4
override = yes
maximum_timeout = 0
}
# Loaded module rlm_expr
# Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr
expr {
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ"
}
# Loaded module rlm_attr_filter
# Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.post-proxy {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy"
key = "%{Realm}"
relaxed = no
}
# Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.pre-proxy {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy"
key = "%{Realm}"
relaxed = no
}
# Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.access_reject {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.access_challenge {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.accounting_response {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.post-proxy-tlm" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.post-proxy-tlm {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy-tlm"
key = "%{Realm}"
relaxed = no
}
# Loading module "sql" from file /etc/freeradius/3.0/mods-enabled/sql
sql sql {
driver = "rlm_sql_mysql"
server = "kogia50.um.es"
port = 3306
login = "usradiuslogop"
password = <<< secret >>>
radius_db = "dbradiuslog"
read_groups = yes
read_profiles = yes
read_clients = no
delete_stale_sessions = yes
sql_user_name = "%{User-Name}"
default_user_profile = ""
client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{sql-sql-Group}' ORDER BY id"
authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{sql-sql-Group}' ORDER BY id"
group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
auto_escape = no
accounting {
reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}"
type {
accounting-on {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
accounting-off {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
start {
query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')"
}
interim-update {
query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
stop {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
}
}
post-auth {
reference = ".query"
query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
}
}
rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Creating attribute sql-SQL-Group
# Loading module "pool_vpn_izertis" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
ippool pool_vpn_izertis {
filename = "/etc/freeradius/3.0/db.pool_vpn_izertis.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_izertis.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.24
range_stop = 155.54.194.27
netmask = 255.255.255.255
cache_size = 4
override = no
maximum_timeout = 0
}
# Loading module "pool_vpn_alu" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
ippool pool_vpn_alu {
filename = "/etc/freeradius/3.0/db.pool_vpn_alu.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_alu.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id}"
range_start = 155.54.197.1
range_stop = 155.54.197.254
netmask = 255.255.255.255
cache_size = 254
override = no
maximum_timeout = 0
}
# Loading module "vpn_log" from file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
detail vpn_log {
filename = "/var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "sql_log_um" from file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
detail sql_log_um {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_sql"
header = "%t"
permissions = 384
locking = false
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_pap
# Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap
pap {
normalise = yes
}
# Loaded module rlm_expiration
# Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration
# Loading module "pool_vpn_asio" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
ippool pool_vpn_asio {
filename = "/etc/freeradius/3.0/db.pool_vpn_asio"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_asio.index"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.11
range_stop = 155.54.194.12
netmask = 255.255.255.255
cache_size = 2
override = no
maximum_timeout = 0
}
# Loading module "adminslogin_log" from file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
detail adminslogin_log {
filename = "/var/log/freeradius/radacct/adminslogin/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "files_adminslogin" from file /etc/freeradius/3.0/mods-enabled/files_adminslogin
files files_adminslogin {
filename = "/etc/freeradius/3.0/mods-config/files_adminslogin/authorize"
}
# Loading module "syslog_expiration" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
linelog syslog_expiration {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.Expiration"
}
# Loaded module rlm_ldap
# Loading module "ldap-ecopas" from file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
ldap ldap-ecopas {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(|(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))(&(objectClass=posixGroup)(memberUid=%{%{Stripped-User-Name}:-%{User-Name}})))"
cacheable_name = no
cacheable_dn = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-ecopas-LDAP-Group
# Loading module "pool_vpn_avanttic" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
ippool pool_vpn_avanttic {
filename = "/etc/freeradius/3.0/db.pool_vpn_avanttic.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_avanttic.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.1
range_stop = 155.54.194.7
netmask = 255.255.255.255
cache_size = 7
override = no
maximum_timeout = 0
}
# Loading module "eduroam_inner_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
detail eduroam_inner_rediris_log {
filename = "/var/log/freeradius/radacct/eduroam-rediris/eduroam_inner_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail auth_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail reply_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail pre_proxy_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail post_proxy_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "eduroam_inner_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
detail eduroam_inner_log {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_inner_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "ecopas_log" from file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
detail ecopas_log {
filename = "/var/log/freeradius/radacct/ecopas/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "syslog_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
linelog syslog_accounting {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.%{%{Acct-Status-Type}:-unknown}"
}
# Loading module "files_eduroam_rediris_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
files files_eduroam_rediris_outer {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_rediris_outer/authorize"
}
# Loading module "ldap-puestosoc" from file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
ldap ldap-puestosoc {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(|(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))(&(objectClass=posixGroup)(memberUid=%{%{Stripped-User-Name}:-%{User-Name}})))"
cacheable_name = no
cacheable_dn = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-puestosoc-LDAP-Group
# Loading module "files_monitorum" from file /etc/freeradius/3.0/mods-enabled/files_monitorum
files files_monitorum {
filename = "/etc/freeradius/3.0/mods-config/files_monitorum/authorize"
}
# Loading module "pool_vpn" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
ippool pool_vpn {
filename = "/etc/freeradius/3.0/db.pool_vpn.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id}"
range_start = 155.54.194.48
range_stop = 155.54.194.239
netmask = 255.255.255.255
cache_size = 192
override = no
maximum_timeout = 0
}
# Loading module "ldap" from file /etc/freeradius/3.0/mods-enabled/ldap
ldap ldap {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(&(mail=%{User-Name})(objectClass=posixAccount))"
cacheable_name = no
cacheable_dn = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-LDAP-Group
# Loading module "puestosoc_log" from file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
detail puestosoc_log {
filename = "/var/log/freeradius/radacct/puestosoc/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_mschap
# Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap
mschap {
use_mppe = yes
require_encryption = no
require_strong = no
with_ntdomain_hack = yes
passchange {
}
allow_retry = yes
winbind_retry_with_normalised_username = no
}
instantiate {
}
# Instantiating module "files_eduroam_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_inner/authorize
# Instantiating module "syslog" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog
# Instantiating module "eduroam_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
rlm_detail (eduroam_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "aplicaciones_log" from file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
rlm_detail (aplicaciones_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "files_eduroam_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_outer/authorize
# Instantiating module "files_ecopas" from file /etc/freeradius/3.0/mods-enabled/files_ecopas
reading pairlist file /etc/freeradius/3.0/mods-config/files_ecopas/authorize
# Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap
# Linked to sub-module rlm_eap_md5
# Linked to sub-module rlm_eap_leap
# Linked to sub-module rlm_eap_gtc
gtc {
challenge = "Password: "
auth_type = "PAP"
}
# Linked to sub-module rlm_eap_tls
tls {
tls = "tls-common"
}
tls-config tls-common {
verify_depth = 0
ca_path = "/etc/freeradius/3.0/certs"
pem_file_type = yes
private_key_file = "/etc/freeradius/3.0/certs/priv-radius.um.es.pem"
certificate_file = "/etc/freeradius/3.0/certs/cert-radius.um.es.pem"
ca_file = "/etc/freeradius/3.0/certs/ca-umu-certificado.pem"
dh_file = "/etc/freeradius/3.0/certs/dh"
fragment_size = 1024
include_length = yes
auto_chain = yes
check_crl = no
check_all_crl = no
cipher_list = "DEFAULT"
ecdh_curve = "prime256v1"
tls_max_version = ""
tls_min_version = "1.0"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
skip_if_ocsp_ok = no
}
ocsp {
enable = no
override_cert_url = yes
url = "http://127.0.0.1/ocsp/"
use_nonce = yes
timeout = 0
softfail = no
}
}
# Linked to sub-module rlm_eap_ttls
ttls {
tls = "tls-common"
default_eap_type = "gtc"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "eduroam-inner-tunnel"
include_length = yes
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_peap
peap {
tls = "tls-common"
default_eap_type = "mschapv2"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = yes
virtual_server = "eduroam-inner-tunnel"
soh = no
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_mschapv2
mschapv2 {
with_ntdomain_hack = no
send_error = no
}
# Instantiating module "eap-eduroam-rediris" from file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
# Linked to sub-module rlm_eap_md5
# Linked to sub-module rlm_eap_leap
# Linked to sub-module rlm_eap_gtc
gtc {
challenge = "Password: "
auth_type = "PAP"
}
# Linked to sub-module rlm_eap_tls
tls {
tls = "tls-common"
}
tls-config tls-common {
verify_depth = 0
ca_path = "/etc/freeradius/3.0/certs"
pem_file_type = yes
private_key_file = "/etc/freeradius/3.0/certs/priv-radius.um.es.pem"
certificate_file = "/etc/freeradius/3.0/certs/cert-radius.um.es.pem"
ca_file = "/etc/freeradius/3.0/certs/ca-umu-certificado.pem"
dh_file = "/etc/freeradius/3.0/certs/dh"
fragment_size = 1024
include_length = yes
auto_chain = yes
check_crl = no
check_all_crl = no
cipher_list = "DEFAULT"
ecdh_curve = "prime256v1"
tls_max_version = ""
tls_min_version = "1.0"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
skip_if_ocsp_ok = no
}
ocsp {
enable = no
override_cert_url = yes
url = "http://127.0.0.1/ocsp/"
use_nonce = yes
timeout = 0
softfail = no
}
}
# Linked to sub-module rlm_eap_ttls
ttls {
tls = "tls-common"
default_eap_type = "gtc"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "eduroam-rediris-inner-tunnel"
include_length = yes
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_peap
peap {
tls = "tls-common"
default_eap_type = "mschapv2"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = yes
virtual_server = "eduroam-rediris-inner-tunnel"
soh = no
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_mschapv2
mschapv2 {
with_ntdomain_hack = no
send_error = no
}
# Instantiating module "pool_vpn_ingenia" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
# Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail
# Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess
reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups
reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints
# Instantiating module "sql_pool" from file /etc/freeradius/3.0/mods-enabled/sql_pool
rlm_sql_mysql: libmysql version: 5.7.32
mysql {
tls {
tls_required = no
check_cert = no
check_cert_cn = no
}
warnings = "auto"
}
rlm_sql (sql_pool): Attempting to connect to database "dbradius"
rlm_sql (sql_pool): Initialising connection pool
pool {
start = 1
min = 1
max = 4096
spare = 1
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 60
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_sql (sql_pool): Opening additional connection (0), 1 of 1024 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'dbradius' on sqldbtelematica.um.es via TCP/IP, server version 5.7.32-0ubuntu0.16.04.1-log, protocol version 10
# Instantiating module "files_eduroam_rediris_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_rediris_inner/authorize
# Instantiating module "files_puestosoc" from file /etc/freeradius/3.0/mods-enabled/files_puestosoc
reading pairlist file /etc/freeradius/3.0/mods-config/files_puestosoc/authorize
# Instantiating module "pool_vpn_gnoss" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
# Instantiating module "files_vpn" from file /etc/freeradius/3.0/mods-enabled/files_vpn
reading pairlist file /etc/freeradius/3.0/mods-config/files_vpn/authorize
# Instantiating module "files_aplicaciones" from file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
reading pairlist file /etc/freeradius/3.0/mods-config/files_aplicaciones/authorize
# Instantiating module "sqlippool" from file /etc/freeradius/3.0/mods-enabled/sqlippool
Ignoring "allocate_clear_timeout = 1", forcing to "allocate_clear_timeout = 1"
# Instantiating module "eduroam_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
rlm_detail (eduroam_rediris_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "pool_vpn_ext_pas" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
# Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy
# Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy
# Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject
# Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge
# Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response
# Instantiating module "attr_filter.post-proxy-tlm" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy-tlm
# Instantiating module "sql" from file /etc/freeradius/3.0/mods-enabled/sql
mysql {
tls {
tls_required = no
check_cert = no
check_cert_cn = no
}
warnings = "auto"
}
rlm_sql (sql): Attempting to connect to database "dbradiuslog"
rlm_sql (sql): Initialising connection pool
pool {
start = 1
min = 1
max = 4096
spare = 1
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 60
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_sql (sql): Opening additional connection (0), 1 of 1024 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'dbradiuslog' on kogia50.um.es via TCP/IP, server version 5.7.32-0ubuntu0.16.04.1-log, protocol version 10
# Instantiating module "pool_vpn_izertis" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
# Instantiating module "pool_vpn_alu" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
# Instantiating module "vpn_log" from file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
rlm_detail (vpn_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "sql_log_um" from file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
rlm_detail (sql_log_um): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap
# Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration
# Instantiating module "pool_vpn_asio" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
# Instantiating module "adminslogin_log" from file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
rlm_detail (adminslogin_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "files_adminslogin" from file /etc/freeradius/3.0/mods-enabled/files_adminslogin
reading pairlist file /etc/freeradius/3.0/mods-config/files_adminslogin/authorize
# Instantiating module "syslog_expiration" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
# Instantiating module "ldap-ecopas" from file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
rlm_ldap: libldap vendor: OpenLDAP, version: 20445
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap-ecopas): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap-ecopas): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
# Instantiating module "pool_vpn_avanttic" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
# Instantiating module "eduroam_inner_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
rlm_detail (eduroam_inner_rediris_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "eduroam_inner_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
rlm_detail (eduroam_inner_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "ecopas_log" from file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
rlm_detail (ecopas_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "syslog_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
# Instantiating module "files_eduroam_rediris_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_rediris_outer/authorize
# Instantiating module "ldap-puestosoc" from file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap-puestosoc): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap-puestosoc): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
# Instantiating module "files_monitorum" from file /etc/freeradius/3.0/mods-enabled/files_monitorum
reading pairlist file /etc/freeradius/3.0/mods-config/files_monitorum/authorize
# Instantiating module "pool_vpn" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
# Instantiating module "ldap" from file /etc/freeradius/3.0/mods-enabled/ldap
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
# Instantiating module "puestosoc_log" from file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
rlm_detail (puestosoc_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap
rlm_mschap (mschap): using internal authentication
} # modules
radiusd: #### Loading Virtual Servers ####
server { # from file /etc/freeradius/3.0/radiusd.conf
} # server
server adminslogin { # from file /etc/freeradius/3.0/sites-enabled/adminslogin
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server adminslogin
server aplicaciones { # from file /etc/freeradius/3.0/sites-enabled/aplicaciones
# Loading authenticate {...}
# Loading authorize {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server aplicaciones
server eduroam { # from file /etc/freeradius/3.0/sites-enabled/eduroam
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server eduroam
server buffered-sql-eduroam { # from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
# Loading preacct {...}
# Loading accounting {...}
} # server buffered-sql-eduroam
server status { # from file /etc/freeradius/3.0/sites-enabled/status
# Loading authorize {...}
} # server status
server vpn { # from file /etc/freeradius/3.0/sites-enabled/vpn
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server vpn
server eduroam-inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/eduroam-inner-tunnel
# Loading authenticate {...}
# Loading authorize {...}
# Loading post-auth {...}
} # server eduroam-inner-tunnel
server eduroam-rediris { # from file /etc/freeradius/3.0/sites-enabled/eduroam-rediris
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server eduroam-rediris
server eduroam-rediris-inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/eduroam-rediris-inner-tunnel
# Loading authenticate {...}
# Loading authorize {...}
# Loading post-auth {...}
} # server eduroam-rediris-inner-tunnel
server monitorum { # from file /etc/freeradius/3.0/sites-enabled/monitorum
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server monitorum
server ecopas { # from file /etc/freeradius/3.0/sites-enabled/ecopas
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server ecopas
server puestosoc { # from file /etc/freeradius/3.0/sites-enabled/puestosoc
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server puestosoc
radiusd: #### Opening IP addresses and Ports ####
listen {
type = "proxy"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "acct"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "auth"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "control"
listen {
socket = "/var/run/freeradius/freeradius.sock"
uid = "freerad"
gid = "freerad"
mode = "rw"
peercred = yes
}
}
listen {
type = "detail"
listen {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_sql"
load_factor = 10
poll_interval = 1
retry_interval = 30
one_shot = no
track = yes
}
}
listen {
type = "status"
ipaddr = *
port = 18121
client monitorum_nyctalus21 {
ipaddr = 155.54.212.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus21"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client admin {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "admin"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitorum_nyctalus3x {
ipaddr = 155.54.212.48/29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus3x"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client nyctalus20 {
ipaddr = 155.54.212.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "nyctalus20"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
}
Listening on proxy address * port 0
Listening on acct address * port 1813
Listening on auth address * port 1812
Listening on command file /var/run/freeradius/freeradius.sock
Listening on detail file /var/log/freeradius/radacct/eduroam/eduroam_sql as server buffered-sql-eduroam
Listening on status address * port 18121 bound to server status
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.211250 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.956154 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.101456 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.923042 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.854248 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.208130 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.001659 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.172269 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.224167 sec
(0) Received Accounting-Request Id 147 from 127.0.0.1:61051 to 127.0.0.1:1813 length 181
(0) User-Name = "angel.luis at um.es"
(0) NAS-Port = 33439744
(0) Service-Type = Framed-User
(0) Framed-Protocol = PPP
(0) Framed-IP-Address = 155.54.197.99
(0) Called-Station-Id = "155.54.213.5"
(0) Calling-Station-Id = "37.230.65.41"
(0) Acct-Status-Type = Start
(0) Acct-Delay-Time = 2
(0) Acct-Session-Id = "E56018E0"
(0) Acct-Authentic = RADIUS
(0) NAS-Port-Type = Virtual
(0) Tunnel-Client-Endpoint:0 = "37.230.65.41"
(0) ASA-TunnelGroupName = "rpvum"
(0) ASA-ClientType = Cisco-VPN-Client-IKEv1
(0) ASA-SessionType = Cisco-VPN-Client/IKEv1
(0) NAS-IP-Address = 155.54.213.5
(0) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(0) preacct {
(0) suffix: Checking for suffix after "@"
(0) suffix: Looking up realm "um.es" for User-Name = "angel.luis at um.es"
(0) suffix: Found realm "um.es"
(0) suffix: Adding Stripped-User-Name = "angel.luis"
(0) suffix: Adding Realm = "um.es"
(0) suffix: Accounting realm is LOCAL
(0) [suffix] = ok
(0) } # preacct = ok
(0) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(0) accounting {
(0) update request {
(0) X-Atica-Service = "vpn"
(0) X-Atica-Service-Filter = "vpn"
(0) } # update request = noop
(0) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(0) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201110
(0) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201110
(0) vpn_log: EXPAND %t
(0) vpn_log: --> Tue Nov 10 10:01:29 2020
(0) [vpn_log] = ok
(0) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(0) syslog_accounting: --> messages.Start
(0) syslog_accounting: EXPAND Connect: [%{User-Name}] (Called-Station-Id: %{Called-Station-Id}, Calling-Station-Id: %{Calling-Station-Id}, IP: %{%{Framed-IP-Address}:-unknown}, X-Atica-Service: %{%{X-Atica-Service}:-unknown})
(0) syslog_accounting: --> Connect: [angel.luis at um.es] (Called-Station-Id: 155.54.213.5, Calling-Station-Id: 37.230.65.41, IP: 155.54.197.99, X-Atica-Service: vpn)
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.773892 sec
(0) [syslog_accounting] = ok
(0) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: EXPAND %t
(0) sql_log_um: --> Tue Nov 10 10:01:29 2020
(0) [sql_log_um] = ok
(0) pool_vpn: This is not an Accounting-Stop
(0) [pool_vpn] = noop
(0) pool_vpn_alu: This is not an Accounting-Stop
(0) [pool_vpn_alu] = noop
(0) pool_vpn_avanttic: This is not an Accounting-Stop
(0) [pool_vpn_avanttic] = noop
(0) pool_vpn_gnoss: This is not an Accounting-Stop
(0) [pool_vpn_gnoss] = noop
(0) pool_vpn_izertis: This is not an Accounting-Stop
(0) [pool_vpn_izertis] = noop
(0) pool_vpn_ext_pas: This is not an Accounting-Stop
(0) [pool_vpn_ext_pas] = noop
(0) pool_vpn_ingenia: This is not an Accounting-Stop
(0) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(0) sqlippool: EXPAND %{User-Name}
(0) sqlippool: --> angel.luis at um.es
(0) sqlippool: SQL-User-Name set to 'angel.luis at um.es'
(0) sqlippool: EXPAND START TRANSACTION
(0) sqlippool: --> START TRANSACTION
(0) sqlippool: Executing query: START TRANSACTION
(0) sqlippool: EXPAND UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'
(0) sqlippool: --> UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '155.54.213.5' AND pool_key = '33439744' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.197.99'
(0) sqlippool: Executing query: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '155.54.213.5' AND pool_key = '33439744' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.197.99'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(0) sqlippool: EXPAND COMMIT
(0) sqlippool: --> COMMIT
(0) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(0) [sqlippool] = ok
(0) } # accounting = ok
(0) Sent Accounting-Response Id 147 from 127.0.0.1:1813 to 127.0.0.1:61051 length 0
(0) Finished request
(0) Cleaning up request packet ID 147 with timestamp +9
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
User-Name = "angel.luis at um.es"
NAS-Port = 33439744
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 155.54.197.99
Called-Station-Id = "155.54.213.5"
Calling-Station-Id = "37.230.65.41"
Acct-Status-Type = Start
Acct-Delay-Time = 3
Acct-Session-Id = "E56018E0"
Acct-Authentic = RADIUS
NAS-Port-Type = Virtual
Tunnel-Client-Endpoint:0 = "37.230.65.41"
ASA-TunnelGroupName = "rpvum"
ASA-ClientType = Cisco-VPN-Client-IKEv1
ASA-SessionType = Cisco-VPN-Client/IKEv1
NAS-IP-Address = 155.54.213.5
Stripped-User-Name = "angel.luis"
Realm = "um.es"
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:29 CET"
Packet-Transmit-Counter = 1
(1) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(1) preacct {
(1) [preprocess] = ok
(1) policy acct_unique {
(1) update request {
(1) &Tmp-String-9 := "ai:"
(1) } # update request = noop
(1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(1) EXPAND %{hex:&Class}
(1) -->
(1) EXPAND ^%{hex:&Tmp-String-9}
(1) --> ^61693a
(1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(1) else {
(1) update request {
(1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(1) --> 4401f29e5c1002a3423673588fa71974
(1) &Acct-Unique-Session-Id := 4401f29e5c1002a3423673588fa71974
(1) } # update request = noop
(1) } # else = noop
(1) } # policy acct_unique = noop
(1) } # preacct = ok
(1) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(1) accounting {
(1) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(1) sql: --> type.start.query
(1) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(1) sql: EXPAND %{User-Name}
(1) sql: --> angel.luis at um.es
(1) sql: SQL-User-Name set to 'angel.luis at um.es'
(1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')
(1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('E56018E0', '4401f29e5c1002a3423673588fa71974', 'angel.luis at um.es', 'um.es', '155.54.213.5', '33439744', 'Virtual', FROM_UNIXTIME(1604998887), FROM_UNIXTIME(1604998887), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.5', '37.230.65.41', '', 'Framed-User', 'PPP', '155.54.197.99')
(1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('E56018E0', '4401f29e5c1002a3423673588fa71974', 'angel.luis at um.es', 'um.es', '155.54.213.5', '33439744', 'Virtual', FROM_UNIXTIME(1604998887), FROM_UNIXTIME(1604998887), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.5', '37.230.65.41', '', 'Framed-User', 'PPP', '155.54.197.99')
(1) sql: SQL query returned: success
(1) sql: 1 record(s) updated
rlm_sql (sql): Released connection (0)
(1) [sql] = ok
(1) } # accounting = ok
(1) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Done Accounting-Request packet.
(1) Finished request
(1) Cleaning up request packet ID 0 with timestamp +10
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Unlinking /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.926198 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.892075 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.186993 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.178061 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.158727 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.213988 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.189197 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.217577 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.245621 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.844250 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.070698 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.821048 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.088889 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.065319 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.025545 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.164569 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.842662 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.056117 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.189564 sec
(2) Received Accounting-Request Id 23 from 127.0.0.1:55986 to 127.0.0.1:1813 length 63
(2) Acct-Status-Type = Accounting-On
(2) NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
(2) Acct-Delay-Time = 0
(2) NAS-IP-Address = 155.54.213.6
(2) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(2) preacct {
(2) [suffix] = noop
(2) } # preacct = noop
(2) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(2) accounting {
(2) update request {
(2) X-Atica-Service = "vpn"
(2) X-Atica-Service-Filter = "vpn"
(2) } # update request = noop
(2) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(2) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201110
(2) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201110
(2) vpn_log: EXPAND %t
(2) vpn_log: --> Tue Nov 10 10:01:50 2020
(2) [vpn_log] = ok
(2) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(2) syslog_accounting: --> messages.Accounting-On
(2) syslog_accounting: EXPAND NAS %{Packet-Src-IP-Address} (%{NAS-IP-Address}) just came online
(2) syslog_accounting: --> NAS 127.0.0.1 (155.54.213.6) just came online
(2) [syslog_accounting] = ok
(2) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: EXPAND %t
(2) sql_log_um: --> Tue Nov 10 10:01:50 2020
(2) [sql_log_um] = ok
(2) pool_vpn: This is not an Accounting-Stop
(2) [pool_vpn] = noop
(2) pool_vpn_alu: This is not an Accounting-Stop
(2) [pool_vpn_alu] = noop
(2) pool_vpn_avanttic: This is not an Accounting-Stop
(2) [pool_vpn_avanttic] = noop
(2) pool_vpn_gnoss: This is not an Accounting-Stop
(2) [pool_vpn_gnoss] = noop
(2) pool_vpn_izertis: This is not an Accounting-Stop
(2) [pool_vpn_izertis] = noop
(2) pool_vpn_ext_pas: This is not an Accounting-Stop
(2) [pool_vpn_ext_pas] = noop
(2) pool_vpn_ingenia: This is not an Accounting-Stop
(2) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(2) sqlippool: EXPAND %{User-Name}
(2) sqlippool: -->
(2) sqlippool: SQL-User-Name set to ''
(2) sqlippool: EXPAND START TRANSACTION
(2) sqlippool: --> START TRANSACTION
(2) sqlippool: Executing query: START TRANSACTION
(2) sqlippool: EXPAND UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'
(2) sqlippool: --> UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '155.54.213.6'
(2) sqlippool: Executing query: UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '155.54.213.6'
rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 0
(2) sqlippool: EXPAND COMMIT
(2) sqlippool: --> COMMIT
(2) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(2) [sqlippool] = ok
(2) } # accounting = ok
(2) Sent Accounting-Response Id 23 from 127.0.0.1:1813 to 127.0.0.1:55986 length 0
(2) Finished request
(2) Cleaning up request packet ID 23 with timestamp +30
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 1
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 1
(3) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(3) preacct {
(3) [preprocess] = ok
(3) policy acct_unique {
(3) update request {
(3) &Tmp-String-9 := "ai:"
(3) } # update request = noop
(3) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(3) EXPAND %{hex:&Class}
(3) -->
(3) EXPAND ^%{hex:&Tmp-String-9}
(3) --> ^61693a
(3) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(3) else {
(3) update request {
(3) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(3) --> 81a332593e1a33c892e582753ceec582
(3) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(3) } # update request = noop
(3) } # else = noop
(3) } # policy acct_unique = noop
(3) } # preacct = ok
(3) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(3) accounting {
(3) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(3) sql: --> type.accounting-on.query
(3) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(3) sql: EXPAND %{User-Name}
(3) sql: -->
(3) sql: SQL-User-Name set to ''
(3) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(3) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(3) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(3) sql: SQL query returned: success
(3) sql: 0 record(s) updated
(3) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(3) [sql] = noop
(3) } # accounting = noop
(3) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(3) Finished request
(3) Cleaning up request packet ID 1 with timestamp +31
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 31
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 2
(4) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(4) preacct {
(4) [preprocess] = ok
(4) policy acct_unique {
(4) update request {
(4) &Tmp-String-9 := "ai:"
(4) } # update request = noop
(4) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(4) EXPAND %{hex:&Class}
(4) -->
(4) EXPAND ^%{hex:&Tmp-String-9}
(4) --> ^61693a
(4) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(4) else {
(4) update request {
(4) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(4) --> 81a332593e1a33c892e582753ceec582
(4) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(4) } # update request = noop
(4) } # else = noop
(4) } # policy acct_unique = noop
(4) } # preacct = ok
(4) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(4) accounting {
(4) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(4) sql: --> type.accounting-on.query
(4) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(4) sql: EXPAND %{User-Name}
(4) sql: -->
(4) sql: SQL-User-Name set to ''
(4) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(4) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(4) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(4) sql: SQL query returned: success
(4) sql: 0 record(s) updated
(4) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(4) [sql] = noop
(4) } # accounting = noop
(4) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(4) Finished request
(4) Cleaning up request packet ID 1 with timestamp +61
Ready to process requests
(5) Received Accounting-Request Id 53 from 127.0.0.1:60340 to 127.0.0.1:1813 length 217
(5) User-Name = "angel.luis at um.es"
(5) NAS-Port = 33439744
(5) Service-Type = Framed-User
(5) Framed-Protocol = PPP
(5) Framed-IP-Address = 155.54.197.99
(5) Called-Station-Id = "155.54.213.5"
(5) Calling-Station-Id = "37.230.65.41"
(5) Acct-Status-Type = Stop
(5) Acct-Delay-Time = 2
(5) Acct-Input-Octets = 252
(5) Acct-Output-Octets = 1412
(5) Acct-Session-Id = "E56018E0"
(5) Acct-Authentic = RADIUS
(5) Acct-Session-Time = 45
(5) Acct-Input-Packets = 4
(5) Acct-Output-Packets = 4
(5) Acct-Terminate-Cause = User-Request
(5) NAS-Port-Type = Virtual
(5) Tunnel-Client-Endpoint:0 = "37.230.65.41"
(5) ASA-TunnelGroupName = "rpvum"
(5) ASA-ClientType = Cisco-VPN-Client-IKEv1
(5) ASA-SessionType = Cisco-VPN-Client/IKEv1
(5) NAS-IP-Address = 155.54.213.5
(5) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(5) preacct {
(5) suffix: Checking for suffix after "@"
(5) suffix: Looking up realm "um.es" for User-Name = "angel.luis at um.es"
(5) suffix: Found realm "um.es"
(5) suffix: Adding Stripped-User-Name = "angel.luis"
(5) suffix: Adding Realm = "um.es"
(5) suffix: Accounting realm is LOCAL
(5) [suffix] = ok
(5) } # preacct = ok
(5) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(5) accounting {
(5) update request {
(5) X-Atica-Service = "vpn"
(5) X-Atica-Service-Filter = "vpn"
(5) } # update request = noop
(5) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(5) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201110
(5) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201110
(5) vpn_log: EXPAND %t
(5) vpn_log: --> Tue Nov 10 10:02:27 2020
(5) [vpn_log] = ok
(5) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(5) syslog_accounting: --> messages.Stop
(5) syslog_accounting: EXPAND Disconnect: [%{User-Name}] (Called-Station-Id: %{Called-Station-Id}, Calling-Station-Id: %{Calling-Station-Id}, IP: %{%{Framed-IP-Address}:-unknown}, X-Atica-Service: %{%{X-Atica-Service}:-unknown}, Time: %{Acct-Session-Time} seconds)
(5) syslog_accounting: --> Disconnect: [angel.luis at um.es] (Called-Station-Id: 155.54.213.5, Calling-Station-Id: 37.230.65.41, IP: 155.54.197.99, X-Atica-Service: vpn, Time: 45 seconds)
(5) [syslog_accounting] = ok
(5) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(5) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(5) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(5) sql_log_um: EXPAND %t
(5) sql_log_um: --> Tue Nov 10 10:02:27 2020
(5) [sql_log_um] = ok
(5) pool_vpn: EXPAND %{NAS-IP-Address} %{Calling-Station-Id}
(5) pool_vpn: --> 155.54.213.5 37.230.65.41
(5) pool_vpn: MD5 on 'key' directive maps to: 2c9f8534c1a11ba13c1908a8182ce01c
(5) pool_vpn: Searching for an entry for key: '155.54.213.5 37.230.65.41'
(5) pool_vpn: Entry not found
(5) [pool_vpn] = notfound
(5) pool_vpn_alu: EXPAND %{NAS-IP-Address} %{Calling-Station-Id}
(5) pool_vpn_alu: --> 155.54.213.5 37.230.65.41
(5) pool_vpn_alu: MD5 on 'key' directive maps to: 2c9f8534c1a11ba13c1908a8182ce01c
(5) pool_vpn_alu: Searching for an entry for key: '155.54.213.5 37.230.65.41'
(5) pool_vpn_alu: Deallocated entry for ip: 155.54.197.20
(5) [pool_vpn_alu] = ok
(5) pool_vpn_avanttic: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(5) pool_vpn_avanttic: --> 155.54.213.5 37.230.65.41 angel.luis at um.es
(5) pool_vpn_avanttic: MD5 on 'key' directive maps to: b1ac21c5529e3cec84c18e6755dcf627
(5) pool_vpn_avanttic: Searching for an entry for key: '155.54.213.5 37.230.65.41 angel.luis at um.es'
(5) pool_vpn_avanttic: Entry not found
(5) [pool_vpn_avanttic] = notfound
(5) pool_vpn_gnoss: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(5) pool_vpn_gnoss: --> 155.54.213.5 37.230.65.41 angel.luis at um.es
(5) pool_vpn_gnoss: MD5 on 'key' directive maps to: b1ac21c5529e3cec84c18e6755dcf627
(5) pool_vpn_gnoss: Searching for an entry for key: '155.54.213.5 37.230.65.41 angel.luis at um.es'
(5) pool_vpn_gnoss: Entry not found
(5) [pool_vpn_gnoss] = notfound
(5) pool_vpn_izertis: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(5) pool_vpn_izertis: --> 155.54.213.5 37.230.65.41 angel.luis at um.es
(5) pool_vpn_izertis: MD5 on 'key' directive maps to: b1ac21c5529e3cec84c18e6755dcf627
(5) pool_vpn_izertis: Searching for an entry for key: '155.54.213.5 37.230.65.41 angel.luis at um.es'
(5) pool_vpn_izertis: Entry not found
(5) [pool_vpn_izertis] = notfound
(5) pool_vpn_ext_pas: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(5) pool_vpn_ext_pas: --> 155.54.213.5 37.230.65.41 angel.luis at um.es
(5) pool_vpn_ext_pas: MD5 on 'key' directive maps to: b1ac21c5529e3cec84c18e6755dcf627
(5) pool_vpn_ext_pas: Searching for an entry for key: '155.54.213.5 37.230.65.41 angel.luis at um.es'
(5) pool_vpn_ext_pas: Entry not found
(5) [pool_vpn_ext_pas] = notfound
(5) pool_vpn_ingenia: EXPAND %{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}
(5) pool_vpn_ingenia: --> 155.54.213.5 37.230.65.41 angel.luis at um.es
(5) pool_vpn_ingenia: MD5 on 'key' directive maps to: b1ac21c5529e3cec84c18e6755dcf627
(5) pool_vpn_ingenia: Searching for an entry for key: '155.54.213.5 37.230.65.41 angel.luis at um.es'
(5) pool_vpn_ingenia: Entry not found
(5) [pool_vpn_ingenia] = notfound
rlm_sql (sql_pool): Reserved connection (0)
(5) sqlippool: EXPAND %{User-Name}
(5) sqlippool: --> angel.luis at um.es
(5) sqlippool: SQL-User-Name set to 'angel.luis at um.es'
(5) sqlippool: EXPAND START TRANSACTION
(5) sqlippool: --> START TRANSACTION
(5) sqlippool: Executing query: START TRANSACTION
(5) sqlippool: EXPAND UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'
(5) sqlippool: --> UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '155.54.213.5' AND pool_key = '33439744' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.197.99'
(5) sqlippool: Executing query: UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '155.54.213.5' AND pool_key = '33439744' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.197.99'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(5) sqlippool: EXPAND COMMIT
(5) sqlippool: --> COMMIT
(5) sqlippool: Executing query: COMMIT
(5) sqlippool: EXPAND Released IP Framed-IP-Address (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name})
(5) sqlippool: --> Released IP Framed-IP-Address (did 155.54.213.5 cli 37.230.65.41 user angel.luis at um.es)
rlm_sql (sql_pool): Released connection (0)
(5) [sqlippool] = ok
(5) } # accounting = ok
(5) Sent Accounting-Response Id 53 from 127.0.0.1:1813 to 127.0.0.1:60340 length 0
(5) Finished request
(5) Cleaning up request packet ID 53 with timestamp +67
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 61
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 3
(6) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(6) preacct {
(6) [preprocess] = ok
(6) policy acct_unique {
(6) update request {
(6) &Tmp-String-9 := "ai:"
(6) } # update request = noop
(6) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(6) EXPAND %{hex:&Class}
(6) -->
(6) EXPAND ^%{hex:&Tmp-String-9}
(6) --> ^61693a
(6) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(6) else {
(6) update request {
(6) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(6) --> 81a332593e1a33c892e582753ceec582
(6) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(6) } # update request = noop
(6) } # else = noop
(6) } # policy acct_unique = noop
(6) } # preacct = ok
(6) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(6) accounting {
(6) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(6) sql: --> type.accounting-on.query
(6) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(6) sql: EXPAND %{User-Name}
(6) sql: -->
(6) sql: SQL-User-Name set to ''
(6) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(6) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(6) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(6) sql: SQL query returned: success
(6) sql: 0 record(s) updated
(6) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(6) [sql] = noop
(6) } # accounting = noop
(6) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(6) Finished request
(6) Cleaning up request packet ID 1 with timestamp +91
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 91
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 4
(7) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(7) preacct {
(7) [preprocess] = ok
(7) policy acct_unique {
(7) update request {
(7) &Tmp-String-9 := "ai:"
(7) } # update request = noop
(7) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(7) EXPAND %{hex:&Class}
(7) -->
(7) EXPAND ^%{hex:&Tmp-String-9}
(7) --> ^61693a
(7) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(7) else {
(7) update request {
(7) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(7) --> 81a332593e1a33c892e582753ceec582
(7) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(7) } # update request = noop
(7) } # else = noop
(7) } # policy acct_unique = noop
(7) } # preacct = ok
(7) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(7) accounting {
(7) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(7) sql: --> type.accounting-on.query
(7) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(7) sql: EXPAND %{User-Name}
(7) sql: -->
(7) sql: SQL-User-Name set to ''
(7) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(7) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(7) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(7) sql: SQL query returned: success
(7) sql: 0 record(s) updated
(7) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(7) [sql] = noop
(7) } # accounting = noop
(7) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(7) Finished request
(7) Cleaning up request packet ID 1 with timestamp +121
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 121
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 5
(8) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(8) preacct {
(8) [preprocess] = ok
(8) policy acct_unique {
(8) update request {
(8) &Tmp-String-9 := "ai:"
(8) } # update request = noop
(8) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(8) EXPAND %{hex:&Class}
(8) -->
(8) EXPAND ^%{hex:&Tmp-String-9}
(8) --> ^61693a
(8) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(8) else {
(8) update request {
(8) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(8) --> 81a332593e1a33c892e582753ceec582
(8) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(8) } # update request = noop
(8) } # else = noop
(8) } # policy acct_unique = noop
(8) } # preacct = ok
(8) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(8) accounting {
(8) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(8) sql: --> type.accounting-on.query
(8) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(8) sql: EXPAND %{User-Name}
(8) sql: -->
(8) sql: SQL-User-Name set to ''
(8) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(8) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(8) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(8) sql: SQL query returned: success
(8) sql: 0 record(s) updated
(8) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(8) [sql] = noop
(8) } # accounting = noop
(8) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(8) Finished request
(8) Cleaning up request packet ID 1 with timestamp +151
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 151
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 6
(9) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(9) preacct {
(9) [preprocess] = ok
(9) policy acct_unique {
(9) update request {
(9) &Tmp-String-9 := "ai:"
(9) } # update request = noop
(9) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(9) EXPAND %{hex:&Class}
(9) -->
(9) EXPAND ^%{hex:&Tmp-String-9}
(9) --> ^61693a
(9) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(9) else {
(9) update request {
(9) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(9) --> 81a332593e1a33c892e582753ceec582
(9) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(9) } # update request = noop
(9) } # else = noop
(9) } # policy acct_unique = noop
(9) } # preacct = ok
(9) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(9) accounting {
(9) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(9) sql: --> type.accounting-on.query
(9) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(9) sql: EXPAND %{User-Name}
(9) sql: -->
(9) sql: SQL-User-Name set to ''
(9) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(9) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(9) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(9) sql: SQL query returned: success
(9) sql: 0 record(s) updated
(9) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(9) [sql] = noop
(9) } # accounting = noop
(9) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(9) Finished request
(9) Cleaning up request packet ID 1 with timestamp +181
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 181
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 10:01:50 CET"
Packet-Transmit-Counter = 7
(10) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(10) preacct {
(10) [preprocess] = ok
(10) policy acct_unique {
(10) update request {
(10) &Tmp-String-9 := "ai:"
(10) } # update request = noop
(10) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(10) EXPAND %{hex:&Class}
(10) -->
(10) EXPAND ^%{hex:&Tmp-String-9}
(10) --> ^61693a
(10) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(10) else {
(10) update request {
(10) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(10) --> 81a332593e1a33c892e582753ceec582
(10) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(10) } # update request = noop
(10) } # else = noop
(10) } # policy acct_unique = noop
(10) } # preacct = ok
(10) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(10) accounting {
(10) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(10) sql: --> type.accounting-on.query
(10) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(10) sql: EXPAND %{User-Name}
(10) sql: -->
(10) sql: SQL-User-Name set to ''
(10) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(10) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
(10) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998910), acctsessiontime = '1604998910' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998910)
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(10) sql: SQL query returned: success
(10) sql: 0 record(s) updated
(10) sql: No additional queries configured
rlm_sql (sql): Released connection (0)
(10) [sql] = noop
(10) } # accounting = noop
(10) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): No response to request. Will retry in 30 seconds
(10) Finished request
(10) Cleaning up request packet ID 1 with timestamp +211
Ready to process requests
-------------- next part --------------
FreeRADIUS Version 3.0.19
Copyright (C) 1999-2019 The FreeRADIUS server project and contributors
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License
For more information about these matters, see the file named COPYRIGHT
Starting - reading configuration files ...
including dictionary file /usr/share/freeradius/dictionary
including dictionary file /usr/share/freeradius/dictionary.dhcp
including dictionary file /usr/share/freeradius/dictionary.vqp
including dictionary file /etc/freeradius/3.0/dictionary
including configuration file /etc/freeradius/3.0/radiusd.conf
including configuration file /etc/freeradius/3.0/proxy.conf
including files in directory /etc/freeradius/3.0/clients.d/
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod9.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod8.conf
including configuration file /etc/freeradius/3.0/clients.d/inanna.conf
including configuration file /etc/freeradius/3.0/clients.d/pbxapp.conf
including configuration file /etc/freeradius/3.0/clients.d/sestertium-desa.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod6.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod10.conf
including configuration file /etc/freeradius/3.0/clients.d/cloto.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod11.conf
including configuration file /etc/freeradius/3.0/clients.d/vpn-mikrotik-ccr-1.conf
including configuration file /etc/freeradius/3.0/clients.d/arrixaca.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod1.conf
including configuration file /etc/freeradius/3.0/clients.d/sestertium2.conf
including configuration file /etc/freeradius/3.0/clients.d/histclinicpruebas.conf
including configuration file /etc/freeradius/3.0/clients.d/firewall.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa1.conf
including configuration file /etc/freeradius/3.0/clients.d/eufrosine.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa3.conf
including configuration file /etc/freeradius/3.0/clients.d/climene2.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa4.conf
including configuration file /etc/freeradius/3.0/clients.d/fvives.conf
including configuration file /etc/freeradius/3.0/clients.d/harmonia.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl4.conf
including configuration file /etc/freeradius/3.0/clients.d/aglaya.conf
including configuration file /etc/freeradius/3.0/clients.d/asa5500.conf
including configuration file /etc/freeradius/3.0/clients.d/talia.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-test2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod12.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-desa.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod4.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod5.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturna.conf
including configuration file /etc/freeradius/3.0/clients.d/medusa2.conf
including configuration file /etc/freeradius/3.0/clients.d/venus.conf
including configuration file /etc/freeradius/3.0/clients.d/nona.conf
including configuration file /etc/freeradius/3.0/clients.d/esmirna.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod3.conf
including configuration file /etc/freeradius/3.0/clients.d/portalcautivo.conf
including configuration file /etc/freeradius/3.0/clients.d/climene.conf
including configuration file /etc/freeradius/3.0/clients.d/vlan_atica.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-desa2.conf
including configuration file /etc/freeradius/3.0/clients.d/decima.conf
including configuration file /etc/freeradius/3.0/clients.d/hospital_santalucia.conf
including configuration file /etc/freeradius/3.0/clients.d/oltest2.conf
including configuration file /etc/freeradius/3.0/clients.d/suma.conf
including configuration file /etc/freeradius/3.0/clients.d/pluton.conf
including configuration file /etc/freeradius/3.0/clients.d/moralesmeseguer.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturna2.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod7.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesisfa1.conf
including configuration file /etc/freeradius/3.0/clients.d/libra42_605.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesis2.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-1.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod15.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod14.conf
including configuration file /etc/freeradius/3.0/clients.d/grado.conf
including configuration file /etc/freeradius/3.0/clients.d/iuturnafatest.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod13.conf
including configuration file /etc/freeradius/3.0/clients.d/libra41_618.conf
including configuration file /etc/freeradius/3.0/clients.d/hydra-hydra-db02.conf
including configuration file /etc/freeradius/3.0/clients.d/artemis.conf
including configuration file /etc/freeradius/3.0/clients.d/isis.conf
including configuration file /etc/freeradius/3.0/clients.d/oltest1.conf
including configuration file /etc/freeradius/3.0/clients.d/puestosoc.conf
including configuration file /etc/freeradius/3.0/clients.d/localhost.conf
including configuration file /etc/freeradius/3.0/clients.d/cassotisfatest.conf
including configuration file /etc/freeradius/3.0/clients.d/radius2-rediris.conf
including configuration file /etc/freeradius/3.0/clients.d/pbxws.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl2.conf
including configuration file /etc/freeradius/3.0/clients.d/hydra-hydra-db01.conf
including configuration file /etc/freeradius/3.0/clients.d/joaquin_lopez.conf
including configuration file /etc/freeradius/3.0/clients.d/monitorum_nyctalus3x.conf
including configuration file /etc/freeradius/3.0/clients.d/egeria.conf
including configuration file /etc/freeradius/3.0/clients.d/mikrotic_facinf.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl3.conf
including configuration file /etc/freeradius/3.0/clients.d/araneus.conf
including configuration file /etc/freeradius/3.0/clients.d/ananke.conf
including configuration file /etc/freeradius/3.0/clients.d/radius-rediris.conf
including configuration file /etc/freeradius/3.0/clients.d/monitor.conf
including configuration file /etc/freeradius/3.0/clients.d/sakaiprod2.conf
including configuration file /etc/freeradius/3.0/clients.d/aps.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-3.conf
including configuration file /etc/freeradius/3.0/clients.d/sds-4.conf
including configuration file /etc/freeradius/3.0/clients.d/aglae.conf
including configuration file /etc/freeradius/3.0/clients.d/laquesisfatest.conf
including configuration file /etc/freeradius/3.0/clients.d/libra42_618.conf
including configuration file /etc/freeradius/3.0/clients.d/sakai-test1.conf
including configuration file /etc/freeradius/3.0/clients.d/decima2.conf
including configuration file /etc/freeradius/3.0/clients.d/libra41_605.conf
including configuration file /etc/freeradius/3.0/clients.d/isen.conf
including configuration file /etc/freeradius/3.0/clients.d/hospital_losarcos.conf
including configuration file /etc/freeradius/3.0/clients.d/pas.conf
including configuration file /etc/freeradius/3.0/clients.d/webprodwl1.conf
including files in directory /etc/freeradius/3.0/mods-enabled/
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
including configuration file /etc/freeradius/3.0/mods-enabled/pam
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
including configuration file /etc/freeradius/3.0/mods-enabled/realm
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
including configuration file /etc/freeradius/3.0/mods-enabled/files_ecopas
including configuration file /etc/freeradius/3.0/mods-enabled/eap
including configuration file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
including configuration file /etc/freeradius/3.0/mods-enabled/always
including configuration file /etc/freeradius/3.0/mods-enabled/detail
including configuration file /etc/freeradius/3.0/mods-enabled/preprocess
including configuration file /etc/freeradius/3.0/mods-enabled/sql_pool
including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
including configuration file /etc/freeradius/3.0/mods-enabled/files_puestosoc
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
including configuration file /etc/freeradius/3.0/mods-enabled/files_vpn
including configuration file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
including configuration file /etc/freeradius/3.0/mods-enabled/sqlippool
including configuration file /etc/freeradius/3.0/mods-config/sql/ippool/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
including configuration file /etc/freeradius/3.0/mods-enabled/expr
including configuration file /etc/freeradius/3.0/mods-enabled/attr_filter
including configuration file /etc/freeradius/3.0/mods-enabled/sql
including configuration file /etc/freeradius/3.0/mods-config/sql/main/mysql/queries.conf
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
including configuration file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
including configuration file /etc/freeradius/3.0/mods-enabled/pap
including configuration file /etc/freeradius/3.0/mods-enabled/expiration
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
including configuration file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
including configuration file /etc/freeradius/3.0/mods-enabled/files_adminslogin
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
including configuration file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
including configuration file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
including configuration file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
including configuration file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
including configuration file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
including configuration file /etc/freeradius/3.0/mods-enabled/files_monitorum
including configuration file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
including configuration file /etc/freeradius/3.0/mods-enabled/ldap
including configuration file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
including configuration file /etc/freeradius/3.0/mods-enabled/mschap
including files in directory /etc/freeradius/3.0/instantiate/
including configuration file /etc/freeradius/3.0/templates.conf
including files in directory /etc/freeradius/3.0/policy.d/
including configuration file /etc/freeradius/3.0/policy.d/accounting
including configuration file /etc/freeradius/3.0/policy.d/operator-name
including configuration file /etc/freeradius/3.0/policy.d/dhcp
including configuration file /etc/freeradius/3.0/policy.d/eap
including configuration file /etc/freeradius/3.0/policy.d/rfc7542
including configuration file /etc/freeradius/3.0/policy.d/canonicalization
including configuration file /etc/freeradius/3.0/policy.d/cui
including configuration file /etc/freeradius/3.0/policy.d/control
including configuration file /etc/freeradius/3.0/policy.d/moonshot-targeted-ids
including configuration file /etc/freeradius/3.0/policy.d/abfab-tr
including configuration file /etc/freeradius/3.0/policy.d/filter
including configuration file /etc/freeradius/3.0/policy.d/debug
including files in directory /etc/freeradius/3.0/listen.d/
including configuration file /etc/freeradius/3.0/listen.d/proxy.conf
including configuration file /etc/freeradius/3.0/listen.d/acct.conf
including configuration file /etc/freeradius/3.0/listen.d/auth.conf
including files in directory /etc/freeradius/3.0/sites-enabled/
including configuration file /etc/freeradius/3.0/sites-enabled/adminslogin
including configuration file /etc/freeradius/3.0/sites-enabled/aplicaciones
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam
including configuration file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
including configuration file /etc/freeradius/3.0/sites-enabled/status
including files in directory /etc/freeradius/3.0/statusclients.d/
including configuration file /etc/freeradius/3.0/statusclients.d/monitorum_nyctalus21.conf
including configuration file /etc/freeradius/3.0/statusclients.d/admin.conf
including configuration file /etc/freeradius/3.0/statusclients.d/monitorum_nyctalus3x.conf
including configuration file /etc/freeradius/3.0/statusclients.d/nyctalus20.conf
including configuration file /etc/freeradius/3.0/sites-enabled/vpn
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-inner-tunnel
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-rediris
including configuration file /etc/freeradius/3.0/sites-enabled/eduroam-rediris-inner-tunnel
including configuration file /etc/freeradius/3.0/sites-enabled/monitorum
including configuration file /etc/freeradius/3.0/sites-enabled/ecopas
including configuration file /etc/freeradius/3.0/sites-enabled/control-socket
including configuration file /etc/freeradius/3.0/sites-enabled/puestosoc
main {
security {
user = "freerad"
group = "freerad"
allow_core_dumps = no
}
name = "freeradius"
prefix = "/usr"
localstatedir = "/var"
logdir = "/var/log/freeradius"
run_dir = "/var/run/freeradius"
}
main {
name = "freeradius"
prefix = "/usr"
localstatedir = "/var"
sbindir = "/usr/sbin"
logdir = "/var/log/freeradius"
run_dir = "/var/run/freeradius"
libdir = "/usr/lib/freeradius"
radacctdir = "/var/log/freeradius/radacct"
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5
max_requests = 4096
pidfile = "/var/run/freeradius/freeradius.pid"
checkrad = "/usr/sbin/checkrad"
debug_level = 0
proxy_requests = yes
log {
stripped_names = no
auth = no
auth_badpass = no
auth_goodpass = no
colourise = yes
msg_denied = "You are already logged in - access denied"
}
resources {
}
security {
max_attributes = 200
reject_delay = 1.000000
status_server = yes
}
}
radiusd: #### Loading Realms and Home Servers ####
home_server radius.rediris.es {
ipaddr = radius.rediris.es IPv4 address [130.206.1.106]
port = 1812
type = "auth+acct"
proto = "udp"
secret = <<< secret >>>
response_window = 30.000000
response_timeouts = 1
max_outstanding = 65536
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_timeout = 4
num_answers_to_alive = 3
revive_interval = 300
limit {
max_connections = 16
max_requests = 0
lifetime = 0
idle_timeout = 0
}
coa {
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
}
home_server radius2.rediris.es {
ipaddr = radius2.rediris.es IPv4 address [130.206.1.107]
port = 1812
type = "auth+acct"
proto = "udp"
secret = <<< secret >>>
response_window = 30.000000
response_timeouts = 1
max_outstanding = 65536
zombie_period = 40
status_check = "status-server"
ping_interval = 30
check_timeout = 4
num_answers_to_alive = 3
revive_interval = 300
limit {
max_connections = 16
max_requests = 0
lifetime = 0
idle_timeout = 0
}
coa {
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
}
home_server_pool rediris {
type = fail-over
home_server = radius.rediris.es
home_server = radius2.rediris.es
}
realm DEFAULT {
auth_pool = rediris
nostrip
}
realm NULL {
}
realm cii-murcia.es {
}
realm lcu.es {
}
realm ticarum.es {
}
realm um.es {
}
realm ~.+\.um\.es$ {
}
radiusd: #### Loading Clients ####
client sakaiprod9 {
ipaddr = 155.54.216.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod9"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod8 {
ipaddr = 155.54.216.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod8"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client inanna {
ipaddr = 155.54.221.9
require_message_authenticator = no
secret = <<< secret >>>
shortname = "inanna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pbxapp {
ipaddr = 155.54.213.197
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pbxapp"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sestertium-desa {
ipaddr = 155.54.66.44
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sestertium-desa"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod6 {
ipaddr = 155.54.216.20
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod6"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod10 {
ipaddr = 155.54.216.36
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod10"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client cloto {
ipaddr = 155.54.208.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "cloto"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod11 {
ipaddr = 155.54.216.37
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod11"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client vpn-mikrotik-ccr-1 {
ipaddr = 155.54.213.6
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vpn-mikrotik-ccr-1"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client arrixaca {
ipaddr = 147.84.199.3
require_message_authenticator = no
secret = <<< secret >>>
shortname = "arrixaca"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod1 {
ipaddr = 155.54.216.11
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sestertium2 {
ipaddr = 155.54.216.70
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sestertium2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client histclinicpruebas {
ipaddr = 155.54.215.40
require_message_authenticator = no
secret = <<< secret >>>
shortname = "histclinicpruebas"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client firewall {
ipaddr = 155.54.212.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "firewall"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa1 {
ipaddr = 155.54.208.135
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client eufrosine {
ipaddr = 155.54.208.21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "eufrosine"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa3 {
ipaddr = 155.54.208.137
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client climene2 {
ipaddr = 155.54.215.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "climene2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa4 {
ipaddr = 155.54.208.138
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client fvives {
ipaddr = 155.54.67.8
require_message_authenticator = no
secret = <<< secret >>>
shortname = "fvives"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client harmonia {
ipaddr = 155.54.221.14
require_message_authenticator = no
secret = <<< secret >>>
shortname = "harmonia"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl4 {
ipaddr = 155.54.216.224
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aglaya {
ipaddr = 155.54.221.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aglaya"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client asa5500 {
ipaddr = 155.54.213.5
require_message_authenticator = no
secret = <<< secret >>>
shortname = "asa5500"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client talia {
ipaddr = 155.54.215.30
require_message_authenticator = no
secret = <<< secret >>>
shortname = "talia"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-test2 {
ipaddr = 155.54.215.42
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-test2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod12 {
ipaddr = 155.54.216.38
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod12"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-desa {
ipaddr = 155.54.215.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-desa"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod4 {
ipaddr = 155.54.216.14
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod4"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-2 {
ipaddr = 155.54.1.22
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-2"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod5 {
ipaddr = 155.54.216.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod5"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturna {
ipaddr = 155.54.216.100
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client medusa2 {
ipaddr = 155.54.208.136
require_message_authenticator = no
secret = <<< secret >>>
shortname = "medusa2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client venus {
ipaddr = 155.54.208.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "venus"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client nona {
ipaddr = 155.54.216.99
require_message_authenticator = no
secret = <<< secret >>>
shortname = "nona"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client esmirna {
ipaddr = 155.54.215.26
require_message_authenticator = no
secret = <<< secret >>>
shortname = "esmirna"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod3 {
ipaddr = 155.54.216.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client portalcautivo {
ipaddr = 155.54.213.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "portalcautivo"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client climene {
ipaddr = 155.54.215.31
require_message_authenticator = no
secret = <<< secret >>>
shortname = "climene"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client vlan_atica {
ipaddr = 155.54.66.0/23
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vlan_atica"
virtual_server = "ecopas"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-desa2 {
ipaddr = 155.54.215.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-desa2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client decima {
ipaddr = 155.54.216.127
require_message_authenticator = no
secret = <<< secret >>>
shortname = "decima"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hospital_santalucia {
ipaddr = 147.84.199.6
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hospital_santalucia"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client oltest2 {
ipaddr = 155.54.215.20
require_message_authenticator = no
secret = <<< secret >>>
shortname = "oltest2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client suma {
ipaddr = 155.54.216.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "suma"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pluton {
ipaddr = 155.54.66.182
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pluton"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client moralesmeseguer {
ipaddr = 147.84.199.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "moralesmeseguer"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturna2 {
ipaddr = 155.54.216.200
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturna2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod7 {
ipaddr = 155.54.216.23
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod7"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesisfa1 {
ipaddr = 155.54.216.144
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesisfa1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra42_605 {
ipaddr = 155.54.212.221
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra42_605"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesis2 {
ipaddr = 155.54.216.117
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesis2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-1 {
ipaddr = 155.54.1.21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-1"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod15 {
ipaddr = 155.54.216.35
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod15"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod14 {
ipaddr = 155.54.216.33
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod14"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client grado {
ipaddr = 155.54.208.2
require_message_authenticator = no
secret = <<< secret >>>
shortname = "grado"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client iuturnafatest {
ipaddr = 155.54.215.17
require_message_authenticator = no
secret = <<< secret >>>
shortname = "iuturnafatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod13 {
ipaddr = 155.54.216.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod13"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra41_618 {
ipaddr = 155.54.218.60
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra41_618"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hydra-hydra-db02 {
ipaddr = 155.54.208.102
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hydra-hydra-db02"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client artemis {
ipaddr = 155.54.208.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "artemis"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client isis {
ipaddr = 155.54.221.12
require_message_authenticator = no
secret = <<< secret >>>
shortname = "isis"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client oltest1 {
ipaddr = 155.54.215.19
require_message_authenticator = no
secret = <<< secret >>>
shortname = "oltest1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client puestosoc {
ipaddr = 155.54.144.0/22
require_message_authenticator = no
secret = <<< secret >>>
shortname = "puestosoc"
virtual_server = "puestosoc"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client localhost {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "vpn-mikrotik-ccr-1-prueba"
virtual_server = "vpn"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client cassotisfatest {
ipaddr = 155.54.215.18
require_message_authenticator = no
secret = <<< secret >>>
shortname = "cassotisfatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client radius2-rediris {
ipaddr = 130.206.1.107
require_message_authenticator = no
secret = <<< secret >>>
shortname = "radius2-rediris"
virtual_server = "eduroam-rediris"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pbxws {
ipaddr = 155.54.213.215
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pbxws"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl2 {
ipaddr = 155.54.216.221
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hydra-hydra-db01 {
ipaddr = 155.54.208.100
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hydra-hydra-db01"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client joaquin_lopez {
ipaddr = 155.54.66.68
require_message_authenticator = no
secret = <<< secret >>>
shortname = "joaquin_lopez"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitorum_nyctalus3x {
ipaddr = 155.54.212.48/29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus3x"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client egeria {
ipaddr = 155.54.215.27
require_message_authenticator = no
secret = <<< secret >>>
shortname = "egeria"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client mikrotic_facinf {
ipaddr = 155.54.204.113
require_message_authenticator = no
secret = <<< secret >>>
shortname = "mikrotic_facinf"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl3 {
ipaddr = 155.54.216.223
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl3"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client araneus {
ipaddr = 155.54.212.224/27
require_message_authenticator = no
secret = <<< secret >>>
shortname = "araneus"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client ananke {
ipaddr = 155.54.221.4
require_message_authenticator = no
secret = <<< secret >>>
shortname = "ananke"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client radius-rediris {
ipaddr = 130.206.1.106
require_message_authenticator = no
secret = <<< secret >>>
shortname = "radius-rediris"
virtual_server = "eduroam-rediris"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitor {
ipaddr = 155.54.67.15
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitor"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakaiprod2 {
ipaddr = 155.54.216.12
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakaiprod2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aps {
ipaddr = 10.57.0.0/16
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aps"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-3 {
ipaddr = 155.54.1.31
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-3"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sds-4 {
ipaddr = 155.54.1.32
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sds-4"
virtual_server = "adminslogin"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client aglae {
ipaddr = 155.54.221.11
require_message_authenticator = no
secret = <<< secret >>>
shortname = "aglae"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client laquesisfatest {
ipaddr = 155.54.215.16
require_message_authenticator = no
secret = <<< secret >>>
shortname = "laquesisfatest"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra42_618 {
ipaddr = 155.54.218.61
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra42_618"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client sakai-test1 {
ipaddr = 155.54.215.41
require_message_authenticator = no
secret = <<< secret >>>
shortname = "sakai-test1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client decima2 {
ipaddr = 155.54.216.67
require_message_authenticator = no
secret = <<< secret >>>
shortname = "decima2"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client libra41_605 {
ipaddr = 155.54.212.220
require_message_authenticator = no
secret = <<< secret >>>
shortname = "libra41_605"
virtual_server = "monitorum"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client isen {
ipaddr = 62.43.188.13
require_message_authenticator = no
secret = <<< secret >>>
shortname = "isen"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client hospital_losarcos {
ipaddr = 147.84.199.5
require_message_authenticator = no
secret = <<< secret >>>
shortname = "hospital_losarcos"
virtual_server = "eduroam"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client pas {
ipaddr = 155.54.16.0/21
require_message_authenticator = no
secret = <<< secret >>>
shortname = "pas"
virtual_server = "ecopas"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client webprodwl1 {
ipaddr = 155.54.216.220
require_message_authenticator = no
secret = <<< secret >>>
shortname = "webprodwl1"
virtual_server = "aplicaciones"
proto = "*"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
Debugger not attached
# Creating Auth-Type = pam
# Creating Auth-Type = PAP
# Creating Auth-Type = eap
# Creating Autz-Type = Status-Server
# Creating Auth-Type = MS-CHAP
# Creating Auth-Type = eap-eduroam-rediris
radiusd: #### Instantiating modules ####
modules {
# Loaded module rlm_files
# Loading module "files_eduroam_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
files files_eduroam_inner {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_inner/authorize"
}
# Loaded module rlm_pam
# Loading module "pam" from file /etc/freeradius/3.0/mods-enabled/pam
pam {
pam_auth = "radiusd"
}
# Loaded module rlm_linelog
# Loading module "syslog" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog
linelog syslog {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.%{%{%{reply:Packet-Type}:-%{Packet-Type}}:-default}"
}
# Loaded module rlm_detail
# Loading module "eduroam_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
detail eduroam_log {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "aplicaciones_log" from file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
detail aplicaciones_log {
filename = "/var/log/freeradius/radacct/%{%{client:Client-Id}:-%{%{Calling-Station-Id}:-%{Client-IP-Address}}}/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_realm
# Loading module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm
realm IPASS {
format = "prefix"
delimiter = "/"
ignore_default = no
ignore_null = no
}
# Loading module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm
realm suffix {
format = "suffix"
delimiter = "@"
ignore_default = no
ignore_null = no
}
# Loading module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm
realm bangpath {
format = "prefix"
delimiter = "!"
ignore_default = no
ignore_null = no
}
# Loading module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm
realm realmpercent {
format = "suffix"
delimiter = "%"
ignore_default = no
ignore_null = no
}
# Loading module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm
realm ntdomain {
format = "prefix"
delimiter = "\\"
ignore_default = no
ignore_null = no
}
# Loading module "files_eduroam_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
files files_eduroam_outer {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_outer/authorize"
}
# Loading module "files_ecopas" from file /etc/freeradius/3.0/mods-enabled/files_ecopas
files files_ecopas {
filename = "/etc/freeradius/3.0/mods-config/files_ecopas/authorize"
}
# Loaded module rlm_eap
# Loading module "eap" from file /etc/freeradius/3.0/mods-enabled/eap
eap {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
# Loading module "eap-eduroam-rediris" from file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
eap eap-eduroam-rediris {
default_eap_type = "peap"
timer_expire = 60
ignore_unknown_eap_types = yes
cisco_accounting_username_bug = yes
max_sessions = 4096
}
# Loaded module rlm_ippool
# Loading module "pool_vpn_ingenia" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
ippool pool_vpn_ingenia {
filename = "/etc/freeradius/3.0/db.pool_vpn_ingenia.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_ingenia.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.40
range_stop = 155.54.194.41
netmask = 255.255.255.255
cache_size = 2
override = no
maximum_timeout = 0
}
# Loaded module rlm_always
# Loading module "reject" from file /etc/freeradius/3.0/mods-enabled/always
always reject {
rcode = "reject"
simulcount = 0
mpp = no
}
# Loading module "fail" from file /etc/freeradius/3.0/mods-enabled/always
always fail {
rcode = "fail"
simulcount = 0
mpp = no
}
# Loading module "ok" from file /etc/freeradius/3.0/mods-enabled/always
always ok {
rcode = "ok"
simulcount = 0
mpp = no
}
# Loading module "handled" from file /etc/freeradius/3.0/mods-enabled/always
always handled {
rcode = "handled"
simulcount = 0
mpp = no
}
# Loading module "invalid" from file /etc/freeradius/3.0/mods-enabled/always
always invalid {
rcode = "invalid"
simulcount = 0
mpp = no
}
# Loading module "userlock" from file /etc/freeradius/3.0/mods-enabled/always
always userlock {
rcode = "userlock"
simulcount = 0
mpp = no
}
# Loading module "notfound" from file /etc/freeradius/3.0/mods-enabled/always
always notfound {
rcode = "notfound"
simulcount = 0
mpp = no
}
# Loading module "noop" from file /etc/freeradius/3.0/mods-enabled/always
always noop {
rcode = "noop"
simulcount = 0
mpp = no
}
# Loading module "updated" from file /etc/freeradius/3.0/mods-enabled/always
always updated {
rcode = "updated"
simulcount = 0
mpp = no
}
# Loading module "detail" from file /etc/freeradius/3.0/mods-enabled/detail
detail {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_preprocess
# Loading module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess
preprocess {
huntgroups = "/etc/freeradius/3.0/mods-config/preprocess/huntgroups"
hints = "/etc/freeradius/3.0/mods-config/preprocess/hints"
with_ascend_hack = no
ascend_channels_per_line = 23
with_ntdomain_hack = no
with_specialix_jetstream_hack = no
with_cisco_vsa_hack = no
with_alvarion_vsa_hack = no
}
# Loaded module rlm_sql
# Loading module "sql_pool" from file /etc/freeradius/3.0/mods-enabled/sql_pool
sql sql_pool {
driver = "rlm_sql_mysql"
server = "sqldbtelematica.um.es"
port = 3306
login = "usradiuslogop"
password = <<< secret >>>
radius_db = "dbradius"
read_groups = yes
read_profiles = yes
read_clients = no
delete_stale_sessions = yes
sql_user_name = "%{User-Name}"
default_user_profile = ""
client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{sql_pool-sql-Group}' ORDER BY id"
authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{sql_pool-sql-Group}' ORDER BY id"
group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
auto_escape = no
accounting {
reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}"
type {
accounting-on {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
accounting-off {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
start {
query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')"
}
interim-update {
query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
stop {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
}
}
post-auth {
reference = ".query"
query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
}
}
rlm_sql (sql_pool): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Creating attribute sql_pool-SQL-Group
# Loading module "files_eduroam_rediris_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
files files_eduroam_rediris_inner {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_rediris_inner/authorize"
}
# Loading module "files_puestosoc" from file /etc/freeradius/3.0/mods-enabled/files_puestosoc
files files_puestosoc {
filename = "/etc/freeradius/3.0/mods-config/files_puestosoc/authorize"
}
# Loading module "pool_vpn_gnoss" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
ippool pool_vpn_gnoss {
filename = "/etc/freeradius/3.0/db.pool_vpn_gnoss.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_gnoss.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.16
range_stop = 155.54.194.18
netmask = 255.255.255.255
cache_size = 3
override = no
maximum_timeout = 0
}
# Loading module "files_vpn" from file /etc/freeradius/3.0/mods-enabled/files_vpn
files files_vpn {
filename = "/etc/freeradius/3.0/mods-config/files_vpn/authorize"
}
# Loading module "files_aplicaciones" from file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
files files_aplicaciones {
filename = "/etc/freeradius/3.0/mods-config/files_aplicaciones/authorize"
}
# Loaded module rlm_sqlippool
# Loading module "sqlippool" from file /etc/freeradius/3.0/mods-enabled/sqlippool
sqlippool {
sql_module_instance = "sql_pool"
lease_duration = 3600
pool_name = "Pool-Name"
default_pool = "main_pool"
attribute_name = "Framed-IP-Address"
allocate_begin = "START TRANSACTION"
allocate_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE expiry_time <= NOW() - INTERVAL 1 SECOND AND nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
allocate_clear_timeout = 1
allocate_find = "SELECT framedipaddress FROM radippool WHERE pool_name = '%{control:Pool-Name}' AND (expiry_time < NOW() OR expiry_time IS NULL) ORDER BY (username <> '%{User-Name}'), (callingstationid <> '%{Calling-Station-Id}'), expiry_time LIMIT 1 FOR UPDATE"
allocate_update = "UPDATE radippool SET nasipaddress = '%{NAS-IP-Address}', pool_key = '%{NAS-Port}', callingstationid = '%{Calling-Station-Id}', username = '%{User-Name}', expiry_time = NOW() + INTERVAL 3600 SECOND WHERE framedipaddress = '%I'"
allocate_commit = "COMMIT"
pool_check = "SELECT id FROM radippool WHERE pool_name='%{control:Pool-Name}' LIMIT 1"
start_begin = "START TRANSACTION"
start_update = "UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
start_commit = "COMMIT"
alive_begin = "START TRANSACTION"
alive_update = "UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
alive_commit = "COMMIT"
stop_begin = "START TRANSACTION"
stop_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'"
stop_commit = "COMMIT"
on_begin = "START TRANSACTION"
on_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
on_commit = "COMMIT"
off_begin = "START TRANSACTION"
off_clear = "UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'"
off_commit = "COMMIT"
messages {
exists = "Existing IP: %{reply:Framed-IP-Address} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
success = "Allocated IP: %{reply:Framed-IP-Address} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
clear = "Released IP Framed-IP-Address (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name})"
failed = "IP Allocation FAILED from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
nopool = "No Pool-Name defined (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})"
}
}
# Loading module "eduroam_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
detail eduroam_rediris_log {
filename = "/var/log/freeradius/radacct/eduroam-rediris/eduroam_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "pool_vpn_ext_pas" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
ippool pool_vpn_ext_pas {
filename = "/etc/freeradius/3.0/db.pool_vpn_ext_pas.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_ext_pas.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.32
range_stop = 155.54.194.35
netmask = 255.255.255.255
cache_size = 4
override = yes
maximum_timeout = 0
}
# Loaded module rlm_expr
# Loading module "expr" from file /etc/freeradius/3.0/mods-enabled/expr
expr {
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ"
}
# Loaded module rlm_attr_filter
# Loading module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.post-proxy {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy"
key = "%{Realm}"
relaxed = no
}
# Loading module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.pre-proxy {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/pre-proxy"
key = "%{Realm}"
relaxed = no
}
# Loading module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.access_reject {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_reject"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.access_challenge {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/access_challenge"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.accounting_response {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/accounting_response"
key = "%{User-Name}"
relaxed = no
}
# Loading module "attr_filter.post-proxy-tlm" from file /etc/freeradius/3.0/mods-enabled/attr_filter
attr_filter attr_filter.post-proxy-tlm {
filename = "/etc/freeradius/3.0/mods-config/attr_filter/post-proxy-tlm"
key = "%{Realm}"
relaxed = no
}
# Loading module "sql" from file /etc/freeradius/3.0/mods-enabled/sql
sql sql {
driver = "rlm_sql_mysql"
server = "kogia50.um.es"
port = 3306
login = "usradiuslogop"
password = <<< secret >>>
radius_db = "dbradiuslog"
read_groups = yes
read_profiles = yes
read_clients = no
delete_stale_sessions = yes
sql_user_name = "%{User-Name}"
default_user_profile = ""
client_query = "SELECT id, nasname, shortname, type, secret, server FROM nas"
authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id"
authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{sql-sql-Group}' ORDER BY id"
authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{sql-sql-Group}' ORDER BY id"
group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority"
simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL"
safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"
auto_escape = no
accounting {
reference = "%{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}"
type {
accounting-on {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
accounting-off {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})"
}
start {
query = "INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')"
}
interim-update {
query = "UPDATE radacct SET acctupdatetime = (@acctupdatetime_old:=acctupdatetime), acctupdatetime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctinterval = %{integer:Event-Timestamp} - UNIX_TIMESTAMP(@acctupdatetime_old), framedipaddress = '%{Framed-IP-Address}', acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
stop {
query = "UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = %{%{Acct-Session-Time}:-NULL}, acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', connectinfo_stop = '%{Connect-Info}' WHERE AcctUniqueId = '%{Acct-Unique-Session-Id}'"
}
}
}
post-auth {
reference = ".query"
query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')"
}
}
rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked
Creating attribute sql-SQL-Group
# Loading module "pool_vpn_izertis" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
ippool pool_vpn_izertis {
filename = "/etc/freeradius/3.0/db.pool_vpn_izertis.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_izertis.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.24
range_stop = 155.54.194.27
netmask = 255.255.255.255
cache_size = 4
override = no
maximum_timeout = 0
}
# Loading module "pool_vpn_alu" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
ippool pool_vpn_alu {
filename = "/etc/freeradius/3.0/db.pool_vpn_alu.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_alu.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id}"
range_start = 155.54.197.1
range_stop = 155.54.197.254
netmask = 255.255.255.255
cache_size = 254
override = no
maximum_timeout = 0
}
# Loading module "vpn_log" from file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
detail vpn_log {
filename = "/var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "sql_log_um" from file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
detail sql_log_um {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_sql"
header = "%t"
permissions = 384
locking = false
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_pap
# Loading module "pap" from file /etc/freeradius/3.0/mods-enabled/pap
pap {
normalise = yes
}
# Loaded module rlm_expiration
# Loading module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration
# Loading module "pool_vpn_asio" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
ippool pool_vpn_asio {
filename = "/etc/freeradius/3.0/db.pool_vpn_asio"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_asio.index"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.11
range_stop = 155.54.194.12
netmask = 255.255.255.255
cache_size = 2
override = no
maximum_timeout = 0
}
# Loading module "adminslogin_log" from file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
detail adminslogin_log {
filename = "/var/log/freeradius/radacct/adminslogin/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "files_adminslogin" from file /etc/freeradius/3.0/mods-enabled/files_adminslogin
files files_adminslogin {
filename = "/etc/freeradius/3.0/mods-config/files_adminslogin/authorize"
}
# Loading module "syslog_expiration" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
linelog syslog_expiration {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.Expiration"
}
# Loaded module rlm_ldap
# Loading module "ldap-ecopas" from file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
ldap ldap-ecopas {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(|(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))(&(objectClass=posixGroup)(memberUid=%{%{Stripped-User-Name}:-%{User-Name}})))"
cacheable_name = no
cacheable_dn = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-ecopas-LDAP-Group
# Loading module "pool_vpn_avanttic" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
ippool pool_vpn_avanttic {
filename = "/etc/freeradius/3.0/db.pool_vpn_avanttic.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn_avanttic.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id} %{User-Name}"
range_start = 155.54.194.1
range_stop = 155.54.194.7
netmask = 255.255.255.255
cache_size = 7
override = no
maximum_timeout = 0
}
# Loading module "eduroam_inner_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
detail eduroam_inner_rediris_log {
filename = "/var/log/freeradius/radacct/eduroam-rediris/eduroam_inner_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail auth_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail reply_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail pre_proxy_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
detail post_proxy_log {
filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "eduroam_inner_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
detail eduroam_inner_log {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_inner_log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "ecopas_log" from file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
detail ecopas_log {
filename = "/var/log/freeradius/radacct/ecopas/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loading module "syslog_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
linelog syslog_accounting {
filename = "syslog"
escape_filenames = no
syslog_severity = "info"
permissions = 384
format = "This is a log message for %{User-Name}"
reference = "messages.%{%{Acct-Status-Type}:-unknown}"
}
# Loading module "files_eduroam_rediris_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
files files_eduroam_rediris_outer {
filename = "/etc/freeradius/3.0/mods-config/files_eduroam_rediris_outer/authorize"
}
# Loading module "ldap-puestosoc" from file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
ldap ldap-puestosoc {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(|(&(uid=%{%{Stripped-User-Name}:-%{User-Name}})(objectClass=posixAccount))(&(objectClass=posixGroup)(memberUid=%{%{Stripped-User-Name}:-%{User-Name}})))"
cacheable_name = no
cacheable_dn = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-puestosoc-LDAP-Group
# Loading module "files_monitorum" from file /etc/freeradius/3.0/mods-enabled/files_monitorum
files files_monitorum {
filename = "/etc/freeradius/3.0/mods-config/files_monitorum/authorize"
}
# Loading module "pool_vpn" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
ippool pool_vpn {
filename = "/etc/freeradius/3.0/db.pool_vpn.ippool"
ip_index = "/etc/freeradius/3.0/db.pool_vpn.ipindex"
key = "%{NAS-IP-Address} %{Calling-Station-Id}"
range_start = 155.54.194.48
range_stop = 155.54.194.239
netmask = 255.255.255.255
cache_size = 192
override = no
maximum_timeout = 0
}
# Loading module "ldap" from file /etc/freeradius/3.0/mods-enabled/ldap
ldap ldap {
server = "ldapacc.um.es"
port = 389
identity = "cn=radius,ou=People,ou=Management,o=SlapdRoot"
password = <<< secret >>>
sasl {
}
user {
scope = "sub"
access_positive = yes
sasl {
}
}
group {
filter = ""
scope = "sub"
name_attribute = "gidNumber"
membership_attribute = "uid"
membership_filter = "(&(mail=%{User-Name})(objectClass=posixAccount))"
cacheable_name = no
cacheable_dn = no
}
client {
filter = "(objectClass=radiusClient)"
scope = "sub"
base_dn = "ou=Usuarios,dc=Telematica"
}
profile {
}
options {
ldap_debug = 40
chase_referrals = yes
rebind = yes
net_timeout = 10
res_timeout = 5
srv_timelimit = 10
idle = 60
probes = 3
interval = 3
}
tls {
start_tls = no
require_cert = "allow"
}
}
Creating attribute ldap-LDAP-Group
# Loading module "puestosoc_log" from file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
detail puestosoc_log {
filename = "/var/log/freeradius/radacct/puestosoc/auth-log-%Y%m%d"
header = "%t"
permissions = 384
locking = no
escape_filenames = no
log_packet_header = no
}
# Loaded module rlm_mschap
# Loading module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap
mschap {
use_mppe = yes
require_encryption = no
require_strong = no
with_ntdomain_hack = yes
passchange {
}
allow_retry = yes
winbind_retry_with_normalised_username = no
}
instantiate {
}
# Instantiating module "files_eduroam_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_inner
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_inner/authorize
# Instantiating module "syslog" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog
# Instantiating module "eduroam_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_log
rlm_detail (eduroam_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "aplicaciones_log" from file /etc/freeradius/3.0/mods-enabled/detail.aplicaciones_log
rlm_detail (aplicaciones_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "IPASS" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "suffix" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "bangpath" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "realmpercent" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "ntdomain" from file /etc/freeradius/3.0/mods-enabled/realm
# Instantiating module "files_eduroam_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_outer
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_outer/authorize
# Instantiating module "files_ecopas" from file /etc/freeradius/3.0/mods-enabled/files_ecopas
reading pairlist file /etc/freeradius/3.0/mods-config/files_ecopas/authorize
# Instantiating module "eap" from file /etc/freeradius/3.0/mods-enabled/eap
# Linked to sub-module rlm_eap_md5
# Linked to sub-module rlm_eap_leap
# Linked to sub-module rlm_eap_gtc
gtc {
challenge = "Password: "
auth_type = "PAP"
}
# Linked to sub-module rlm_eap_tls
tls {
tls = "tls-common"
}
tls-config tls-common {
verify_depth = 0
ca_path = "/etc/freeradius/3.0/certs"
pem_file_type = yes
private_key_file = "/etc/freeradius/3.0/certs/priv-radius.um.es.pem"
certificate_file = "/etc/freeradius/3.0/certs/cert-radius.um.es.pem"
ca_file = "/etc/freeradius/3.0/certs/ca-umu-certificado.pem"
dh_file = "/etc/freeradius/3.0/certs/dh"
fragment_size = 1024
include_length = yes
auto_chain = yes
check_crl = no
check_all_crl = no
cipher_list = "DEFAULT"
ecdh_curve = "prime256v1"
tls_max_version = ""
tls_min_version = "1.0"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
skip_if_ocsp_ok = no
}
ocsp {
enable = no
override_cert_url = yes
url = "http://127.0.0.1/ocsp/"
use_nonce = yes
timeout = 0
softfail = no
}
}
# Linked to sub-module rlm_eap_ttls
ttls {
tls = "tls-common"
default_eap_type = "gtc"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "eduroam-inner-tunnel"
include_length = yes
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_peap
peap {
tls = "tls-common"
default_eap_type = "mschapv2"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = yes
virtual_server = "eduroam-inner-tunnel"
soh = no
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_mschapv2
mschapv2 {
with_ntdomain_hack = no
send_error = no
}
# Instantiating module "eap-eduroam-rediris" from file /etc/freeradius/3.0/mods-enabled/eap-eduroam-rediris
# Linked to sub-module rlm_eap_md5
# Linked to sub-module rlm_eap_leap
# Linked to sub-module rlm_eap_gtc
gtc {
challenge = "Password: "
auth_type = "PAP"
}
# Linked to sub-module rlm_eap_tls
tls {
tls = "tls-common"
}
tls-config tls-common {
verify_depth = 0
ca_path = "/etc/freeradius/3.0/certs"
pem_file_type = yes
private_key_file = "/etc/freeradius/3.0/certs/priv-radius.um.es.pem"
certificate_file = "/etc/freeradius/3.0/certs/cert-radius.um.es.pem"
ca_file = "/etc/freeradius/3.0/certs/ca-umu-certificado.pem"
dh_file = "/etc/freeradius/3.0/certs/dh"
fragment_size = 1024
include_length = yes
auto_chain = yes
check_crl = no
check_all_crl = no
cipher_list = "DEFAULT"
ecdh_curve = "prime256v1"
tls_max_version = ""
tls_min_version = "1.0"
cache {
enable = no
lifetime = 24
max_entries = 255
}
verify {
skip_if_ocsp_ok = no
}
ocsp {
enable = no
override_cert_url = yes
url = "http://127.0.0.1/ocsp/"
use_nonce = yes
timeout = 0
softfail = no
}
}
# Linked to sub-module rlm_eap_ttls
ttls {
tls = "tls-common"
default_eap_type = "gtc"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
virtual_server = "eduroam-rediris-inner-tunnel"
include_length = yes
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_peap
peap {
tls = "tls-common"
default_eap_type = "mschapv2"
copy_request_to_tunnel = yes
use_tunneled_reply = yes
proxy_tunneled_request_as_eap = yes
virtual_server = "eduroam-rediris-inner-tunnel"
soh = no
require_client_cert = no
}
tls: Using cached TLS configuration from previous invocation
# Linked to sub-module rlm_eap_mschapv2
mschapv2 {
with_ntdomain_hack = no
send_error = no
}
# Instantiating module "pool_vpn_ingenia" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ingenia
# Instantiating module "reject" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "fail" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "ok" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "handled" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "invalid" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "userlock" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "notfound" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "noop" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "updated" from file /etc/freeradius/3.0/mods-enabled/always
# Instantiating module "detail" from file /etc/freeradius/3.0/mods-enabled/detail
# Instantiating module "preprocess" from file /etc/freeradius/3.0/mods-enabled/preprocess
reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/huntgroups
reading pairlist file /etc/freeradius/3.0/mods-config/preprocess/hints
# Instantiating module "sql_pool" from file /etc/freeradius/3.0/mods-enabled/sql_pool
rlm_sql_mysql: libmysql version: 5.7.32
mysql {
tls {
tls_required = no
check_cert = no
check_cert_cn = no
}
warnings = "auto"
}
rlm_sql (sql_pool): Attempting to connect to database "dbradius"
rlm_sql (sql_pool): Initialising connection pool
pool {
start = 1
min = 1
max = 4096
spare = 1
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 60
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_sql (sql_pool): Opening additional connection (0), 1 of 1024 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'dbradius' on sqldbtelematica.um.es via TCP/IP, server version 5.7.32-0ubuntu0.16.04.1-log, protocol version 10
# Instantiating module "files_eduroam_rediris_inner" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_inner
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_rediris_inner/authorize
# Instantiating module "files_puestosoc" from file /etc/freeradius/3.0/mods-enabled/files_puestosoc
reading pairlist file /etc/freeradius/3.0/mods-config/files_puestosoc/authorize
# Instantiating module "pool_vpn_gnoss" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_gnoss
# Instantiating module "files_vpn" from file /etc/freeradius/3.0/mods-enabled/files_vpn
reading pairlist file /etc/freeradius/3.0/mods-config/files_vpn/authorize
# Instantiating module "files_aplicaciones" from file /etc/freeradius/3.0/mods-enabled/files_aplicaciones
reading pairlist file /etc/freeradius/3.0/mods-config/files_aplicaciones/authorize
# Instantiating module "sqlippool" from file /etc/freeradius/3.0/mods-enabled/sqlippool
Ignoring "allocate_clear_timeout = 1", forcing to "allocate_clear_timeout = 1"
# Instantiating module "eduroam_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_rediris_log
rlm_detail (eduroam_rediris_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "pool_vpn_ext_pas" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_ext_pas
# Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy
# Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/pre-proxy
# Instantiating module "attr_filter.access_reject" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_reject
# Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/access_challenge
# Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/accounting_response
# Instantiating module "attr_filter.post-proxy-tlm" from file /etc/freeradius/3.0/mods-enabled/attr_filter
reading pairlist file /etc/freeradius/3.0/mods-config/attr_filter/post-proxy-tlm
# Instantiating module "sql" from file /etc/freeradius/3.0/mods-enabled/sql
mysql {
tls {
tls_required = no
check_cert = no
check_cert_cn = no
}
warnings = "auto"
}
rlm_sql (sql): Attempting to connect to database "dbradiuslog"
rlm_sql (sql): Initialising connection pool
pool {
start = 1
min = 1
max = 4096
spare = 1
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 60
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_sql (sql): Opening additional connection (0), 1 of 1024 pending slots used
rlm_sql_mysql: Starting connect to MySQL server
rlm_sql_mysql: Connected to database 'dbradiuslog' on kogia50.um.es via TCP/IP, server version 5.7.32-0ubuntu0.16.04.1-log, protocol version 10
# Instantiating module "pool_vpn_izertis" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_izertis
# Instantiating module "pool_vpn_alu" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_alu
# Instantiating module "vpn_log" from file /etc/freeradius/3.0/mods-enabled/detail.vpn_log
rlm_detail (vpn_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "sql_log_um" from file /etc/freeradius/3.0/mods-enabled/detail.sql_log_um
rlm_detail (sql_log_um): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "pap" from file /etc/freeradius/3.0/mods-enabled/pap
# Instantiating module "expiration" from file /etc/freeradius/3.0/mods-enabled/expiration
# Instantiating module "pool_vpn_asio" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_asio
# Instantiating module "adminslogin_log" from file /etc/freeradius/3.0/mods-enabled/detail.adminslogin_log
rlm_detail (adminslogin_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "files_adminslogin" from file /etc/freeradius/3.0/mods-enabled/files_adminslogin
reading pairlist file /etc/freeradius/3.0/mods-config/files_adminslogin/authorize
# Instantiating module "syslog_expiration" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_expiration
# Instantiating module "ldap-ecopas" from file /etc/freeradius/3.0/mods-enabled/ldap-ecopas
rlm_ldap: libldap vendor: OpenLDAP, version: 20445
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap-ecopas): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap-ecopas): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
rlm_ldap (ldap-ecopas): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap-ecopas): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-ecopas): Waiting for bind result...
rlm_ldap (ldap-ecopas): Bind successful
# Instantiating module "pool_vpn_avanttic" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn_avanttic
# Instantiating module "eduroam_inner_rediris_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_rediris_log
rlm_detail (eduroam_inner_rediris_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "auth_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "reply_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "pre_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "post_proxy_log" from file /etc/freeradius/3.0/mods-enabled/detail.log
# Instantiating module "eduroam_inner_log" from file /etc/freeradius/3.0/mods-enabled/detail.eduroam_inner_log
rlm_detail (eduroam_inner_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "ecopas_log" from file /etc/freeradius/3.0/mods-enabled/detail.ecopas_log
rlm_detail (ecopas_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "syslog_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog_syslog_accounting
# Instantiating module "files_eduroam_rediris_outer" from file /etc/freeradius/3.0/mods-enabled/files_eduroam_rediris_outer
reading pairlist file /etc/freeradius/3.0/mods-config/files_eduroam_rediris_outer/authorize
# Instantiating module "ldap-puestosoc" from file /etc/freeradius/3.0/mods-enabled/ldap-puestosoc
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap-puestosoc): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap-puestosoc): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
rlm_ldap (ldap-puestosoc): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap-puestosoc): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap-puestosoc): Waiting for bind result...
rlm_ldap (ldap-puestosoc): Bind successful
# Instantiating module "files_monitorum" from file /etc/freeradius/3.0/mods-enabled/files_monitorum
reading pairlist file /etc/freeradius/3.0/mods-config/files_monitorum/authorize
# Instantiating module "pool_vpn" from file /etc/freeradius/3.0/mods-enabled/ippool_pool_vpn
# Instantiating module "ldap" from file /etc/freeradius/3.0/mods-enabled/ldap
accounting {
reference = "%{tolower:type.%{Acct-Status-Type}}"
}
post-auth {
reference = "."
}
rlm_ldap (ldap): Initialising connection pool
pool {
start = 5
min = 3
max = 4096
spare = 10
uses = 0
lifetime = 0
cleanup_interval = 30
idle_timeout = 60
retry_delay = 30
spread = no
}
Ignoring "max = 4096", forcing to "max = 1024"
rlm_ldap (ldap): Opening additional connection (0), 1 of 1024 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (1), 1 of 1023 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (2), 1 of 1022 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (3), 1 of 1021 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
rlm_ldap (ldap): Opening additional connection (4), 1 of 1020 pending slots used
rlm_ldap (ldap): Connecting to ldap://ldapacc.um.es:389
rlm_ldap (ldap): Waiting for bind result...
rlm_ldap (ldap): Bind successful
# Instantiating module "puestosoc_log" from file /etc/freeradius/3.0/mods-enabled/detail.puestosoc_log
rlm_detail (puestosoc_log): 'User-Password' suppressed, will not appear in detail output
# Instantiating module "mschap" from file /etc/freeradius/3.0/mods-enabled/mschap
rlm_mschap (mschap): using internal authentication
} # modules
radiusd: #### Loading Virtual Servers ####
server { # from file /etc/freeradius/3.0/radiusd.conf
} # server
server adminslogin { # from file /etc/freeradius/3.0/sites-enabled/adminslogin
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server adminslogin
server aplicaciones { # from file /etc/freeradius/3.0/sites-enabled/aplicaciones
# Loading authenticate {...}
# Loading authorize {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server aplicaciones
server eduroam { # from file /etc/freeradius/3.0/sites-enabled/eduroam
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server eduroam
server buffered-sql-eduroam { # from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
# Loading preacct {...}
# Loading accounting {...}
} # server buffered-sql-eduroam
server status { # from file /etc/freeradius/3.0/sites-enabled/status
# Loading authorize {...}
} # server status
server vpn { # from file /etc/freeradius/3.0/sites-enabled/vpn
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server vpn
server eduroam-inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/eduroam-inner-tunnel
# Loading authenticate {...}
# Loading authorize {...}
# Loading post-auth {...}
} # server eduroam-inner-tunnel
server eduroam-rediris { # from file /etc/freeradius/3.0/sites-enabled/eduroam-rediris
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server eduroam-rediris
server eduroam-rediris-inner-tunnel { # from file /etc/freeradius/3.0/sites-enabled/eduroam-rediris-inner-tunnel
# Loading authenticate {...}
# Loading authorize {...}
# Loading post-auth {...}
} # server eduroam-rediris-inner-tunnel
server monitorum { # from file /etc/freeradius/3.0/sites-enabled/monitorum
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading pre-proxy {...}
# Loading post-proxy {...}
# Loading post-auth {...}
} # server monitorum
server ecopas { # from file /etc/freeradius/3.0/sites-enabled/ecopas
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server ecopas
server puestosoc { # from file /etc/freeradius/3.0/sites-enabled/puestosoc
# Loading authenticate {...}
# Loading authorize {...}
# Loading preacct {...}
# Loading accounting {...}
# Loading post-auth {...}
} # server puestosoc
radiusd: #### Opening IP addresses and Ports ####
listen {
type = "proxy"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "acct"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "auth"
ipaddr = *
port = 0
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
listen {
type = "control"
listen {
socket = "/var/run/freeradius/freeradius.sock"
uid = "freerad"
gid = "freerad"
mode = "rw"
peercred = yes
}
}
listen {
type = "detail"
listen {
filename = "/var/log/freeradius/radacct/eduroam/eduroam_sql"
load_factor = 10
poll_interval = 1
retry_interval = 30
one_shot = no
track = yes
}
}
listen {
type = "status"
ipaddr = *
port = 18121
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
client monitorum_nyctalus21 {
ipaddr = 155.54.212.28
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus21"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client admin {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = <<< secret >>>
shortname = "admin"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client monitorum_nyctalus3x {
ipaddr = 155.54.212.48/29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "monitorum_nyctalus3x"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
client nyctalus20 {
ipaddr = 155.54.212.29
require_message_authenticator = no
secret = <<< secret >>>
shortname = "nyctalus20"
limit {
max_connections = 16
lifetime = 0
idle_timeout = 30
}
}
}
Listening on proxy address * port 0
Listening on acct address * port 1813
Listening on auth address * port 1812
Listening on command file /var/run/freeradius/freeradius.sock
Listening on detail file /var/log/freeradius/radacct/eduroam/eduroam_sql as server buffered-sql-eduroam
Listening on status address * port 18121 bound to server status
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.826402 sec
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.105174 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.187798 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.890599 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.216093 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.177689 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.847045 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.075417 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.158624 sec
(0) Received Accounting-Request Id 241 from 127.0.0.1:17521 to 127.0.0.1:1813 length 181
(0) User-Name = "angel.luis at um.es"
(0) NAS-Port = 33439744
(0) Service-Type = Framed-User
(0) Framed-Protocol = PPP
(0) Framed-IP-Address = 155.54.197.99
(0) Called-Station-Id = "155.54.213.5"
(0) Calling-Station-Id = "37.230.65.41"
(0) Acct-Status-Type = Start
(0) Acct-Delay-Time = 2
(0) Acct-Session-Id = "E56018E0"
(0) Acct-Authentic = RADIUS
(0) NAS-Port-Type = Virtual
(0) Tunnel-Client-Endpoint:0 = "37.230.65.41"
(0) ASA-TunnelGroupName = "rpvum"
(0) ASA-ClientType = Cisco-VPN-Client-IKEv1
(0) ASA-SessionType = Cisco-VPN-Client/IKEv1
(0) NAS-IP-Address = 155.54.213.5
(0) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(0) preacct {
(0) suffix: Checking for suffix after "@"
(0) suffix: Looking up realm "um.es" for User-Name = "angel.luis at um.es"
(0) suffix: Found realm "um.es"
(0) suffix: Adding Stripped-User-Name = "angel.luis"
(0) suffix: Adding Realm = "um.es"
(0) suffix: Accounting realm is LOCAL
(0) [suffix] = ok
(0) } # preacct = ok
(0) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(0) accounting {
(0) update request {
(0) X-Atica-Service = "vpn"
(0) X-Atica-Service-Filter = "vpn"
(0) } # update request = noop
(0) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(0) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201110
(0) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201110
(0) vpn_log: EXPAND %t
(0) vpn_log: --> Tue Nov 10 09:58:52 2020
(0) [vpn_log] = ok
(0) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(0) syslog_accounting: --> messages.Start
(0) syslog_accounting: EXPAND Connect: [%{User-Name}] (Called-Station-Id: %{Called-Station-Id}, Calling-Station-Id: %{Calling-Station-Id}, IP: %{%{Framed-IP-Address}:-unknown}, X-Atica-Service: %{%{X-Atica-Service}:-unknown})
(0) syslog_accounting: --> Connect: [angel.luis at um.es] (Called-Station-Id: 155.54.213.5, Calling-Station-Id: 37.230.65.41, IP: 155.54.197.99, X-Atica-Service: vpn)
(0) [syslog_accounting] = ok
(0) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(0) sql_log_um: EXPAND %t
(0) sql_log_um: --> Tue Nov 10 09:58:52 2020
(0) [sql_log_um] = ok
(0) pool_vpn: This is not an Accounting-Stop
(0) [pool_vpn] = noop
(0) pool_vpn_alu: This is not an Accounting-Stop
(0) [pool_vpn_alu] = noop
(0) pool_vpn_avanttic: This is not an Accounting-Stop
(0) [pool_vpn_avanttic] = noop
(0) pool_vpn_gnoss: This is not an Accounting-Stop
(0) [pool_vpn_gnoss] = noop
(0) pool_vpn_izertis: This is not an Accounting-Stop
(0) [pool_vpn_izertis] = noop
(0) pool_vpn_ext_pas: This is not an Accounting-Stop
(0) [pool_vpn_ext_pas] = noop
(0) pool_vpn_ingenia: This is not an Accounting-Stop
(0) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(0) sqlippool: EXPAND %{User-Name}
(0) sqlippool: --> angel.luis at um.es
(0) sqlippool: SQL-User-Name set to 'angel.luis at um.es'
(0) sqlippool: EXPAND START TRANSACTION
(0) sqlippool: --> START TRANSACTION
(0) sqlippool: Executing query: START TRANSACTION
(0) sqlippool: EXPAND UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'
(0) sqlippool: --> UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '155.54.213.5' AND pool_key = '33439744' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.197.99'
(0) sqlippool: Executing query: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '155.54.213.5' AND pool_key = '33439744' AND username = 'angel.luis at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.197.99'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(0) sqlippool: EXPAND COMMIT
(0) sqlippool: --> COMMIT
(0) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(0) [sqlippool] = ok
(0) } # accounting = ok
(0) Sent Accounting-Response Id 241 from 127.0.0.1:1813 to 127.0.0.1:17521 length 0
(0) Finished request
(0) Cleaning up request packet ID 241 with timestamp +9
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
User-Name = "angel.luis at um.es"
NAS-Port = 33439744
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-IP-Address = 155.54.197.99
Called-Station-Id = "155.54.213.5"
Calling-Station-Id = "37.230.65.41"
Acct-Status-Type = Start
Acct-Delay-Time = 3
Acct-Session-Id = "E56018E0"
Acct-Authentic = RADIUS
NAS-Port-Type = Virtual
Tunnel-Client-Endpoint:0 = "37.230.65.41"
ASA-TunnelGroupName = "rpvum"
ASA-ClientType = Cisco-VPN-Client-IKEv1
ASA-SessionType = Cisco-VPN-Client/IKEv1
NAS-IP-Address = 155.54.213.5
Stripped-User-Name = "angel.luis"
Realm = "um.es"
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 09:58:52 CET"
Packet-Transmit-Counter = 1
(1) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(1) preacct {
(1) [preprocess] = ok
(1) policy acct_unique {
(1) update request {
(1) &Tmp-String-9 := "ai:"
(1) } # update request = noop
(1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(1) EXPAND %{hex:&Class}
(1) -->
(1) EXPAND ^%{hex:&Tmp-String-9}
(1) --> ^61693a
(1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(1) else {
(1) update request {
(1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(1) --> 4401f29e5c1002a3423673588fa71974
(1) &Acct-Unique-Session-Id := 4401f29e5c1002a3423673588fa71974
(1) } # update request = noop
(1) } # else = noop
(1) } # policy acct_unique = noop
(1) } # preacct = ok
(1) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(1) accounting {
(1) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(1) sql: --> type.start.query
(1) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(1) sql: EXPAND %{User-Name}
(1) sql: --> angel.luis at um.es
(1) sql: SQL-User-Name set to 'angel.luis at um.es'
(1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')
(1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('E56018E0', '4401f29e5c1002a3423673588fa71974', 'angel.luis at um.es', 'um.es', '155.54.213.5', '33439744', 'Virtual', FROM_UNIXTIME(1604998730), FROM_UNIXTIME(1604998730), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.5', '37.230.65.41', '', 'Framed-User', 'PPP', '155.54.197.99')
(1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('E56018E0', '4401f29e5c1002a3423673588fa71974', 'angel.luis at um.es', 'um.es', '155.54.213.5', '33439744', 'Virtual', FROM_UNIXTIME(1604998730), FROM_UNIXTIME(1604998730), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.5', '37.230.65.41', '', 'Framed-User', 'PPP', '155.54.197.99')
(1) sql: SQL query returned: success
(1) sql: 1 record(s) updated
rlm_sql (sql): Released connection (0)
(1) [sql] = ok
(1) } # accounting = ok
(1) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Done Accounting-Request packet.
(1) Finished request
(1) Cleaning up request packet ID 0 with timestamp +10
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Unlinking /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.174677 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.056296 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.912375 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.180601 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.022809 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.983883 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.195937 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.802937 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.190532 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.020332 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.166751 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.201986 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.064784 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.134848 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.861926 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.144645 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.023589 sec
(2) Received Accounting-Request Id 181 from 127.0.0.1:53406 to 127.0.0.1:1813 length 152
(2) User-Name = "amateo at um.es"
(2) Acct-Authentic = RADIUS
(2) Framed-IP-Address = 155.54.193.216
(2) Event-Timestamp = "Nov 10 2020 07:13:05 CET"
(2) Acct-Session-Time = 1
(2) Acct-Status-Type = Start
(2) Acct-Session-Id = "85c00002"
(2) Service-Type = Framed-User
(2) NAS-Port-Type = Virtual
(2) NAS-Port-Id = "\000\000\000\021"
(2) Calling-Station-Id = "37.230.65.41"
(2) Called-Station-Id = "155.54.213.6"
(2) NAS-Identifier = "MikroTik-CCR-VPN-1"
(2) Acct-Delay-Time = 0
(2) NAS-IP-Address = 155.54.213.6
(2) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(2) preacct {
(2) suffix: Checking for suffix after "@"
(2) suffix: Looking up realm "um.es" for User-Name = "amateo at um.es"
(2) suffix: Found realm "um.es"
(2) suffix: Adding Stripped-User-Name = "amateo"
(2) suffix: Adding Realm = "um.es"
(2) suffix: Accounting realm is LOCAL
(2) [suffix] = ok
(2) } # preacct = ok
(2) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(2) accounting {
(2) update request {
(2) X-Atica-Service = "vpn"
(2) X-Atica-Service-Filter = "vpn"
(2) } # update request = noop
(2) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(2) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201110
(2) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201110
(2) vpn_log: EXPAND %t
(2) vpn_log: --> Tue Nov 10 09:59:11 2020
(2) [vpn_log] = ok
(2) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(2) syslog_accounting: --> messages.Start
(2) syslog_accounting: EXPAND Connect: [%{User-Name}] (Called-Station-Id: %{Called-Station-Id}, Calling-Station-Id: %{Calling-Station-Id}, IP: %{%{Framed-IP-Address}:-unknown}, X-Atica-Service: %{%{X-Atica-Service}:-unknown})
(2) syslog_accounting: --> Connect: [amateo at um.es] (Called-Station-Id: 155.54.213.6, Calling-Station-Id: 37.230.65.41, IP: 155.54.193.216, X-Atica-Service: vpn)
(2) [syslog_accounting] = ok
(2) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(2) sql_log_um: EXPAND %t
(2) sql_log_um: --> Tue Nov 10 09:59:11 2020
(2) [sql_log_um] = ok
(2) pool_vpn: This is not an Accounting-Stop
(2) [pool_vpn] = noop
(2) pool_vpn_alu: This is not an Accounting-Stop
(2) [pool_vpn_alu] = noop
(2) pool_vpn_avanttic: This is not an Accounting-Stop
(2) [pool_vpn_avanttic] = noop
(2) pool_vpn_gnoss: This is not an Accounting-Stop
(2) [pool_vpn_gnoss] = noop
(2) pool_vpn_izertis: This is not an Accounting-Stop
(2) [pool_vpn_izertis] = noop
(2) pool_vpn_ext_pas: This is not an Accounting-Stop
(2) [pool_vpn_ext_pas] = noop
(2) pool_vpn_ingenia: This is not an Accounting-Stop
(2) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(2) sqlippool: EXPAND %{User-Name}
(2) sqlippool: --> amateo at um.es
(2) sqlippool: SQL-User-Name set to 'amateo at um.es'
(2) sqlippool: EXPAND START TRANSACTION
(2) sqlippool: --> START TRANSACTION
(2) sqlippool: Executing query: START TRANSACTION
(2) sqlippool: EXPAND UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'
(2) sqlippool: --> UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '155.54.213.6' AND pool_key = '' AND username = 'amateo at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.193.216'
(2) sqlippool: Executing query: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '155.54.213.6' AND pool_key = '' AND username = 'amateo at um.es' AND callingstationid = '37.230.65.41' AND framedipaddress = '155.54.193.216'
rlm_sql_mysql: Rows matched: 0 Changed: 0 Warnings: 0
(2) sqlippool: EXPAND COMMIT
(2) sqlippool: --> COMMIT
(2) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(2) [sqlippool] = ok
(2) } # accounting = ok
(2) Sent Accounting-Response Id 181 from 127.0.0.1:1813 to 127.0.0.1:53406 length 0
(2) Finished request
(2) Cleaning up request packet ID 181 with timestamp +28
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
User-Name = "amateo at um.es"
Acct-Authentic = RADIUS
Framed-IP-Address = 155.54.193.216
Event-Timestamp = "Nov 10 2020 07:13:05 CET"
Acct-Session-Time = 1
Acct-Status-Type = Start
Acct-Session-Id = "85c00002"
Service-Type = Framed-User
NAS-Port-Type = Virtual
NAS-Port-Id = "\000\000\000\021"
Calling-Station-Id = "37.230.65.41"
Called-Station-Id = "155.54.213.6"
NAS-Identifier = "MikroTik-CCR-VPN-1"
Acct-Delay-Time = 9966
NAS-IP-Address = 155.54.213.6
Stripped-User-Name = "amateo"
Realm = "um.es"
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 09:59:11 CET"
Packet-Transmit-Counter = 1
(3) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(3) preacct {
(3) [preprocess] = ok
(3) policy acct_unique {
(3) update request {
(3) &Tmp-String-9 := "ai:"
(3) } # update request = noop
(3) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(3) EXPAND %{hex:&Class}
(3) -->
(3) EXPAND ^%{hex:&Tmp-String-9}
(3) --> ^61693a
(3) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(3) else {
(3) update request {
(3) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(3) --> afbe58acfe97f8f16bf0aa10fb2fa38e
(3) &Acct-Unique-Session-Id := afbe58acfe97f8f16bf0aa10fb2fa38e
(3) } # update request = noop
(3) } # else = noop
(3) } # policy acct_unique = noop
(3) } # preacct = ok
(3) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(3) accounting {
(3) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(3) sql: --> type.start.query
(3) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(3) sql: EXPAND %{User-Name}
(3) sql: --> amateo at um.es
(3) sql: SQL-User-Name set to 'amateo at um.es'
(3) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')
(3) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('85c00002', 'afbe58acfe97f8f16bf0aa10fb2fa38e', 'amateo at um.es', 'um.es', '155.54.213.6', '', 'Virtual', FROM_UNIXTIME(1604988785), FROM_UNIXTIME(1604988785), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.6', '37.230.65.41', '', 'Framed-User', '', '155.54.193.216')
(3) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('85c00002', 'afbe58acfe97f8f16bf0aa10fb2fa38e', 'amateo at um.es', 'um.es', '155.54.213.6', '', 'Virtual', FROM_UNIXTIME(1604988785), FROM_UNIXTIME(1604988785), NULL, '0', 'RADIUS', '', '', '0', '0', '155.54.213.6', '37.230.65.41', '', 'Framed-User', '', '155.54.193.216')
(3) sql: SQL query returned: success
(3) sql: 1 record(s) updated
rlm_sql (sql): Released connection (0)
(3) [sql] = ok
(3) } # accounting = ok
(3) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Done Accounting-Request packet.
(3) Finished request
(3) Cleaning up request packet ID 1 with timestamp +28
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Unlinking /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.812644 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.959869 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.193041 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.961461 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.761573 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.949067 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.958857 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.245247 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.033291 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.125875 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.014126 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.802560 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.017175 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.182613 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.983540 sec
(4) Received Accounting-Request Id 77 from 127.0.0.1:7696 to 127.0.0.1:1813 length 63
(4) Acct-Status-Type = Accounting-On
(4) NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
(4) Acct-Delay-Time = 0
(4) NAS-IP-Address = 155.54.213.6
(4) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/vpn
(4) preacct {
(4) [suffix] = noop
(4) } # preacct = noop
(4) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/vpn
(4) accounting {
(4) update request {
(4) X-Atica-Service = "vpn"
(4) X-Atica-Service-Filter = "vpn"
(4) } # update request = noop
(4) vpn_log: EXPAND /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d
(4) vpn_log: --> /var/log/freeradius/radacct/vpn/vpn_log-20201110
(4) vpn_log: /var/log/freeradius/radacct/vpn/vpn_log-%Y%m%d expands to /var/log/freeradius/radacct/vpn/vpn_log-20201110
(4) vpn_log: EXPAND %t
(4) vpn_log: --> Tue Nov 10 09:59:26 2020
(4) [vpn_log] = ok
(4) syslog_accounting: EXPAND messages.%{%{Acct-Status-Type}:-unknown}
(4) syslog_accounting: --> messages.Accounting-On
(4) syslog_accounting: EXPAND NAS %{Packet-Src-IP-Address} (%{NAS-IP-Address}) just came online
(4) syslog_accounting: --> NAS 127.0.0.1 (155.54.213.6) just came online
(4) [syslog_accounting] = ok
(4) sql_log_um: EXPAND /var/log/freeradius/radacct/eduroam/eduroam_sql
(4) sql_log_um: --> /var/log/freeradius/radacct/eduroam/eduroam_sql
(4) sql_log_um: /var/log/freeradius/radacct/eduroam/eduroam_sql expands to /var/log/freeradius/radacct/eduroam/eduroam_sql
(4) sql_log_um: EXPAND %t
(4) sql_log_um: --> Tue Nov 10 09:59:26 2020
(4) [sql_log_um] = ok
(4) pool_vpn: This is not an Accounting-Stop
(4) [pool_vpn] = noop
(4) pool_vpn_alu: This is not an Accounting-Stop
(4) [pool_vpn_alu] = noop
(4) pool_vpn_avanttic: This is not an Accounting-Stop
(4) [pool_vpn_avanttic] = noop
(4) pool_vpn_gnoss: This is not an Accounting-Stop
(4) [pool_vpn_gnoss] = noop
(4) pool_vpn_izertis: This is not an Accounting-Stop
(4) [pool_vpn_izertis] = noop
(4) pool_vpn_ext_pas: This is not an Accounting-Stop
(4) [pool_vpn_ext_pas] = noop
(4) pool_vpn_ingenia: This is not an Accounting-Stop
(4) [pool_vpn_ingenia] = noop
rlm_sql (sql_pool): Reserved connection (0)
(4) sqlippool: EXPAND %{User-Name}
(4) sqlippool: -->
(4) sqlippool: SQL-User-Name set to ''
(4) sqlippool: EXPAND START TRANSACTION
(4) sqlippool: --> START TRANSACTION
(4) sqlippool: Executing query: START TRANSACTION
(4) sqlippool: EXPAND UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '%{%{Nas-IP-Address}:-%{Nas-IPv6-Address}}'
(4) sqlippool: --> UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '155.54.213.6'
(4) sqlippool: Executing query: UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', expiry_time = NULL WHERE nasipaddress = '155.54.213.6'
rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 0
(4) sqlippool: EXPAND COMMIT
(4) sqlippool: --> COMMIT
(4) sqlippool: Executing query: COMMIT
rlm_sql (sql_pool): Released connection (0)
(4) [sqlippool] = ok
(4) } # accounting = ok
(4) Sent Accounting-Response Id 77 from 127.0.0.1:1813 to 127.0.0.1:7696 length 0
(4) Finished request
(4) Cleaning up request packet ID 77 with timestamp +43
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Renaming /var/log/freeradius/radacct/eduroam/eduroam_sql -> /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Read packet from /var/log/freeradius/radacct/eduroam/eduroam_sql.work
Acct-Status-Type = Accounting-On
NAS-Identifier = "MikroTik-CCR-VPN-1-Test"
Acct-Delay-Time = 0
NAS-IP-Address = 155.54.213.6
X-Atica-Service = "vpn"
X-Atica-Service-Filter = "vpn"
Packet-Original-Timestamp = "Nov 10 2020 09:59:26 CET"
Packet-Transmit-Counter = 1
(5) # Executing section preacct from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(5) preacct {
(5) [preprocess] = ok
(5) policy acct_unique {
(5) update request {
(5) &Tmp-String-9 := "ai:"
(5) } # update request = noop
(5) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
(5) EXPAND %{hex:&Class}
(5) -->
(5) EXPAND ^%{hex:&Tmp-String-9}
(5) --> ^61693a
(5) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
(5) else {
(5) update request {
(5) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
(5) --> 81a332593e1a33c892e582753ceec582
(5) &Acct-Unique-Session-Id := 81a332593e1a33c892e582753ceec582
(5) } # update request = noop
(5) } # else = noop
(5) } # policy acct_unique = noop
(5) } # preacct = ok
(5) # Executing section accounting from file /etc/freeradius/3.0/sites-enabled/buffered-sql-eduroam
(5) accounting {
(5) sql: EXPAND %{tolower:type.%{%{Acct-Status-Type}:-%{Request-Processing-Stage}}.query}
(5) sql: --> type.accounting-on.query
(5) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (0)
(5) sql: EXPAND %{User-Name}
(5) sql: -->
(5) sql: SQL-User-Name set to ''
(5) sql: EXPAND UPDATE radacct SET acctstoptime = FROM_UNIXTIME(%{integer:Event-Timestamp}), acctsessiontime = '%{integer:Event-Timestamp}' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = '%{%{Acct-Terminate-Cause}:-NAS-Reboot}' WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= FROM_UNIXTIME(%{integer:Event-Timestamp})
(5) sql: --> UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998766), acctsessiontime = '1604998766' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998766)
(5) sql: Executing query: UPDATE radacct SET acctstoptime = FROM_UNIXTIME(1604998766), acctsessiontime = '1604998766' - UNIX_TIMESTAMP(acctstarttime), acctterminatecause = 'NAS-Reboot' WHERE acctstoptime IS NULL AND nasipaddress = '155.54.213.6' AND acctstarttime <= FROM_UNIXTIME(1604998766)
rlm_sql_mysql: Rows matched: 1 Changed: 1 Warnings: 0
(5) sql: SQL query returned: success
(5) sql: 1 record(s) updated
rlm_sql (sql): Released connection (0)
(5) [sql] = ok
(5) } # accounting = ok
(5) detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Done Accounting-Request packet.
(5) Finished request
(5) Cleaning up request packet ID 2 with timestamp +43
Ready to process requests
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Unlinking /var/log/freeradius/radacct/eduroam/eduroam_sql.work
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.001885 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.833911 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.788466 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.994219 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.032809 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.038277 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.916612 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.018118 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.151196 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.881650 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.015258 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.183508 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.210822 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.974807 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.995101 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.834148 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.113046 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.245948 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.214973 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.778024 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.906130 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.197824 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.125189 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.773673 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.782368 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.937340 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.920413 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.169877 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.980527 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.155866 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.030615 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.073841 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.848060 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.043673 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.108349 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.874732 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.989334 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.936351 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.978392 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.070025 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.939997 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.893438 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 0.886413 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.177872 sec
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Polling for detail file
detail (/var/log/freeradius/radacct/eduroam/eduroam_sql): Detail listener state unopened waiting 1.124160 sec
More information about the Freeradius-Users
mailing list