FreeRADIUS CoA Proxy [invalid Message-Authenticator] in response
Alexander Shulgin
alexs20 at gmail.com
Tue Oct 31 20:45:47 UTC 2023
Hi Alan,
As you suggested I ran the server with -Xxxx flag and radclient with -xxx
While it increased the debug level of the server, it did not change the
output of the radclient.
So i went forward and ran radsniff on both sides
Attached are server2.txt (server log), radclient2.txt (radclient
log), radsniff_client2.txt (radsniff output for the client)
and radsniff_server2.txt (radsniff output for the server)
>From what I see the final message from the server has exactly the same
values as on client side, which means nothing changing the packet
Server:
2023-10-31 20:30:12.255945 (4) Disconnect-ACK Id 167 enp0s3:
192.168.2.227:42310 <- 192.168.2.157:3799 +0.002 +0.002
Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Message-Authenticator = 0x680699937a7133452ba8dabe0e179856
Authenticator-Field = 0xf8c3e20b55fa591208f37ada73872184
Client:
2023-10-31 14:30:12.247761 (2) Disconnect-ACK Id 167 enp0s3:
192.168.2.227:42310 <- 192.168.2.157:3799 +0.002 +0.002
Event-Timestamp = "Oct 31 2023 14:30:12 MDT"
Message-Authenticator = 0x680699937a7133452ba8dabe0e179856
Authenticator-Field = 0xf8c3e20b55fa591208f37ada73872184
Thanks,
Alex
On Tue, Oct 31, 2023 at 1:52 PM Alan DeKok <aland at deployingradius.com>
wrote:
> Or just run
>
> radclient -xxx ...
>
> and that will print out the hex packet, too.
>
> > On Oct 31, 2023, at 3:51 PM, Alan DeKok <aland at deployingradius.com>
> wrote:
> >
> > On Oct 31, 2023, at 3:35 PM, Alexander Shulgin <alexs20 at gmail.com>
> wrote:
> >>
> >> I am trying to configure the coa proxy in latest Radius docker image
> 3.2.3.
> >>
> >> I have defined a client with a proper shared secret (message initiator)
> and
> >> also defined a home server with a shared secret (message destination).
> When
> >> I send the CoA message I see in debug that the radius server is proxying
> >> the request, the NAS at destination receiving it, it responds back to
> the
> >> radius server and then the radius server forwards that message back to
> the
> >> initiator.
> >
> > That's good. The Disconnect-Request packet is signed with the shared
> secret, so the server verifies it before processing the packet.
> >
> >> The problem is when I receive the final message from the radius
> >> server it has invalid message-authenticator.
> >
> > Something is modifying the packet in transit.
> >
> > Run the server with -Xxxx (one of the few times this is necessary). It
> should print out the Disconnect-Request packet as hex.
> >
> > Run "radsniff" one the client, and it will print out the hex version of
> the packet it received.
> >
> > If they're different, then something is mangling the reply before
> radclient sees it.
> >
> > If the packets are the same, then something extremely weird is going on.
> >
> > Alan DeKok.
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
-------------- next part --------------
Logging all events
Sniffing on (enp0s3)
2023-10-31 14:30:12.245428 (1) Disconnect-Request Id 167 enp0s3:192.168.2.227:42310 -> 192.168.2.157:3799 +0.000
NAS-IP-Address = 192.168.2.224
Calling-Station-Id = "BC:54:51:EF:70:AE"
Event-Timestamp = "Oct 31 2023 14:30:12 MDT"
Authenticator-Field = 0xf2b9df3d231c9fbef7b8714fc786426d
2023-10-31 14:30:12.247761 (2) Disconnect-ACK Id 167 enp0s3:192.168.2.227:42310 <- 192.168.2.157:3799 +0.002 +0.002
Event-Timestamp = "Oct 31 2023 14:30:12 MDT"
Message-Authenticator = 0x680699937a7133452ba8dabe0e179856
Authenticator-Field = 0xf8c3e20b55fa591208f37ada73872184
2023-10-31 14:30:17.447761 (1) Cleaning up request packet ID 167
-------------- next part --------------
echo "
NAS-IP-Address = 192.168.2.224
Calling-Station-Id = 'BC:54:51:EF:70:AE'
Event-Timestamp = $(date +%s)
" | radclient -xxx 192.168.2.157:3799 disconnect testing123
Sent Disconnect-Request Id 167 from 0.0.0.0:42310 to 192.168.2.157:3799 length 51
NAS-IP-Address = 192.168.2.224
Calling-Station-Id = "BC:54:51:EF:70:AE"
Event-Timestamp = "Oct 31 2023 14:30:12 MDT"
(0) Reply verification failed: Received packet from 192.168.2.157 with invalid Message-Authenticator! (Shared secret is incorrect.)
-------------- next part --------------
Logging all events
Sniffing on (enp0s3)
2023-10-31 20:30:12.253814 (1) Disconnect-Request Id 167 enp0s3:192.168.2.227:42310 -> 192.168.2.157:3799 +0.000
NAS-IP-Address = 192.168.2.224
Calling-Station-Id = "BC:54:51:EF:70:AE"
Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Authenticator-Field = 0xf2b9df3d231c9fbef7b8714fc786426d
2023-10-31 20:30:12.254223 (2) Disconnect-Request Id 207 enp0s3:192.168.2.157:59745 -> 192.168.2.224:3799 +0.000
NAS-IP-Address = 192.168.2.224
Calling-Station-Id = "BC:54:51:EF:70:AE"
Proxy-State = 0x313637
Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Authenticator-Field = 0xd0846e876553901a279028ff67947086
2023-10-31 20:30:12.255736 (3) Disconnect-ACK Id 207 enp0s3:192.168.2.157:59745 <- 192.168.2.224:3799 +0.001 +0.001
Proxy-State = 0x313637
Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Message-Authenticator = 0x8084a9e814fd69b19917b481c59b4f41
Authenticator-Field = 0xd5ef6438698be0b3b7c415ced13fc574
2023-10-31 20:30:12.255945 (4) Disconnect-ACK Id 167 enp0s3:192.168.2.227:42310 <- 192.168.2.157:3799 +0.002 +0.002
Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Message-Authenticator = 0x680699937a7133452ba8dabe0e179856
Authenticator-Field = 0xf8c3e20b55fa591208f37ada73872184
2023-10-31 20:30:17.455736 (2) Cleaning up request packet ID 207
2023-10-31 20:30:17.455945 (1) Cleaning up request packet ID 167
-------------- next part --------------
Tue Oct 31 20:29:52 2023 : Debug: Server was built with:
Tue Oct 31 20:29:52 2023 : Debug: accounting : yes
Tue Oct 31 20:29:52 2023 : Debug: authentication : yes
Tue Oct 31 20:29:52 2023 : Debug: ascend-binary-attributes : yes
Tue Oct 31 20:29:52 2023 : Debug: coa : yes
Tue Oct 31 20:29:52 2023 : Debug: recv-coa-from-home-server : yes
Tue Oct 31 20:29:52 2023 : Debug: control-socket : yes
Tue Oct 31 20:29:52 2023 : Debug: detail : yes
Tue Oct 31 20:29:52 2023 : Debug: dhcp : yes
Tue Oct 31 20:29:52 2023 : Debug: dynamic-clients : yes
Tue Oct 31 20:29:52 2023 : Debug: osfc2 : no
Tue Oct 31 20:29:52 2023 : Debug: proxy : yes
Tue Oct 31 20:29:52 2023 : Debug: regex-pcre : no
Tue Oct 31 20:29:52 2023 : Debug: regex-posix : yes
Tue Oct 31 20:29:52 2023 : Debug: regex-posix-extended : yes
Tue Oct 31 20:29:52 2023 : Debug: session-management : yes
Tue Oct 31 20:29:52 2023 : Debug: stats : yes
Tue Oct 31 20:29:52 2023 : Debug: systemd : yes
Tue Oct 31 20:29:52 2023 : Debug: tcp : yes
Tue Oct 31 20:29:52 2023 : Debug: threads : yes
Tue Oct 31 20:29:52 2023 : Debug: tls : yes
Tue Oct 31 20:29:52 2023 : Debug: unlang : yes
Tue Oct 31 20:29:52 2023 : Debug: vmps : yes
Tue Oct 31 20:29:52 2023 : Debug: developer : no
Tue Oct 31 20:29:52 2023 : Debug: Server core libs:
Tue Oct 31 20:29:52 2023 : Debug: freeradius-server : 3.2.3
Tue Oct 31 20:29:52 2023 : Debug: talloc : 2.3.*
Tue Oct 31 20:29:52 2023 : Debug: ssl : 3.0.0b dev
Tue Oct 31 20:29:52 2023 : Debug: Endianness:
Tue Oct 31 20:29:52 2023 : Debug: little
Tue Oct 31 20:29:52 2023 : Debug: Compilation flags:
Tue Oct 31 20:29:52 2023 : Debug: cppflags : -Wdate-time -D_FORTIFY_SOURCE=2
Tue Oct 31 20:29:52 2023 : Debug: cflags : -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -g -O2 -ffile-prefix-map=/usr/local/src/repositories/freeradius-server=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -O2 -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1
Tue Oct 31 20:29:52 2023 : Debug: ldflags : -Wl,-Bsymbolic-functions -flto=auto -ffat-lto-objects -flto=auto -Wl,-z,relro -Wl,-z,now
Tue Oct 31 20:29:52 2023 : Debug: libs : -lcrypto -lssl -ltalloc -latomic -lcap -lnsl -lresolv -ldl -lpthread -lreadline
Tue Oct 31 20:29:52 2023 : Debug:
Tue Oct 31 20:29:52 2023 : Info: FreeRADIUS Version 3.2.3
Tue Oct 31 20:29:52 2023 : Info: Copyright (C) 1999-2022 The FreeRADIUS server project and contributors
Tue Oct 31 20:29:52 2023 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
Tue Oct 31 20:29:52 2023 : Info: PARTICULAR PURPOSE
Tue Oct 31 20:29:52 2023 : Info: You may redistribute copies of FreeRADIUS under the terms of the
Tue Oct 31 20:29:52 2023 : Info: GNU General Public License
Tue Oct 31 20:29:52 2023 : Info: For more information about these matters, see the file named COPYRIGHT
Tue Oct 31 20:29:52 2023 : Info: Starting - reading configuration files ...
Tue Oct 31 20:29:52 2023 : Debug: including dictionary file /usr/share/freeradius/dictionary
Tue Oct 31 20:29:52 2023 : Debug: including dictionary file /usr/share/freeradius/dictionary.dhcp
Tue Oct 31 20:29:52 2023 : Debug: including dictionary file /usr/share/freeradius/dictionary.vqp
Tue Oct 31 20:29:52 2023 : Debug: including dictionary file /etc/freeradius/dictionary
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/radiusd.conf
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/proxy.conf
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/clients.conf
Tue Oct 31 20:29:52 2023 : Debug: including files in directory /etc/freeradius/mods-enabled/
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/preprocess
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/ntlm_auth
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/mschap
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/eap
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/digest
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/pap
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/exec
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/logintime
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/dynamic_clients
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/passwd
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/detail
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/expiration
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/utf8
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/unpack
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/replicate
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/radutmp
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/unix
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/expr
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/echo
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/linelog
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/totp
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/sradutmp
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/files
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/chap
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/soh
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/mods-enabled/date
Tue Oct 31 20:29:52 2023 : Debug: including files in directory /etc/freeradius/policy.d/
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/operator-name
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/eap
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/control
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/abfab-tr
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/accounting
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/dhcp
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/canonicalization
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/moonshot-targeted-ids
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/debug
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/filter
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/cui
Tue Oct 31 20:29:52 2023 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE
Tue Oct 31 20:29:52 2023 : Debug: OPTIMIZING (no == yes) --> FALSE
Tue Oct 31 20:29:52 2023 : Debug: OPTIMIZING (${policy.cui_require_operator_name} == yes) --> FALSE
Tue Oct 31 20:29:52 2023 : Debug: OPTIMIZING (no == yes) --> FALSE
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/policy.d/rfc7542
Tue Oct 31 20:29:52 2023 : Debug: including files in directory /etc/freeradius/sites-enabled/
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/sites-enabled/default
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/sites-enabled/inner-tunnel
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/sites-enabled/coa
Tue Oct 31 20:29:52 2023 : Debug: including configuration file /etc/freeradius/sites-enabled/originate-coa
Tue Oct 31 20:29:52 2023 : Debug: main {
Tue Oct 31 20:29:52 2023 : Debug: security {
Tue Oct 31 20:29:52 2023 : Debug: user = "freerad"
Tue Oct 31 20:29:52 2023 : Debug: group = "freerad"
Tue Oct 31 20:29:52 2023 : Debug: allow_core_dumps = no
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[536]: The item 'max_attributes' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[553]: The item 'reject_delay' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[573]: The item 'status_server' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: name = "freeradius"
Tue Oct 31 20:29:52 2023 : Debug: prefix = "/usr"
Tue Oct 31 20:29:52 2023 : Debug: localstatedir = "/var"
Tue Oct 31 20:29:52 2023 : Debug: logdir = "/var/log/freeradius"
Tue Oct 31 20:29:52 2023 : Debug: run_dir = "/var/run/freeradius"
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[85]: The item 'sysconfdir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[97]: The item 'confdir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[104]: The item 'db_dir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[138]: The item 'libdir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[149]: The item 'pidfile' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[203]: The item 'max_request_time' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[222]: The item 'cleanup_delay' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[259]: The item 'hostname_lookups' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[392]: The item 'checkrad' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[594]: The item 'proxy_requests' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: main {
Tue Oct 31 20:29:52 2023 : Debug: name = "freeradius"
Tue Oct 31 20:29:52 2023 : Debug: prefix = "/usr"
Tue Oct 31 20:29:52 2023 : Debug: localstatedir = "/var"
Tue Oct 31 20:29:52 2023 : Debug: sbindir = "/usr/sbin"
Tue Oct 31 20:29:52 2023 : Debug: logdir = "/var/log/freeradius"
Tue Oct 31 20:29:52 2023 : Debug: run_dir = "/var/run/freeradius"
Tue Oct 31 20:29:52 2023 : Debug: libdir = "/usr/lib/freeradius"
Tue Oct 31 20:29:52 2023 : Debug: radacctdir = "/var/log/freeradius/radacct"
Tue Oct 31 20:29:52 2023 : Debug: hostname_lookups = no
Tue Oct 31 20:29:52 2023 : Debug: max_request_time = 30
Tue Oct 31 20:29:52 2023 : Debug: cleanup_delay = 5
Tue Oct 31 20:29:52 2023 : Debug: max_requests = 16384
Tue Oct 31 20:29:52 2023 : Debug: postauth_client_lost = no
Tue Oct 31 20:29:52 2023 : Debug: pidfile = "/var/run/freeradius/freeradius.pid"
Tue Oct 31 20:29:52 2023 : Debug: checkrad = "/usr/sbin/checkrad"
Tue Oct 31 20:29:52 2023 : Debug: debug_level = 0
Tue Oct 31 20:29:52 2023 : Debug: proxy_requests = yes
Tue Oct 31 20:29:52 2023 : Debug: log {
Tue Oct 31 20:29:52 2023 : Debug: stripped_names = no
Tue Oct 31 20:29:52 2023 : Debug: auth = no
Tue Oct 31 20:29:52 2023 : Debug: auth_badpass = no
Tue Oct 31 20:29:52 2023 : Debug: auth_goodpass = no
Tue Oct 31 20:29:52 2023 : Debug: colourise = yes
Tue Oct 31 20:29:52 2023 : Debug: msg_denied = "You are already logged in - access denied"
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[288]: The item 'destination' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[305]: The item 'file' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[313]: The item 'syslog_facility' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: resources {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: security {
Tue Oct 31 20:29:52 2023 : Debug: max_attributes = 200
Tue Oct 31 20:29:52 2023 : Debug: reject_delay = 1.000000
Tue Oct 31 20:29:52 2023 : Debug: status_server = yes
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[85]: The item 'sysconfdir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[97]: The item 'confdir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/radiusd.conf[104]: The item 'db_dir' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: radiusd: #### Loading Realms and Home Servers ####
Tue Oct 31 20:29:52 2023 : Debug: proxy server {
Tue Oct 31 20:29:52 2023 : Debug: retry_delay = 5
Tue Oct 31 20:29:52 2023 : Debug: retry_count = 3
Tue Oct 31 20:29:52 2023 : Debug: default_fallback = no
Tue Oct 31 20:29:52 2023 : Debug: dead_time = 120
Tue Oct 31 20:29:52 2023 : Debug: wake_all_if_all_dead = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: home_server localhost {
Tue Oct 31 20:29:52 2023 : Debug: nonblock = no
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 127.0.0.1
Tue Oct 31 20:29:52 2023 : Debug: port = 1812
Tue Oct 31 20:29:52 2023 : Debug: type = "auth"
Tue Oct 31 20:29:52 2023 : Debug: secret = "testing123"
Tue Oct 31 20:29:52 2023 : Debug: response_window = 20.000000
Tue Oct 31 20:29:52 2023 : Debug: response_timeouts = 1
Tue Oct 31 20:29:52 2023 : Debug: max_outstanding = 65536
Tue Oct 31 20:29:52 2023 : Debug: zombie_period = 40
Tue Oct 31 20:29:52 2023 : Debug: status_check = "status-server"
Tue Oct 31 20:29:52 2023 : Debug: ping_interval = 30
Tue Oct 31 20:29:52 2023 : Debug: check_interval = 30
Tue Oct 31 20:29:52 2023 : Debug: check_timeout = 4
Tue Oct 31 20:29:52 2023 : Debug: num_answers_to_alive = 3
Tue Oct 31 20:29:52 2023 : Debug: revive_interval = 120
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: max_requests = 0
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 0
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: coa {
Tue Oct 31 20:29:52 2023 : Debug: irt = 2
Tue Oct 31 20:29:52 2023 : Debug: mrt = 16
Tue Oct 31 20:29:52 2023 : Debug: mrc = 5
Tue Oct 31 20:29:52 2023 : Debug: mrd = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: recv_coa {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: home_server example-coa {
Tue Oct 31 20:29:52 2023 : Debug: nonblock = no
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 192.168.2.224
Tue Oct 31 20:29:52 2023 : Debug: port = 3799
Tue Oct 31 20:29:52 2023 : Debug: type = "coa"
Tue Oct 31 20:29:52 2023 : Debug: secret = "zppPW2nQJZqGCw4J"
Tue Oct 31 20:29:52 2023 : Debug: response_window = 30.000000
Tue Oct 31 20:29:52 2023 : Debug: response_timeouts = 1
Tue Oct 31 20:29:52 2023 : Debug: max_outstanding = 65536
Tue Oct 31 20:29:52 2023 : Debug: zombie_period = 40
Tue Oct 31 20:29:52 2023 : Debug: status_check = "none"
Tue Oct 31 20:29:52 2023 : Debug: ping_interval = 30
Tue Oct 31 20:29:52 2023 : Debug: check_timeout = 4
Tue Oct 31 20:29:52 2023 : Debug: num_answers_to_alive = 3
Tue Oct 31 20:29:52 2023 : Debug: revive_interval = 300
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: max_requests = 0
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 0
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: coa {
Tue Oct 31 20:29:52 2023 : Debug: irt = 2
Tue Oct 31 20:29:52 2023 : Debug: mrt = 16
Tue Oct 31 20:29:52 2023 : Debug: mrc = 5
Tue Oct 31 20:29:52 2023 : Debug: mrd = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: recv_coa {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: home_server_pool my_auth_failover {
Tue Oct 31 20:29:52 2023 : Debug: type = fail-over
Tue Oct 31 20:29:52 2023 : Debug: home_server = localhost
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: realm example.com {
Tue Oct 31 20:29:52 2023 : Debug: auth_pool = my_auth_failover
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: realm LOCAL {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: home_server_pool coa {
Tue Oct 31 20:29:52 2023 : Debug: type = fail-over
Tue Oct 31 20:29:52 2023 : Debug: virtual_server = originate-coa.example.com
Tue Oct 31 20:29:52 2023 : Debug: home_server = example-coa
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: radiusd: #### Loading Clients ####
Tue Oct 31 20:29:52 2023 : Debug: client 192.168.2.227 {
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 192.168.2.227
Tue Oct 31 20:29:52 2023 : Debug: require_message_authenticator = no
Tue Oct 31 20:29:52 2023 : Debug: secret = "testing123"
Tue Oct 31 20:29:52 2023 : Debug: nas_type = "other"
Tue Oct 31 20:29:52 2023 : Debug: proto = "*"
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Adding client 192.168.2.227/32 (192.168.2.227) to prefix tree 32
Tue Oct 31 20:29:52 2023 : Debug: client 192.168.2.157 {
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 192.168.2.157
Tue Oct 31 20:29:52 2023 : Debug: require_message_authenticator = no
Tue Oct 31 20:29:52 2023 : Debug: secret = "testing123"
Tue Oct 31 20:29:52 2023 : Debug: nas_type = "other"
Tue Oct 31 20:29:52 2023 : Debug: proto = "*"
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Adding client 192.168.2.157/32 (192.168.2.157) to prefix tree 32
Tue Oct 31 20:29:52 2023 : Debug: client 192.168.2.224 {
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 192.168.2.224
Tue Oct 31 20:29:52 2023 : Debug: require_message_authenticator = no
Tue Oct 31 20:29:52 2023 : Debug: secret = "zppPW2nQJZqGCw4J"
Tue Oct 31 20:29:52 2023 : Debug: nas_type = "other"
Tue Oct 31 20:29:52 2023 : Debug: proto = "*"
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/clients.conf[53]: The item 'coa_server' is defined, but is unused by the configuration
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Adding client 192.168.2.224/32 (192.168.2.224) to prefix tree 32
Tue Oct 31 20:29:52 2023 : Debug: client localhost {
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 127.0.0.1
Tue Oct 31 20:29:52 2023 : Debug: require_message_authenticator = no
Tue Oct 31 20:29:52 2023 : Debug: secret = "testing123"
Tue Oct 31 20:29:52 2023 : Debug: nas_type = "other"
Tue Oct 31 20:29:52 2023 : Debug: proto = "*"
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Adding client 127.0.0.1/32 (127.0.0.1) to prefix tree 32
Tue Oct 31 20:29:52 2023 : Info: Debug state unknown (cap_sys_ptrace capability not set)
Tue Oct 31 20:29:52 2023 : Info: systemd watchdog is disabled
Tue Oct 31 20:29:52 2023 : Debug: # Creating Auth-Type = mschap
Tue Oct 31 20:29:52 2023 : Debug: # Creating Auth-Type = digest
Tue Oct 31 20:29:52 2023 : Debug: # Creating Auth-Type = eap
Tue Oct 31 20:29:52 2023 : Debug: # Creating Auth-Type = PAP
Tue Oct 31 20:29:52 2023 : Debug: # Creating Auth-Type = CHAP
Tue Oct 31 20:29:52 2023 : Debug: # Creating Auth-Type = MS-CHAP
Tue Oct 31 20:29:52 2023 : Debug: # Creating Autz-Type = New-TLS-Connection
Tue Oct 31 20:29:52 2023 : Debug: radiusd: #### Instantiating modules ####
Tue Oct 31 20:29:52 2023 : Debug: modules {
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_preprocess with path: /usr/lib/freeradius/rlm_preprocess.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_preprocess, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_preprocess
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "preprocess" from file /etc/freeradius/mods-enabled/preprocess
Tue Oct 31 20:29:52 2023 : Debug: preprocess {
Tue Oct 31 20:29:52 2023 : Debug: huntgroups = "/etc/freeradius/mods-config/preprocess/huntgroups"
Tue Oct 31 20:29:52 2023 : Debug: hints = "/etc/freeradius/mods-config/preprocess/hints"
Tue Oct 31 20:29:52 2023 : Debug: with_ascend_hack = no
Tue Oct 31 20:29:52 2023 : Debug: ascend_channels_per_line = 23
Tue Oct 31 20:29:52 2023 : Debug: with_ntdomain_hack = no
Tue Oct 31 20:29:52 2023 : Debug: with_specialix_jetstream_hack = no
Tue Oct 31 20:29:52 2023 : Debug: with_cisco_vsa_hack = no
Tue Oct 31 20:29:52 2023 : Debug: with_alvarion_vsa_hack = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_always with path: /usr/lib/freeradius/rlm_always.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_always, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_always
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "reject" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always reject {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "reject"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "fail" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always fail {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "fail"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "ok" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always ok {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "ok"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "handled" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always handled {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "handled"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "invalid" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always invalid {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "invalid"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "userlock" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always userlock {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "userlock"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "notfound" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always notfound {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "notfound"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "noop" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always noop {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "noop"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "updated" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: always updated {
Tue Oct 31 20:29:52 2023 : Debug: rcode = "updated"
Tue Oct 31 20:29:52 2023 : Debug: simulcount = 0
Tue Oct 31 20:29:52 2023 : Debug: mpp = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_exec with path: /usr/lib/freeradius/rlm_exec.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_exec, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_exec
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "ntlm_auth" from file /etc/freeradius/mods-enabled/ntlm_auth
Tue Oct 31 20:29:52 2023 : Debug: exec ntlm_auth {
Tue Oct 31 20:29:52 2023 : Debug: wait = yes
Tue Oct 31 20:29:52 2023 : Debug: program = "/path/to/ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password}"
Tue Oct 31 20:29:52 2023 : Debug: shell_escape = yes
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_mschap with path: /usr/lib/freeradius/rlm_mschap.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_mschap, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_mschap
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "mschap" from file /etc/freeradius/mods-enabled/mschap
Tue Oct 31 20:29:52 2023 : Debug: mschap {
Tue Oct 31 20:29:52 2023 : Debug: use_mppe = yes
Tue Oct 31 20:29:52 2023 : Debug: require_encryption = no
Tue Oct 31 20:29:52 2023 : Debug: require_strong = no
Tue Oct 31 20:29:52 2023 : Debug: with_ntdomain_hack = yes
Tue Oct 31 20:29:52 2023 : Debug: passchange {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: allow_retry = yes
Tue Oct 31 20:29:52 2023 : Debug: winbind_retry_with_normalised_username = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap with path: /usr/lib/freeradius/rlm_eap.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_eap, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_eap
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "eap" from file /etc/freeradius/mods-enabled/eap
Tue Oct 31 20:29:52 2023 : Debug: eap {
Tue Oct 31 20:29:52 2023 : Debug: default_eap_type = "md5"
Tue Oct 31 20:29:52 2023 : Debug: timer_expire = 60
Tue Oct 31 20:29:52 2023 : Debug: max_eap_type = 52
Tue Oct 31 20:29:52 2023 : Debug: ignore_unknown_eap_types = no
Tue Oct 31 20:29:52 2023 : Debug: cisco_accounting_username_bug = no
Tue Oct 31 20:29:52 2023 : Debug: max_sessions = 16384
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_digest with path: /usr/lib/freeradius/rlm_digest.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_digest, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_digest
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "digest" from file /etc/freeradius/mods-enabled/digest
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_pap with path: /usr/lib/freeradius/rlm_pap.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_pap, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_pap
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "pap" from file /etc/freeradius/mods-enabled/pap
Tue Oct 31 20:29:52 2023 : Debug: pap {
Tue Oct 31 20:29:52 2023 : Debug: normalise = yes
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "exec" from file /etc/freeradius/mods-enabled/exec
Tue Oct 31 20:29:52 2023 : Debug: exec {
Tue Oct 31 20:29:52 2023 : Debug: wait = no
Tue Oct 31 20:29:52 2023 : Debug: input_pairs = "request"
Tue Oct 31 20:29:52 2023 : Debug: shell_escape = yes
Tue Oct 31 20:29:52 2023 : Debug: timeout = 10
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_logintime with path: /usr/lib/freeradius/rlm_logintime.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_logintime, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_logintime
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "logintime" from file /etc/freeradius/mods-enabled/logintime
Tue Oct 31 20:29:52 2023 : Debug: logintime {
Tue Oct 31 20:29:52 2023 : Debug: minimum_timeout = 60
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_dynamic_clients with path: /usr/lib/freeradius/rlm_dynamic_clients.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_dynamic_clients, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_dynamic_clients
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "dynamic_clients" from file /etc/freeradius/mods-enabled/dynamic_clients
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_passwd with path: /usr/lib/freeradius/rlm_passwd.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_passwd, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_passwd
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "etc_passwd" from file /etc/freeradius/mods-enabled/passwd
Tue Oct 31 20:29:52 2023 : Debug: passwd etc_passwd {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/passwd"
Tue Oct 31 20:29:52 2023 : Debug: format = "*User-Name:Crypt-Password:"
Tue Oct 31 20:29:52 2023 : Debug: delimiter = ":"
Tue Oct 31 20:29:52 2023 : Debug: ignore_nislike = no
Tue Oct 31 20:29:52 2023 : Debug: ignore_empty = yes
Tue Oct 31 20:29:52 2023 : Debug: allow_multiple_keys = no
Tue Oct 31 20:29:52 2023 : Debug: hash_size = 100
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_detail with path: /usr/lib/freeradius/rlm_detail.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_detail, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_detail
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "detail" from file /etc/freeradius/mods-enabled/detail
Tue Oct 31 20:29:52 2023 : Debug: detail {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
Tue Oct 31 20:29:52 2023 : Debug: header = "%t"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: locking = no
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: log_packet_header = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "auth_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: detail auth_log {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
Tue Oct 31 20:29:52 2023 : Debug: header = "%t"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: locking = no
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: log_packet_header = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "reply_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: detail reply_log {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
Tue Oct 31 20:29:52 2023 : Debug: header = "%t"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: locking = no
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: log_packet_header = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "pre_proxy_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: detail pre_proxy_log {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
Tue Oct 31 20:29:52 2023 : Debug: header = "%t"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: locking = no
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: log_packet_header = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "post_proxy_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: detail post_proxy_log {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
Tue Oct 31 20:29:52 2023 : Debug: header = "%t"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: locking = no
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: log_packet_header = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_expiration with path: /usr/lib/freeradius/rlm_expiration.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_expiration, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_expiration
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "expiration" from file /etc/freeradius/mods-enabled/expiration
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_utf8 with path: /usr/lib/freeradius/rlm_utf8.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_utf8, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_utf8
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "utf8" from file /etc/freeradius/mods-enabled/utf8
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_unpack with path: /usr/lib/freeradius/rlm_unpack.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_unpack, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_unpack
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "unpack" from file /etc/freeradius/mods-enabled/unpack
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_replicate with path: /usr/lib/freeradius/rlm_replicate.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_replicate, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_replicate
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "replicate" from file /etc/freeradius/mods-enabled/replicate
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_radutmp with path: /usr/lib/freeradius/rlm_radutmp.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_radutmp, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_radutmp
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "radutmp" from file /etc/freeradius/mods-enabled/radutmp
Tue Oct 31 20:29:52 2023 : Debug: radutmp {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/radutmp"
Tue Oct 31 20:29:52 2023 : Debug: username = "%{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: case_sensitive = yes
Tue Oct 31 20:29:52 2023 : Debug: check_with_nas = yes
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: caller_id = yes
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_unix with path: /usr/lib/freeradius/rlm_unix.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_unix, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_unix
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "unix" from file /etc/freeradius/mods-enabled/unix
Tue Oct 31 20:29:52 2023 : Debug: unix {
Tue Oct 31 20:29:52 2023 : Debug: radwtmp = "/var/log/freeradius/radwtmp"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Creating attribute Unix-Group
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_expr with path: /usr/lib/freeradius/rlm_expr.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_expr, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_expr
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "expr" from file /etc/freeradius/mods-enabled/expr
Tue Oct 31 20:29:52 2023 : Debug: expr {
Tue Oct 31 20:29:52 2023 : Debug: safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "echo" from file /etc/freeradius/mods-enabled/echo
Tue Oct 31 20:29:52 2023 : Debug: exec echo {
Tue Oct 31 20:29:52 2023 : Debug: wait = yes
Tue Oct 31 20:29:52 2023 : Debug: program = "/bin/echo %{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: input_pairs = "request"
Tue Oct 31 20:29:52 2023 : Debug: output_pairs = "reply"
Tue Oct 31 20:29:52 2023 : Debug: shell_escape = yes
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_realm with path: /usr/lib/freeradius/rlm_realm.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_realm, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_realm
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "IPASS" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: realm IPASS {
Tue Oct 31 20:29:52 2023 : Debug: format = "prefix"
Tue Oct 31 20:29:52 2023 : Debug: delimiter = "/"
Tue Oct 31 20:29:52 2023 : Debug: ignore_default = no
Tue Oct 31 20:29:52 2023 : Debug: ignore_null = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "suffix" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: realm suffix {
Tue Oct 31 20:29:52 2023 : Debug: format = "suffix"
Tue Oct 31 20:29:52 2023 : Debug: delimiter = "@"
Tue Oct 31 20:29:52 2023 : Debug: ignore_default = no
Tue Oct 31 20:29:52 2023 : Debug: ignore_null = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "bangpath" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: realm bangpath {
Tue Oct 31 20:29:52 2023 : Debug: format = "prefix"
Tue Oct 31 20:29:52 2023 : Debug: delimiter = "!"
Tue Oct 31 20:29:52 2023 : Debug: ignore_default = no
Tue Oct 31 20:29:52 2023 : Debug: ignore_null = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "realmpercent" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: realm realmpercent {
Tue Oct 31 20:29:52 2023 : Debug: format = "suffix"
Tue Oct 31 20:29:52 2023 : Debug: delimiter = "%"
Tue Oct 31 20:29:52 2023 : Debug: ignore_default = no
Tue Oct 31 20:29:52 2023 : Debug: ignore_null = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "ntdomain" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: realm ntdomain {
Tue Oct 31 20:29:52 2023 : Debug: format = "prefix"
Tue Oct 31 20:29:52 2023 : Debug: delimiter = "\\"
Tue Oct 31 20:29:52 2023 : Debug: ignore_default = no
Tue Oct 31 20:29:52 2023 : Debug: ignore_null = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_linelog with path: /usr/lib/freeradius/rlm_linelog.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_linelog, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_linelog
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "linelog" from file /etc/freeradius/mods-enabled/linelog
Tue Oct 31 20:29:52 2023 : Debug: linelog {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/linelog"
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: syslog_severity = "info"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: format = "This is a log message for %{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: reference = "messages.%{%{reply:Packet-Type}:-default}"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "log_accounting" from file /etc/freeradius/mods-enabled/linelog
Tue Oct 31 20:29:52 2023 : Debug: linelog log_accounting {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/linelog-accounting"
Tue Oct 31 20:29:52 2023 : Debug: escape_filenames = no
Tue Oct 31 20:29:52 2023 : Debug: syslog_severity = "info"
Tue Oct 31 20:29:52 2023 : Debug: permissions = 384
Tue Oct 31 20:29:52 2023 : Debug: format = ""
Tue Oct 31 20:29:52 2023 : Debug: reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_totp with path: /usr/lib/freeradius/rlm_totp.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_totp, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_totp
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "totp" from file /etc/freeradius/mods-enabled/totp
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "sradutmp" from file /etc/freeradius/mods-enabled/sradutmp
Tue Oct 31 20:29:52 2023 : Debug: radutmp sradutmp {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/var/log/freeradius/sradutmp"
Tue Oct 31 20:29:52 2023 : Debug: username = "%{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: case_sensitive = yes
Tue Oct 31 20:29:52 2023 : Debug: check_with_nas = yes
Tue Oct 31 20:29:52 2023 : Debug: permissions = 420
Tue Oct 31 20:29:52 2023 : Debug: caller_id = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_files with path: /usr/lib/freeradius/rlm_files.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_files, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_files
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "files" from file /etc/freeradius/mods-enabled/files
Tue Oct 31 20:29:52 2023 : Debug: files {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/files/authorize"
Tue Oct 31 20:29:52 2023 : Debug: acctusersfile = "/etc/freeradius/mods-config/files/accounting"
Tue Oct 31 20:29:52 2023 : Debug: preproxy_usersfile = "/etc/freeradius/mods-config/files/pre-proxy"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_chap with path: /usr/lib/freeradius/rlm_chap.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_chap, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_chap
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "chap" from file /etc/freeradius/mods-enabled/chap
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_attr_filter with path: /usr/lib/freeradius/rlm_attr_filter.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_attr_filter, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_attr_filter
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "attr_filter.post-proxy" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: attr_filter attr_filter.post-proxy {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/post-proxy"
Tue Oct 31 20:29:52 2023 : Debug: key = "%{Realm}"
Tue Oct 31 20:29:52 2023 : Debug: relaxed = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "attr_filter.pre-proxy" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: attr_filter attr_filter.pre-proxy {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/pre-proxy"
Tue Oct 31 20:29:52 2023 : Debug: key = "%{Realm}"
Tue Oct 31 20:29:52 2023 : Debug: relaxed = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "attr_filter.access_reject" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: attr_filter attr_filter.access_reject {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/access_reject"
Tue Oct 31 20:29:52 2023 : Debug: key = "%{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: relaxed = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "attr_filter.access_challenge" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: attr_filter attr_filter.access_challenge {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/access_challenge"
Tue Oct 31 20:29:52 2023 : Debug: key = "%{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: relaxed = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "attr_filter.accounting_response" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: attr_filter attr_filter.accounting_response {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/accounting_response"
Tue Oct 31 20:29:52 2023 : Debug: key = "%{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: relaxed = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "attr_filter.coa" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: attr_filter attr_filter.coa {
Tue Oct 31 20:29:52 2023 : Debug: filename = "/etc/freeradius/mods-config/attr_filter/coa"
Tue Oct 31 20:29:52 2023 : Debug: key = "%{User-Name}"
Tue Oct 31 20:29:52 2023 : Debug: relaxed = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_soh with path: /usr/lib/freeradius/rlm_soh.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_soh, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_soh
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "soh" from file /etc/freeradius/mods-enabled/soh
Tue Oct 31 20:29:52 2023 : Debug: soh {
Tue Oct 31 20:29:52 2023 : Debug: dhcp = yes
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_date with path: /usr/lib/freeradius/rlm_date.so
Tue Oct 31 20:29:52 2023 : Debug: Loaded rlm_date, checking if it's valid
Tue Oct 31 20:29:52 2023 : Debug: # Loaded module rlm_date
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "date" from file /etc/freeradius/mods-enabled/date
Tue Oct 31 20:29:52 2023 : Debug: date {
Tue Oct 31 20:29:52 2023 : Debug: format = "%b %e %Y %H:%M:%S %Z"
Tue Oct 31 20:29:52 2023 : Debug: utc = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Loading module "wispr2date" from file /etc/freeradius/mods-enabled/date
Tue Oct 31 20:29:52 2023 : Debug: date wispr2date {
Tue Oct 31 20:29:52 2023 : Debug: format = "%Y-%m-%dT%H:%M:%S"
Tue Oct 31 20:29:52 2023 : Debug: utc = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: instantiate {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "preprocess" from file /etc/freeradius/mods-enabled/preprocess
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/preprocess/huntgroups
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/preprocess/hints
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "reject" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "fail" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "ok" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "handled" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "invalid" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "userlock" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "notfound" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "noop" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "updated" from file /etc/freeradius/mods-enabled/always
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "mschap" from file /etc/freeradius/mods-enabled/mschap
Tue Oct 31 20:29:52 2023 : Debug: rlm_mschap (mschap): using internal authentication
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "eap" from file /etc/freeradius/mods-enabled/eap
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap_md5 with path: /usr/lib/freeradius/rlm_eap_md5.so
Tue Oct 31 20:29:52 2023 : Debug: # Linked to sub-module rlm_eap_md5
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap_gtc with path: /usr/lib/freeradius/rlm_eap_gtc.so
Tue Oct 31 20:29:52 2023 : Debug: # Linked to sub-module rlm_eap_gtc
Tue Oct 31 20:29:52 2023 : Debug: gtc {
Tue Oct 31 20:29:52 2023 : Debug: challenge = "Password: "
Tue Oct 31 20:29:52 2023 : Debug: auth_type = "PAP"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap_tls with path: /usr/lib/freeradius/rlm_eap_tls.so
Tue Oct 31 20:29:52 2023 : Debug: # Linked to sub-module rlm_eap_tls
Tue Oct 31 20:29:52 2023 : Debug: tls {
Tue Oct 31 20:29:52 2023 : Debug: tls = "tls-common"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: tls-config tls-common {
Tue Oct 31 20:29:52 2023 : Debug: verify_depth = 0
Tue Oct 31 20:29:52 2023 : Debug: ca_path = "/etc/freeradius/certs"
Tue Oct 31 20:29:52 2023 : Debug: pem_file_type = yes
Tue Oct 31 20:29:52 2023 : Debug: private_key_file = "/etc/freeradius/certs/server.pem"
Tue Oct 31 20:29:52 2023 : Debug: certificate_file = "/etc/freeradius/certs/server.pem"
Tue Oct 31 20:29:52 2023 : Debug: ca_file = "/etc/freeradius/certs/ca.pem"
Tue Oct 31 20:29:52 2023 : Debug: private_key_password = "whatever"
Tue Oct 31 20:29:52 2023 : Debug: fragment_size = 1024
Tue Oct 31 20:29:52 2023 : Debug: include_length = yes
Tue Oct 31 20:29:52 2023 : Debug: auto_chain = yes
Tue Oct 31 20:29:52 2023 : Debug: check_crl = no
Tue Oct 31 20:29:52 2023 : Debug: check_all_crl = no
Tue Oct 31 20:29:52 2023 : Debug: ca_path_reload_interval = 0
Tue Oct 31 20:29:52 2023 : Debug: cipher_list = "DEFAULT"
Tue Oct 31 20:29:52 2023 : Debug: cipher_server_preference = no
Tue Oct 31 20:29:52 2023 : Debug: reject_unknown_intermediate_ca = no
Tue Oct 31 20:29:52 2023 : Debug: ecdh_curve = ""
Tue Oct 31 20:29:52 2023 : Debug: tls_max_version = "1.2"
Tue Oct 31 20:29:52 2023 : Debug: tls_min_version = "1.2"
Tue Oct 31 20:29:52 2023 : Debug: cache {
Tue Oct 31 20:29:52 2023 : Debug: enable = no
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 24
Tue Oct 31 20:29:52 2023 : Debug: max_entries = 255
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: verify {
Tue Oct 31 20:29:52 2023 : Debug: skip_if_ocsp_ok = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: ocsp {
Tue Oct 31 20:29:52 2023 : Debug: enable = no
Tue Oct 31 20:29:52 2023 : Debug: override_cert_url = yes
Tue Oct 31 20:29:52 2023 : Debug: url = "http://127.0.0.1/ocsp/"
Tue Oct 31 20:29:52 2023 : Debug: use_nonce = yes
Tue Oct 31 20:29:52 2023 : Debug: timeout = 0
Tue Oct 31 20:29:52 2023 : Debug: softfail = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap_ttls with path: /usr/lib/freeradius/rlm_eap_ttls.so
Tue Oct 31 20:29:52 2023 : Debug: # Linked to sub-module rlm_eap_ttls
Tue Oct 31 20:29:52 2023 : Debug: ttls {
Tue Oct 31 20:29:52 2023 : Debug: tls = "tls-common"
Tue Oct 31 20:29:52 2023 : Debug: default_eap_type = "md5"
Tue Oct 31 20:29:52 2023 : Debug: copy_request_to_tunnel = no
Tue Oct 31 20:29:52 2023 : Debug: use_tunneled_reply = no
Tue Oct 31 20:29:52 2023 : Debug: virtual_server = "inner-tunnel"
Tue Oct 31 20:29:52 2023 : Debug: include_length = yes
Tue Oct 31 20:29:52 2023 : Debug: require_client_cert = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: tls: Using cached TLS configuration from previous invocation
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap_peap with path: /usr/lib/freeradius/rlm_eap_peap.so
Tue Oct 31 20:29:52 2023 : Debug: # Linked to sub-module rlm_eap_peap
Tue Oct 31 20:29:52 2023 : Debug: peap {
Tue Oct 31 20:29:52 2023 : Debug: tls = "tls-common"
Tue Oct 31 20:29:52 2023 : Debug: default_eap_type = "mschapv2"
Tue Oct 31 20:29:52 2023 : Debug: copy_request_to_tunnel = no
Tue Oct 31 20:29:52 2023 : Debug: use_tunneled_reply = no
Tue Oct 31 20:29:52 2023 : Debug: proxy_tunneled_request_as_eap = yes
Tue Oct 31 20:29:52 2023 : Debug: virtual_server = "inner-tunnel"
Tue Oct 31 20:29:52 2023 : Debug: soh = no
Tue Oct 31 20:29:52 2023 : Debug: require_client_cert = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: tls: Using cached TLS configuration from previous invocation
Tue Oct 31 20:29:52 2023 : Debug: Loading rlm_eap_mschapv2 with path: /usr/lib/freeradius/rlm_eap_mschapv2.so
Tue Oct 31 20:29:52 2023 : Debug: # Linked to sub-module rlm_eap_mschapv2
Tue Oct 31 20:29:52 2023 : Debug: mschapv2 {
Tue Oct 31 20:29:52 2023 : Debug: with_ntdomain_hack = no
Tue Oct 31 20:29:52 2023 : Debug: send_error = no
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "pap" from file /etc/freeradius/mods-enabled/pap
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "logintime" from file /etc/freeradius/mods-enabled/logintime
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "etc_passwd" from file /etc/freeradius/mods-enabled/passwd
Tue Oct 31 20:29:52 2023 : Debug: rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "detail" from file /etc/freeradius/mods-enabled/detail
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "auth_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "reply_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "pre_proxy_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "post_proxy_log" from file /etc/freeradius/mods-enabled/detail.log
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "expiration" from file /etc/freeradius/mods-enabled/expiration
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "IPASS" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "suffix" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "bangpath" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "realmpercent" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "ntdomain" from file /etc/freeradius/mods-enabled/realm
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "linelog" from file /etc/freeradius/mods-enabled/linelog
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "log_accounting" from file /etc/freeradius/mods-enabled/linelog
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "files" from file /etc/freeradius/mods-enabled/files
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/files/authorize
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/files/accounting
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/files/pre-proxy
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "attr_filter.post-proxy" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/post-proxy
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "attr_filter.pre-proxy" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/pre-proxy
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "attr_filter.access_reject" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/access_reject
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "attr_filter.access_challenge" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/access_challenge
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "attr_filter.accounting_response" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/accounting_response
Tue Oct 31 20:29:52 2023 : Debug: # Instantiating module "attr_filter.coa" from file /etc/freeradius/mods-enabled/attr_filter
Tue Oct 31 20:29:52 2023 : Debug: reading pairlist file /etc/freeradius/mods-config/attr_filter/coa
Tue Oct 31 20:29:52 2023 : Debug: } # modules
Tue Oct 31 20:29:52 2023 : Debug: radiusd: #### Loading Virtual Servers ####
Tue Oct 31 20:29:52 2023 : Debug: server { # from file /etc/freeradius/radiusd.conf
Tue Oct 31 20:29:52 2023 : Debug: } # server
Tue Oct 31 20:29:52 2023 : Debug: server default { # from file /etc/freeradius/sites-enabled/default
Tue Oct 31 20:29:52 2023 : Debug: authenticate {
Tue Oct 31 20:29:52 2023 : Debug: Compiling Auth-Type PAP for attr Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: pap
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Auth-Type CHAP for attr Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: chap
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Auth-Type MS-CHAP for attr Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: mschap
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: mschap
Tue Oct 31 20:29:52 2023 : Debug: digest
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: } # authenticate
Tue Oct 31 20:29:52 2023 : Debug: authorize {
Tue Oct 31 20:29:52 2023 : Debug: policy filter_username {
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name) {
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ / /) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /@[^@]*@/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /\.\./) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /\.$/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /@\./) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: preprocess
Tue Oct 31 20:29:52 2023 : Debug: chap
Tue Oct 31 20:29:52 2023 : Debug: mschap
Tue Oct 31 20:29:52 2023 : Debug: digest
Tue Oct 31 20:29:52 2023 : Debug: suffix
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: files
Tue Oct 31 20:29:52 2023 : Warning: Ignoring "sql" (see raddb/mods-available/README.rst)
Tue Oct 31 20:29:52 2023 : Warning: Ignoring "ldap" (see raddb/mods-available/README.rst)
Tue Oct 31 20:29:52 2023 : Debug: expiration
Tue Oct 31 20:29:52 2023 : Debug: logintime
Tue Oct 31 20:29:52 2023 : Debug: pap
Tue Oct 31 20:29:52 2023 : Debug: Compiling Autz-Type New-TLS-Connection for attr Autz-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: } # authorize
Tue Oct 31 20:29:52 2023 : Debug: preacct {
Tue Oct 31 20:29:52 2023 : Debug: preprocess
Tue Oct 31 20:29:52 2023 : Debug: policy acct_unique {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Tmp-String-9 := "ai:"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if ("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/ && "%{string:&Class}" =~ /^ai:([0-9a-f]{32})/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Acct-Unique-Session-Id := "%{md5:%{1},%{Acct-Session-ID}}"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: else {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Acct-Unique-Session-Id := "%{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Tmp-String-9 !* ANY
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: suffix
Tue Oct 31 20:29:52 2023 : Debug: files
Tue Oct 31 20:29:52 2023 : Debug: } # preacct
Tue Oct 31 20:29:52 2023 : Debug: accounting {
Tue Oct 31 20:29:52 2023 : Debug: detail
Tue Oct 31 20:29:52 2023 : Debug: unix
Tue Oct 31 20:29:52 2023 : Debug: exec
Tue Oct 31 20:29:52 2023 : Debug: attr_filter.accounting_response
Tue Oct 31 20:29:52 2023 : Debug: } # accounting
Tue Oct 31 20:29:52 2023 : Debug: post-proxy {
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: } # post-proxy
Tue Oct 31 20:29:52 2023 : Debug: post-auth {
Tue Oct 31 20:29:52 2023 : Debug: if (&session-state:User-Name && &reply:User-Name && &User-Name && &reply:User-Name == &User-Name) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &reply:User-Name !* ANY
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &reply:[*] += &session-state:[*]
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: exec
Tue Oct 31 20:29:52 2023 : Debug: policy remove_reply_message_if_eap {
Tue Oct 31 20:29:52 2023 : Debug: if (&reply:EAP-Message && &reply:Reply-Message) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &reply:Reply-Message !* ANY
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: else {
Tue Oct 31 20:29:52 2023 : Debug: noop
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Post-Auth-Type REJECT for attr Post-Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: attr_filter.access_reject
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: policy remove_reply_message_if_eap {
Tue Oct 31 20:29:52 2023 : Debug: if (&reply:EAP-Message && &reply:Reply-Message) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &reply:Reply-Message !* ANY
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: else {
Tue Oct 31 20:29:52 2023 : Debug: noop
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Post-Auth-Type Challenge for attr Post-Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Post-Auth-Type Client-Lost for attr Post-Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&EAP-Key-Name && &reply:EAP-Session-Id) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &reply:EAP-Key-Name := &reply:EAP-Session-Id
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: } # post-auth
Tue Oct 31 20:29:52 2023 : Debug: } # server default
Tue Oct 31 20:29:52 2023 : Debug: server inner-tunnel { # from file /etc/freeradius/sites-enabled/inner-tunnel
Tue Oct 31 20:29:52 2023 : Debug: authenticate {
Tue Oct 31 20:29:52 2023 : Debug: Compiling Auth-Type PAP for attr Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: pap
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Auth-Type CHAP for attr Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: chap
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Auth-Type MS-CHAP for attr Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: mschap
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: mschap
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: } # authenticate
Tue Oct 31 20:29:52 2023 : Debug: authorize {
Tue Oct 31 20:29:52 2023 : Debug: policy filter_username {
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name) {
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ / /) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains whitespace'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /@[^@]*@/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Multiple @ in User-Name'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /\.\./) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: User-Name contains multiple ..s'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /@/ && !&User-Name =~ /@(.+)\.(.+)$/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Realm does not have at least one dot separator'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /\.$/) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Realm ends with a dot'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: if (&User-Name =~ /@\./) {
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &Module-Failure-Message += 'Rejected: Realm begins with a dot'
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: reject
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: chap
Tue Oct 31 20:29:52 2023 : Debug: mschap
Tue Oct 31 20:29:52 2023 : Debug: suffix
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &control:Proxy-To-Realm := LOCAL
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: files
Tue Oct 31 20:29:52 2023 : Debug: expiration
Tue Oct 31 20:29:52 2023 : Debug: logintime
Tue Oct 31 20:29:52 2023 : Debug: pap
Tue Oct 31 20:29:52 2023 : Debug: } # authorize
Tue Oct 31 20:29:52 2023 : Debug: session {
Tue Oct 31 20:29:52 2023 : Debug: radutmp
Tue Oct 31 20:29:52 2023 : Debug: } # session
Tue Oct 31 20:29:52 2023 : Debug: post-proxy {
Tue Oct 31 20:29:52 2023 : Debug: eap
Tue Oct 31 20:29:52 2023 : Debug: } # post-proxy
Tue Oct 31 20:29:52 2023 : Debug: post-auth {
Tue Oct 31 20:29:52 2023 : Info: # Skipping contents of 'if' as it is always 'false' -- /etc/freeradius/sites-enabled/inner-tunnel:366
Tue Oct 31 20:29:52 2023 : Debug: if (false) {
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Post-Auth-Type REJECT for attr Post-Auth-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: attr_filter.access_reject
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &outer.session-state:Module-Failure-Message := &Module-Failure-Message
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: } # post-auth
Tue Oct 31 20:29:52 2023 : Debug: } # server inner-tunnel
Tue Oct 31 20:29:52 2023 : Debug: server coa { # from file /etc/freeradius/sites-enabled/coa
Tue Oct 31 20:29:52 2023 : Debug: recv-coa {
Tue Oct 31 20:29:52 2023 : Debug: suffix
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/sites-enabled/coa[35]: Please change attribute reference to '&Packet-Dst-IP-Address = ...'
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &control:Packet-Dst-IP-Address = "%{NAS-IP-Address}"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: } # recv-coa
Tue Oct 31 20:29:52 2023 : Debug: send-coa {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: } # send-coa
Tue Oct 31 20:29:52 2023 : Debug: } # server coa
Tue Oct 31 20:29:52 2023 : Debug: server originate-coa.example.com { # from file /etc/freeradius/sites-enabled/originate-coa
Tue Oct 31 20:29:52 2023 : Debug: pre-proxy {
Tue Oct 31 20:29:52 2023 : Warning: /etc/freeradius/sites-enabled/originate-coa[140]: Please change attribute reference to '&NAS-IP-Address = ...'
Tue Oct 31 20:29:52 2023 : Debug: update {
Tue Oct 31 20:29:52 2023 : Debug: &proxy-request:NAS-IP-Address = "%{NAS-IP-Address}"
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: } # pre-proxy
Tue Oct 31 20:29:52 2023 : Debug: post-proxy {
Tue Oct 31 20:29:52 2023 : Debug: switch &proxy-reply:Packet-Type {
Tue Oct 31 20:29:52 2023 : Debug: case CoA-ACK {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: case CoA-NAK {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: case Disconnect-ACK {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: case Disconnect-NAK {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: case {
Tue Oct 31 20:29:52 2023 : Debug: fail
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Post-Proxy-Type Fail-CoA for attr Post-Proxy-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Compiling Post-Proxy-Type Fail-Disconnect for attr Post-Proxy-Type
Tue Oct 31 20:29:52 2023 : Debug: group {
Tue Oct 31 20:29:52 2023 : Debug: ok
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: } # post-proxy
Tue Oct 31 20:29:52 2023 : Debug: } # server originate-coa.example.com
Tue Oct 31 20:29:52 2023 : Debug: Created signal pipe. Read end FD 5, write end FD 6
Tue Oct 31 20:29:52 2023 : Debug: radiusd: #### Opening IP addresses and Ports ####
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_coa with path: /usr/lib/freeradius/proto_coa.so
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_coa failed: /usr/lib/freeradius/proto_coa.so: cannot open shared object file: No such file or directory - No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: Loading library using linker search path(s)
Tue Oct 31 20:29:52 2023 : Debug: Defaults : /lib:/usr/lib
Tue Oct 31 20:29:52 2023 : Debug: Failed with error: proto_coa.so: cannot open shared object file: No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: listen {
Tue Oct 31 20:29:52 2023 : Debug: type = "coa"
Tue Oct 31 20:29:52 2023 : Debug: virtual_server = "coa"
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = *
Tue Oct 31 20:29:52 2023 : Debug: port = 3799
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_auth with path: /usr/lib/freeradius/proto_auth.so
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_auth failed: /usr/lib/freeradius/proto_auth.so: cannot open shared object file: No such file or directory - No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: Loading library using linker search path(s)
Tue Oct 31 20:29:52 2023 : Debug: Defaults : /lib:/usr/lib
Tue Oct 31 20:29:52 2023 : Debug: Failed with error: proto_auth.so: cannot open shared object file: No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: listen {
Tue Oct 31 20:29:52 2023 : Debug: type = "auth"
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = *
Tue Oct 31 20:29:52 2023 : Debug: port = 0
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_acct with path: /usr/lib/freeradius/proto_acct.so
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_acct failed: /usr/lib/freeradius/proto_acct.so: cannot open shared object file: No such file or directory - No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: Loading library using linker search path(s)
Tue Oct 31 20:29:52 2023 : Debug: Defaults : /lib:/usr/lib
Tue Oct 31 20:29:52 2023 : Debug: Failed with error: proto_acct.so: cannot open shared object file: No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: listen {
Tue Oct 31 20:29:52 2023 : Debug: type = "acct"
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = *
Tue Oct 31 20:29:52 2023 : Debug: port = 0
Tue Oct 31 20:29:52 2023 : Debug: limit {
Tue Oct 31 20:29:52 2023 : Debug: max_connections = 16
Tue Oct 31 20:29:52 2023 : Debug: lifetime = 0
Tue Oct 31 20:29:52 2023 : Debug: idle_timeout = 30
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_auth with path: /usr/lib/freeradius/proto_auth.so
Tue Oct 31 20:29:52 2023 : Debug: Loading proto_auth failed: /usr/lib/freeradius/proto_auth.so: cannot open shared object file: No such file or directory - No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: Loading library using linker search path(s)
Tue Oct 31 20:29:52 2023 : Debug: Defaults : /lib:/usr/lib
Tue Oct 31 20:29:52 2023 : Debug: Failed with error: proto_auth.so: cannot open shared object file: No such file or directory
Tue Oct 31 20:29:52 2023 : Debug: listen {
Tue Oct 31 20:29:52 2023 : Debug: type = "auth"
Tue Oct 31 20:29:52 2023 : Debug: ipaddr = 127.0.0.1
Tue Oct 31 20:29:52 2023 : Debug: port = 18120
Tue Oct 31 20:29:52 2023 : Debug: }
Tue Oct 31 20:29:52 2023 : Debug: Listening on coa address * port 3799 bound to server coa
Tue Oct 31 20:29:52 2023 : Debug: Listening on auth address * port 1812 bound to server default
Tue Oct 31 20:29:52 2023 : Debug: Listening on acct address * port 1813 bound to server default
Tue Oct 31 20:29:52 2023 : Debug: Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel
Tue Oct 31 20:29:52 2023 : Debug: Opened new proxy socket 'proxy address * port 59745'
Tue Oct 31 20:29:52 2023 : Debug: Listening on proxy address * port 59745
Tue Oct 31 20:29:52 2023 : Info: Ready to process requests
Tue Oct 31 20:30:12 2023 : Debug: (0) Received Disconnect-Request Id 167 from 192.168.2.227:42310 to 192.168.2.157:3799 length 51
Tue Oct 31 20:30:12 2023 : Debug: (0) NAS-IP-Address = 192.168.2.224
Tue Oct 31 20:30:12 2023 : Debug: (0) Calling-Station-Id = "BC:54:51:EF:70:AE"
Tue Oct 31 20:30:12 2023 : Debug: (0) Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Tue Oct 31 20:30:12 2023 : Debug: (0) # Executing section recv-coa from file /etc/freeradius/sites-enabled/coa
Tue Oct 31 20:30:12 2023 : Debug: (0) recv-coa {
Tue Oct 31 20:30:12 2023 : Debug: (0) modsingle[recv-coa]: calling suffix (rlm_realm)
Tue Oct 31 20:30:12 2023 : Debug: (0) modsingle[recv-coa]: returned from suffix (rlm_realm)
Tue Oct 31 20:30:12 2023 : Debug: (0) [suffix] = noop
Tue Oct 31 20:30:12 2023 : Debug: (0) update control {
Tue Oct 31 20:30:12 2023 : Debug: (0) EXPAND %{NAS-IP-Address}
Tue Oct 31 20:30:12 2023 : Debug: (0) --> 192.168.2.224
Tue Oct 31 20:30:12 2023 : Debug: (0) Packet-Dst-IP-Address = 192.168.2.224
Tue Oct 31 20:30:12 2023 : Debug: (0) } # update control = noop
Tue Oct 31 20:30:12 2023 : Debug: (0) modsingle[recv-coa]: calling ok (rlm_always)
Tue Oct 31 20:30:12 2023 : Debug: (0) modsingle[recv-coa]: returned from ok (rlm_always)
Tue Oct 31 20:30:12 2023 : Debug: (0) [ok] = ok
Tue Oct 31 20:30:12 2023 : Debug: (0) } # recv-coa = ok
Tue Oct 31 20:30:12 2023 : Debug: (0) Starting proxy to home server 192.168.2.224 port 3799
Tue Oct 31 20:30:12 2023 : Debug: (0) server coa {
Tue Oct 31 20:30:12 2023 : Debug: (0) Empty pre-proxy section in virtual server "coa". Using default return values.
Tue Oct 31 20:30:12 2023 : Debug: (0) }
Tue Oct 31 20:30:12 2023 : Debug: (0) proxy: Trying to allocate ID (0/2)
Tue Oct 31 20:30:12 2023 : Debug: (0) proxy: request is now in proxy hash
Tue Oct 31 20:30:12 2023 : Debug: (0) proxy: allocating destination 192.168.2.224 port 3799 - Id 207
Tue Oct 31 20:30:12 2023 : Debug: (0) Proxying request to home server 192.168.2.224 port 3799 timeout 30.000000
Tue Oct 31 20:30:12 2023 : Debug: (0) Sent Disconnect-Request Id 207 from 0.0.0.0:59745 to 192.168.2.224:3799 length 56
Tue Oct 31 20:30:12 2023 : Debug: (0) NAS-IP-Address = 192.168.2.224
Tue Oct 31 20:30:12 2023 : Debug: (0) Calling-Station-Id = "BC:54:51:EF:70:AE"
Tue Oct 31 20:30:12 2023 : Debug: (0) Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Tue Oct 31 20:30:12 2023 : Debug: (0) Proxy-State = 0x313637
Tue Oct 31 20:30:12 2023 : Debug: Waking up in 0.3 seconds.
Tue Oct 31 20:30:12 2023 : Proxy: (0) Marking home server 192.168.2.224 port 3799 alive
Tue Oct 31 20:30:12 2023 : Debug: (0) Clearing existing &reply: attributes
Tue Oct 31 20:30:12 2023 : Debug: (0) Received Disconnect-ACK Id 207 from 192.168.2.224:3799 to 192.168.2.157:59745 length 49
Tue Oct 31 20:30:12 2023 : Debug: (0) Proxy-State = 0x313637
Tue Oct 31 20:30:12 2023 : Debug: (0) Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Tue Oct 31 20:30:12 2023 : Debug: (0) Message-Authenticator = 0x8084a9e814fd69b19917b481c59b4f41
Tue Oct 31 20:30:12 2023 : Debug: (0) server coa {
Tue Oct 31 20:30:12 2023 : Debug: (0) Empty post-proxy section in virtual server "coa". Using default return values.
Tue Oct 31 20:30:12 2023 : Debug: (0) }
Tue Oct 31 20:30:12 2023 : Debug: (0) # Executing section send-coa from file /etc/freeradius/sites-enabled/coa
Tue Oct 31 20:30:12 2023 : Debug: (0) send-coa {
Tue Oct 31 20:30:12 2023 : Debug: (0) modsingle[send-coa]: calling ok (rlm_always)
Tue Oct 31 20:30:12 2023 : Debug: (0) modsingle[send-coa]: returned from ok (rlm_always)
Tue Oct 31 20:30:12 2023 : Debug: (0) [ok] = ok
Tue Oct 31 20:30:12 2023 : Debug: (0) } # send-coa = ok
Tue Oct 31 20:30:12 2023 : Debug: (0) Sent Disconnect-ACK Id 167 from 192.168.2.157:3799 to 192.168.2.227:42310 length 44
Tue Oct 31 20:30:12 2023 : Debug: (0) Event-Timestamp = "Oct 31 2023 20:30:12 UTC"
Tue Oct 31 20:30:12 2023 : Debug: (0) Message-Authenticator = 0x8084a9e814fd69b19917b481c59b4f41
Tue Oct 31 20:30:12 2023 : Debug: (0) Finished request
Tue Oct 31 20:30:12 2023 : Debug: Waking up in 4.9 seconds.
Tue Oct 31 20:30:17 2023 : Debug: (0) Cleaning up request packet ID 167 with timestamp +20 due to cleanup_delay was reached
More information about the Freeradius-Users
mailing list