API tools faq
paste
satishcho

freeradius auth fallback log

satishcho
May 7th, 2011
142
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 169.88 KB | None | 0 0
raw download clone embed print report
  1. FreeRADIUS Version 2.1.7, for host mips64-octeon-linux-gnu, built on Apr 29 2011 at 10:04:33
  2. Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
  3. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
  4. PARTICULAR PURPOSE.
  5. You may redistribute copies of FreeRADIUS under the terms of the
  6. GNU General Public License v2.
  7. Starting - reading configuration files ...
  8. including configuration file /etc/raddb/radiusd.conf
  9. including configuration file /etc/raddb/proxy.conf
  10. including configuration file /etc/raddb/aapproxy.conf
  11. including configuration file /etc/raddb/clients.conf
  12. including configuration file /etc/raddb/eap.conf
  13. including dictionary file /etc/raddb/dictionary
  14. main {
  15. prefix = "/usr"
  16. localstatedir = "/var"
  17. logdir = "syslog"
  18. libdir = "/usr/lib/radius"
  19. radacctdir = "/var/radius/radacct"
  20. hostname_lookups = no
  21. max_request_time = 120
  22. cleanup_delay = 10
  23. max_requests = 512
  24. allow_core_dumps = yes
  25. pidfile = "/var/run/radiusd.pid"
  26. checkrad = "/usr/sbin/checkrad"
  27. debug_level = 0
  28. proxy_requests = yes
  29. log {
  30. stripped_names = yes
  31. auth = yes
  32. auth_badpass = no
  33. auth_goodpass = no
  34. }
  35. security {
  36. max_attributes = 200
  37. reject_delay = 0
  38. status_server = no
  39. }
  40. }
  41. radiusd: #### Loading Realms and Home Servers ####
  42. proxy server {
  43. retry_delay = 5
  44. retry_count = 3
  45. default_fallback = yes
  46. dead_time = 120
  47. wake_all_if_all_dead = no
  48. }
  49. radiusd: #### Loading Clients ####
  50. client 127.0.0.1 {
  51. require_message_authenticator = no
  52. secret = "bQEFAwRBkhBnOJefZN0UarGAiYiK0nwzw2y3n7sm89l2nXHzTM+3i60rVoTpMbjh"
  53. shortname = "localhost"
  54. }
  55. radiusd: #### Instantiating modules ####
  56. instantiate {
  57. Module: Linked to module rlm_ldap
  58. Module: Instantiating ldap
  59. ldap {
  60. server = "192.168.1.25"
  61. port = 389
  62. password = "Motorola@123"
  63. identity = "CN=itis-adm,CN=Users,DC=wlan,DC=com"
  64. net_timeout = 2
  65. timeout = 6
  66. timelimit = 6
  67. tls_mode = no
  68. start_tls = no
  69. tls_require_cert = "allow"
  70. basedn = "DC=wlan,DC=com"
  71. filter = "(sAMAccountName=%{Stripped-User-Name})"
  72. base_filter = "(objectclass=radiusprofile)"
  73. password_attribute = "userPassword"
  74. auto_header = no
  75. access_attr = "dialupacces"
  76. access_attr_used_for_allow = no
  77. chase_referrals = yes
  78. rebind = yes
  79. groupname_attribute = "cn"
  80. groupmembership_filter = "(&(objectClass=Group)(member=%{control:Ldap-UserDn}))"
  81. groupmembership_attribute = "memberOf"
  82. dictionary_mapping = "/var/etc/raddb/ldap.attrmap"
  83. ldap_debug = 0
  84. ldap_connections_number = 5
  85. compare_check_items = no
  86. do_xlat = yes
  87. set_auth_type = yes
  88. group_verification = no
  89. dead_period = 10
  90. }
  91. rlm_ldap: Registering ldap_groupcmp for Ldap-Group
  92. rlm_ldap: Registering ldap_xlat with xlat_name ldap
  93. rlm_ldap: Over-riding set_auth_type, as there is no module ldap listed in the "authenticate" section.
  94. rlm_ldap: reading ldap<->radius mappings from file /var/etc/raddb/ldap.attrmap
  95. rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$
  96. rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$
  97. rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type
  98. rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use
  99. rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id
  100. rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id
  101. rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password
  102. rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password
  103. rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password
  104. rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password
  105. rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password
  106. rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT
  107. rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration
  108. rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address
  109. rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type
  110. rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol
  111. rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address
  112. rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask
  113. rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route
  114. rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing
  115. rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id
  116. rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU
  117. rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression
  118. rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host
  119. rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service
  120. rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port
  121. rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number
  122. rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id
  123. rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network
  124. rlm_ldap: LDAP radiusClass mapped to RADIUS Class
  125. rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout
  126. rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout
  127. rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action
  128. rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service
  129. rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node
  130. rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group
  131. rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link
  132. rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network
  133. rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone
  134. rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit
  135. rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port
  136. rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message
  137. rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type
  138. rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type
  139. rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id
  140. rlm_ldap: LDAP radiusWirelessAccessGroup mapped to RADIUS Symbol-User-Group
  141. conns: 0x1012d1a8
  142. Module: Linked to module rlm_logintime
  143. Module: Instantiating logintime
  144. logintime {
  145. reply-message = "Outside"
  146. minimum-timeout = 60
  147. }
  148. }
  149. radiusd: #### Loading Virtual Servers ####
  150. server {
  151. modules {
  152. Module: Checking authenticate {...} for more modules to load
  153. Module: Linked to module rlm_pap
  154. Module: Instantiating pap
  155. pap {
  156. encryption_scheme = "auto"
  157. auto_header = yes
  158. }
  159. Module: Linked to module rlm_chap
  160. Module: Instantiating chap
  161. Module: Linked to module rlm_mschap
  162. Module: Instantiating mschap
  163. mschap {
  164. use_mppe = yes
  165. require_encryption = no
  166. require_strong = no
  167. with_ntdomain_hack = yes
  168. }
  169. Module: Linked to module rlm_eap
  170. Module: Instantiating eap
  171. eap {
  172. default_eap_type = "tls"
  173. timer_expire = 30
  174. ignore_unknown_eap_types = no
  175. cisco_accounting_username_bug = no
  176. max_sessions = 2048
  177. }
  178. Module: Linked to sub-module rlm_eap_md5
  179. Module: Instantiating eap-md5
  180. Module: Linked to sub-module rlm_eap_gtc
  181. Module: Instantiating eap-gtc
  182. gtc {
  183. challenge = "Password: "
  184. auth_type = "ldap"
  185. }
  186. Module: Linked to sub-module rlm_eap_tls
  187. Module: Instantiating eap-tls
  188. tls {
  189. rsa_key_exchange = no
  190. dh_key_exchange = yes
  191. rsa_key_length = 512
  192. dh_key_length = 512
  193. verify_depth = 0
  194. CA_path = "/var/etc/raddb/cacerts"
  195. pem_file_type = yes
  196. private_key_file = "/etc2/CertMgr/certs/default-trustpoint/privkey.pem"
  197. certificate_file = "/etc2/CertMgr/certs/default-trustpoint/servcert.pem"
  198. private_key_password = "whatever"
  199. dh_file = "/etc2/raddb/dh"
  200. random_file = "/etc2/raddb/random"
  201. fragment_size = 1024
  202. include_length = yes
  203. check_crl = no
  204. cache {
  205. enable = no
  206. lifetime = 1
  207. max_entries = 128
  208. }
  209. }
  210. Module: Linked to sub-module rlm_eap_ttls
  211. Module: Instantiating eap-ttls
  212. ttls {
  213. default_eap_type = "mschapv2"
  214. copy_request_to_tunnel = yes
  215. use_tunneled_reply = yes
  216. include_length = yes
  217. }
  218. Module: Linked to sub-module rlm_eap_peap
  219. Module: Instantiating eap-peap
  220. peap {
  221. default_eap_type = "md5"
  222. copy_request_to_tunnel = yes
  223. use_tunneled_reply = yes
  224. proxy_tunneled_request_as_eap = yes
  225. }
  226. Module: Linked to sub-module rlm_eap_mschapv2
  227. Module: Instantiating eap-mschapv2
  228. mschapv2 {
  229. with_ntdomain_hack = no
  230. }
  231. Module: Checking authorize {...} for more modules to load
  232. Module: Linked to module rlm_preprocess
  233. Module: Instantiating preprocess
  234. preprocess {
  235. huntgroups = "/etc/raddb/huntgroups"
  236. hints = "/var/etc/raddb/hints"
  237. with_ascend_hack = no
  238. ascend_channels_per_line = 23
  239. with_ntdomain_hack = no
  240. with_specialix_jetstream_hack = no
  241. with_cisco_vsa_hack = no
  242. with_alvarion_vsa_hack = no
  243. }
  244. Module: Linked to module rlm_realm
  245. Module: Instantiating suffix_oblic
  246. realm suffix_oblic {
  247. format = "suffix"
  248. delimiter = "/"
  249. ignore_default = no
  250. ignore_null = no
  251. }
  252. Module: Instantiating suffix_oblic_fs
  253. realm suffix_oblic_fs {
  254. format = "suffix"
  255. delimiter = "\"
  256. ignore_default = no
  257. ignore_null = no
  258. }
  259. Module: Instantiating prefix_oblic
  260. realm prefix_oblic {
  261. format = "prefix"
  262. delimiter = "/"
  263. ignore_default = no
  264. ignore_null = no
  265. }
  266. Module: Instantiating prefix_oblic_fs
  267. realm prefix_oblic_fs {
  268. format = "prefix"
  269. delimiter = "\"
  270. ignore_default = no
  271. ignore_null = no
  272. }
  273. Module: Instantiating suffix_at
  274. realm suffix_at {
  275. format = "suffix"
  276. delimiter = "@"
  277. ignore_default = no
  278. ignore_null = no
  279. }
  280. Module: Instantiating prefix_at
  281. realm prefix_at {
  282. format = "prefix"
  283. delimiter = "@"
  284. ignore_default = no
  285. ignore_null = no
  286. }
  287. Module: Instantiating suffix_percent
  288. realm suffix_percent {
  289. format = "suffix"
  290. delimiter = "%"
  291. ignore_default = no
  292. ignore_null = no
  293. }
  294. Module: Instantiating prefix_percent
  295. realm prefix_percent {
  296. format = "prefix"
  297. delimiter = "%"
  298. ignore_default = no
  299. ignore_null = no
  300. }
  301. Module: Linked to module rlm_attr_rewrite
  302. Module: Instantiating copy_user_name
  303. attr_rewrite copy_user_name {
  304. attribute = "Stripped-User-Name"
  305. searchfor = ""
  306. searchin = "packet"
  307. replacewith = "%{User-Name}"
  308. append = no
  309. ignore_case = yes
  310. new_attribute = yes
  311. max_matches = 10
  312. }
  313. Module: Linked to module rlm_passwd
  314. Module: Instantiating passwd
  315. passwd {
  316. filename = "/var/etc/passwd"
  317. format = "*Stripped-User-Name::User-Password"
  318. delimiter = ":"
  319. ignorenislike = yes
  320. ignoreempty = yes
  321. allowmultiplekeys = no
  322. hashsize = 100
  323. }
  324. rlm_passwd: nfields: 3 keyfield 0(Stripped-User-Name) listable: no
  325. Module: Linked to module rlm_files
  326. Module: Instantiating files
  327. files {
  328. usersfile = "/etc/raddb/users"
  329. acctusersfile = "/etc/raddb/acct_users"
  330. compat = "no"
  331. }
  332. Module: Checking preacct {...} for more modules to load
  333. Module: Linked to module rlm_acct_unique
  334. Module: Instantiating acct_unique
  335. acct_unique {
  336. key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
  337. }
  338. Module: Checking accounting {...} for more modules to load
  339. Module: Linked to module rlm_detail
  340. Module: Instantiating detail
  341. detail {
  342. detailfile = "/var/radius/radacct/accounting.log"
  343. header = "%t"
  344. detailperm = 438
  345. dirperm = 493
  346. locking = no
  347. log_packet_header = no
  348. }
  349. Module: Checking post-proxy {...} for more modules to load
  350. } # modules
  351. } # server
  352. radiusd: #### Opening IP addresses and Ports ####
  353. bind_address = *
  354. Listening on authentication address * port 1812
  355. Listening on accounting address * port 1813
  356. Listening on proxy address * port 1814
  357. Ready to process requests.
  358. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=17, length=202
  359. User-Name = "user1"
  360. Calling-Station-Id = "00-13-CE-F0-6E-32"
  361. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  362. Symbol-Wlan-Index = "satishtest"
  363. NAS-Port = 1
  364. NAS-Port-Type = Wireless-802.11
  365. Framed-MTU = 1400
  366. Service-Type = Framed-User
  367. NAS-IP-Address = 127.0.0.1
  368. NAS-Identifier = "ap71xx-0F1AE6"
  369. NAS-Port-Id = "radio1"
  370. Connect-Info = "CONNECT 54Mbps 802.11bg"
  371. EAP-Message = 0x0201000a017573657231
  372. Message-Authenticator = 0xf9cb29944c5ad3778e311df01dbff9e8
  373. +- entering group authorize {...}
  374. ++[preprocess] returns ok
  375. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  376. [suffix_oblic] No such realm "NULL"
  377. ++[suffix_oblic] returns noop
  378. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  379. [suffix_oblic_fs] No such realm "NULL"
  380. ++[suffix_oblic_fs] returns noop
  381. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  382. [prefix_oblic] No such realm "NULL"
  383. ++[prefix_oblic] returns noop
  384. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  385. [prefix_oblic_fs] No such realm "NULL"
  386. ++[prefix_oblic_fs] returns noop
  387. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  388. [suffix_at] No such realm "NULL"
  389. ++[suffix_at] returns noop
  390. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  391. [prefix_at] No such realm "NULL"
  392. ++[prefix_at] returns noop
  393. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  394. [suffix_percent] No such realm "NULL"
  395. ++[suffix_percent] returns noop
  396. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  397. [prefix_percent] No such realm "NULL"
  398. ++[prefix_percent] returns noop
  399. [copy_user_name] expand: %{User-Name} -> user1
  400. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  401. ++[copy_user_name] returns ok
  402. [passwd] Added User-Password: 'symbol123' to config_items
  403. ++[passwd] returns ok
  404. [ldap] rlm_ldap: performing user authorization for user1
  405. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  406. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  407. rlm_ldap: ldap_get_conn: Checking Id: 0
  408. rlm_ldap: ldap_get_conn: Got Id: 0
  409. rlm_ldap: attempting LDAP reconnection
  410. rlm_ldap: (re)connect to 192.168.1.25:389, authentication 0
  411. rlm_ldap: bind as CN=itis-adm,CN=Users,DC=wlan,DC=com/Motorola@123 to 192.168.1.25:389
  412. rlm_ldap: waiting for bind result ...
  413. rlm_ldap: Bind was successful
  414. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  415. [ldap] looking for check items in directory...
  416. [ldap] looking for reply items in directory...
  417. [ldap] user user1 authorized to use remote access
  418. rlm_ldap: ldap_release_conn: Release Id: 0
  419. ++[ldap] returns ok
  420. ++? if (fail)
  421. ? Evaluating (fail) -> FALSE
  422. ++? if (fail) -> FALSE
  423. [eap] EAP packet type response id 1 length 10
  424. [eap] No EAP Start, assuming it's an on-going EAP conversation
  425. ++[eap] returns updated
  426. [pap] Found existing Auth-Type, not changing it.
  427. ++[pap] returns noop
  428. ++[logintime] returns noop
  429. Found Auth-Type = EAP
  430. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  431. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  432. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  433. !!! Please update your configuration so that the "known good" !!!
  434. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  435. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  436. +- entering group authenticate {...}
  437. [eap] EAP Identity
  438. [eap] processing type tls
  439. [tls] Requiring client certificate
  440. [tls] Initiate
  441. [tls] Start returned 1
  442. ++[eap] returns handled
  443. Sending Access-Challenge of id 17 to 127.0.0.1 port 4308
  444. EAP-Message = 0x010200060d20
  445. Message-Authenticator = 0x00000000000000000000000000000000
  446. State = 0x1767150a1765185fd9e6a273eb631eef
  447. Finished request 0.
  448. Going to the next request
  449. Waking up in 9.9 seconds.
  450. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=18, length=216
  451. User-Name = "user1"
  452. Calling-Station-Id = "00-13-CE-F0-6E-32"
  453. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  454. Symbol-Wlan-Index = "satishtest"
  455. NAS-Port = 1
  456. NAS-Port-Type = Wireless-802.11
  457. Framed-MTU = 1400
  458. Service-Type = Framed-User
  459. NAS-IP-Address = 127.0.0.1
  460. NAS-Identifier = "ap71xx-0F1AE6"
  461. NAS-Port-Id = "radio1"
  462. Connect-Info = "CONNECT 54Mbps 802.11bg"
  463. State = 0x1767150a1765185fd9e6a273eb631eef
  464. EAP-Message = 0x020200060319
  465. Message-Authenticator = 0xa4a45ce259e0488c917025de6437128c
  466. +- entering group authorize {...}
  467. ++[preprocess] returns ok
  468. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  469. [suffix_oblic] No such realm "NULL"
  470. ++[suffix_oblic] returns noop
  471. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  472. [suffix_oblic_fs] No such realm "NULL"
  473. ++[suffix_oblic_fs] returns noop
  474. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  475. [prefix_oblic] No such realm "NULL"
  476. ++[prefix_oblic] returns noop
  477. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  478. [prefix_oblic_fs] No such realm "NULL"
  479. ++[prefix_oblic_fs] returns noop
  480. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  481. [suffix_at] No such realm "NULL"
  482. ++[suffix_at] returns noop
  483. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  484. [prefix_at] No such realm "NULL"
  485. ++[prefix_at] returns noop
  486. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  487. [suffix_percent] No such realm "NULL"
  488. ++[suffix_percent] returns noop
  489. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  490. [prefix_percent] No such realm "NULL"
  491. ++[prefix_percent] returns noop
  492. [copy_user_name] expand: %{User-Name} -> user1
  493. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  494. ++[copy_user_name] returns ok
  495. [passwd] Added User-Password: 'symbol123' to config_items
  496. ++[passwd] returns ok
  497. [ldap] rlm_ldap: performing user authorization for user1
  498. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  499. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  500. rlm_ldap: ldap_get_conn: Checking Id: 0
  501. rlm_ldap: ldap_get_conn: Got Id: 0
  502. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  503. [ldap] looking for check items in directory...
  504. [ldap] looking for reply items in directory...
  505. [ldap] user user1 authorized to use remote access
  506. rlm_ldap: ldap_release_conn: Release Id: 0
  507. ++[ldap] returns ok
  508. ++? if (fail)
  509. ? Evaluating (fail) -> FALSE
  510. ++? if (fail) -> FALSE
  511. [eap] EAP packet type response id 2 length 6
  512. [eap] No EAP Start, assuming it's an on-going EAP conversation
  513. ++[eap] returns updated
  514. [pap] Found existing Auth-Type, not changing it.
  515. ++[pap] returns noop
  516. ++[logintime] returns noop
  517. Found Auth-Type = EAP
  518. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  519. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  520. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  521. !!! Please update your configuration so that the "known good" !!!
  522. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  523. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  524. +- entering group authenticate {...}
  525. [eap] Request found, released from the list
  526. [eap] EAP NAK
  527. [eap] EAP-NAK asked for EAP-Type/peap
  528. [eap] processing type tls
  529. [tls] Initiate
  530. [tls] Start returned 1
  531. ++[eap] returns handled
  532. Sending Access-Challenge of id 18 to 127.0.0.1 port 4308
  533. EAP-Message = 0x010300061920
  534. Message-Authenticator = 0x00000000000000000000000000000000
  535. State = 0x1767150a16640c5fd9e6a273eb631eef
  536. Finished request 1.
  537. Going to the next request
  538. Waking up in 9.9 seconds.
  539. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=19, length=292
  540. User-Name = "user1"
  541. Calling-Station-Id = "00-13-CE-F0-6E-32"
  542. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  543. Symbol-Wlan-Index = "satishtest"
  544. NAS-Port = 1
  545. NAS-Port-Type = Wireless-802.11
  546. Framed-MTU = 1400
  547. Service-Type = Framed-User
  548. NAS-IP-Address = 127.0.0.1
  549. NAS-Identifier = "ap71xx-0F1AE6"
  550. NAS-Port-Id = "radio1"
  551. Connect-Info = "CONNECT 54Mbps 802.11bg"
  552. State = 0x1767150a16640c5fd9e6a273eb631eef
  553. EAP-Message = 0x0203005219800000004816030100430100003f03014dc4cda5465f732558a1b04e3f0335ab180d103da8a2b9e88f5ce889d7c7ac4600001800390038003300320016001300660035002f000a000500040100
  554. Message-Authenticator = 0x677aeda521bef23591b9988f20273930
  555. +- entering group authorize {...}
  556. ++[preprocess] returns ok
  557. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  558. [suffix_oblic] No such realm "NULL"
  559. ++[suffix_oblic] returns noop
  560. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  561. [suffix_oblic_fs] No such realm "NULL"
  562. ++[suffix_oblic_fs] returns noop
  563. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  564. [prefix_oblic] No such realm "NULL"
  565. ++[prefix_oblic] returns noop
  566. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  567. [prefix_oblic_fs] No such realm "NULL"
  568. ++[prefix_oblic_fs] returns noop
  569. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  570. [suffix_at] No such realm "NULL"
  571. ++[suffix_at] returns noop
  572. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  573. [prefix_at] No such realm "NULL"
  574. ++[prefix_at] returns noop
  575. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  576. [suffix_percent] No such realm "NULL"
  577. ++[suffix_percent] returns noop
  578. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  579. [prefix_percent] No such realm "NULL"
  580. ++[prefix_percent] returns noop
  581. [copy_user_name] expand: %{User-Name} -> user1
  582. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  583. ++[copy_user_name] returns ok
  584. [passwd] Added User-Password: 'symbol123' to config_items
  585. ++[passwd] returns ok
  586. [ldap] rlm_ldap: performing user authorization for user1
  587. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  588. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  589. rlm_ldap: ldap_get_conn: Checking Id: 0
  590. rlm_ldap: ldap_get_conn: Got Id: 0
  591. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  592. [ldap] looking for check items in directory...
  593. [ldap] looking for reply items in directory...
  594. [ldap] user user1 authorized to use remote access
  595. rlm_ldap: ldap_release_conn: Release Id: 0
  596. ++[ldap] returns ok
  597. ++? if (fail)
  598. ? Evaluating (fail) -> FALSE
  599. ++? if (fail) -> FALSE
  600. [eap] EAP packet type response id 3 length 82
  601. [eap] Continuing tunnel setup.
  602. ++[eap] returns ok
  603. [pap] Found existing Auth-Type, not changing it.
  604. ++[pap] returns noop
  605. ++[logintime] returns noop
  606. Found Auth-Type = EAP
  607. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  608. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  609. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  610. !!! Please update your configuration so that the "known good" !!!
  611. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  612. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  613. +- entering group authenticate {...}
  614. [eap] Request found, released from the list
  615. [eap] EAP/peap
  616. [eap] processing type peap
  617. [peap] processing EAP-TLS
  618. TLS Length 72
  619. [peap] Length Included
  620. [peap] eaptls_verify returned 11
  621. [peap] (other): before/accept initialization
  622. [peap] TLS_accept: before/accept initialization
  623. [peap] <<< TLS 1.0 Handshake [length 0043], ClientHello
  624. [peap] TLS_accept: SSLv3 read client hello A
  625. [peap] >>> TLS 1.0 Handshake [length 002a], ServerHello
  626. [peap] TLS_accept: SSLv3 write server hello A
  627. [peap] >>> TLS 1.0 Handshake [length 01e2], Certificate
  628. [peap] TLS_accept: SSLv3 write certificate A
  629. [peap] >>> TLS 1.0 Handshake [length 018d], ServerKeyExchange
  630. [peap] TLS_accept: SSLv3 write key exchange A
  631. [peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
  632. [peap] TLS_accept: SSLv3 write server done A
  633. [peap] TLS_accept: SSLv3 flush data
  634. [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A
  635. In SSL Handshake Phase
  636. In SSL Accept mode
  637. [peap] eaptls_process returned 13
  638. [peap] EAPTLS_HANDLED
  639. ++[eap] returns handled
  640. Sending Access-Challenge of id 19 to 127.0.0.1 port 4308
  641. EAP-Message = 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
  642. EAP-Message = 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
  643. EAP-Message = 0x1cf40b316e238c975adac4f8a06b158c365bf02b4d2af30e36a926c55ba606d6877b160301018d0c0001890080d16a771d93f2dd1f02dcec1bad2398c679aa98a62b8731addcf12dd60cc6c4aa00ee963014e6a403031383bfd403f94e135e460d553f8f52647c85acba17e1f19ed50e79112219209ceab88542b0657d65bb7ab54a15a90e898b7deafef654cec2cdcffdc72ef73346ba23b1273db23faf0f291428619544ee3ac4bd6f4950730001020080bf682dfe12d28e29d201cd8aca90513029ce6a25e65a278a709d3d1d639498d90b72e4230436d70d0f07fc42bde8068283066d56382bb5fe2b5632b17242350bbab5e19838add7b8f85efa
  644. EAP-Message = 0xf62f0c9c7bf9bb698a4d2e47855feffe2943f6d221d86ba47ba9178a098101d7f3841d4bdb95d7169969735546177e88b68d72e78400804a3044acfa7b4f865fa0c2f2524f92ed7937c816d01fb6531d7db324700c500be9079d50fca3c361f96b2a3832aee35ef20a25afc5f2c8527cb46f86f39da6d77baef718e4a3048f8728a52d0de09669489d974393e634f6d66b2b719b323462b242d64a3e07d5f7140453ee68c0a982c3e6d9662dade254754709cfbec166d816030100040e000000
  645. Message-Authenticator = 0x00000000000000000000000000000000
  646. State = 0x1767150a15630c5fd9e6a273eb631eef
  647. Finished request 2.
  648. Going to the next request
  649. Waking up in 9.8 seconds.
  650. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=20, length=418
  651. User-Name = "user1"
  652. Calling-Station-Id = "00-13-CE-F0-6E-32"
  653. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  654. Symbol-Wlan-Index = "satishtest"
  655. NAS-Port = 1
  656. NAS-Port-Type = Wireless-802.11
  657. Framed-MTU = 1400
  658. Service-Type = Framed-User
  659. NAS-IP-Address = 127.0.0.1
  660. NAS-Identifier = "ap71xx-0F1AE6"
  661. NAS-Port-Id = "radio1"
  662. Connect-Info = "CONNECT 54Mbps 802.11bg"
  663. State = 0x1767150a15630c5fd9e6a273eb631eef
  664. EAP-Message = 0x020400d01980000000c6160301008610000082008086a0da6b59a4e19e7a6a1080c183c5cbe779e8bc9bf6f740e7201545d9e8d7a62b49388decc2fccc80ecdc62973eef2e2c87db094df9f8d08f29481b8d9fb74ea21c8c38cab63aa68cfc9fa08ae65ba835a1ca43ba20c131a446bd793b9c264df7715292586f1ceefe714a33ee61926439dc492c39d3fd731acc5ed27c68b28d1403010001011603010030681431b7361513fc3525f33d4e48f5d84b53f6bec77d0c5ac6d3d1b25b0ba5322de8a7fbc4025caff7130f9ce7e4dcba
  665. Message-Authenticator = 0x71640b9539eda14efdd31763ba0263da
  666. +- entering group authorize {...}
  667. ++[preprocess] returns ok
  668. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  669. [suffix_oblic] No such realm "NULL"
  670. ++[suffix_oblic] returns noop
  671. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  672. [suffix_oblic_fs] No such realm "NULL"
  673. ++[suffix_oblic_fs] returns noop
  674. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  675. [prefix_oblic] No such realm "NULL"
  676. ++[prefix_oblic] returns noop
  677. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  678. [prefix_oblic_fs] No such realm "NULL"
  679. ++[prefix_oblic_fs] returns noop
  680. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  681. [suffix_at] No such realm "NULL"
  682. ++[suffix_at] returns noop
  683. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  684. [prefix_at] No such realm "NULL"
  685. ++[prefix_at] returns noop
  686. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  687. [suffix_percent] No such realm "NULL"
  688. ++[suffix_percent] returns noop
  689. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  690. [prefix_percent] No such realm "NULL"
  691. ++[prefix_percent] returns noop
  692. [copy_user_name] expand: %{User-Name} -> user1
  693. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  694. ++[copy_user_name] returns ok
  695. [passwd] Added User-Password: 'symbol123' to config_items
  696. ++[passwd] returns ok
  697. [ldap] rlm_ldap: performing user authorization for user1
  698. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  699. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  700. rlm_ldap: ldap_get_conn: Checking Id: 0
  701. rlm_ldap: ldap_get_conn: Got Id: 0
  702. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  703. [ldap] looking for check items in directory...
  704. [ldap] looking for reply items in directory...
  705. [ldap] user user1 authorized to use remote access
  706. rlm_ldap: ldap_release_conn: Release Id: 0
  707. ++[ldap] returns ok
  708. ++? if (fail)
  709. ? Evaluating (fail) -> FALSE
  710. ++? if (fail) -> FALSE
  711. [eap] EAP packet type response id 4 length 208
  712. [eap] Continuing tunnel setup.
  713. ++[eap] returns ok
  714. [pap] Found existing Auth-Type, not changing it.
  715. ++[pap] returns noop
  716. ++[logintime] returns noop
  717. Found Auth-Type = EAP
  718. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  719. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  720. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  721. !!! Please update your configuration so that the "known good" !!!
  722. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  723. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  724. +- entering group authenticate {...}
  725. [eap] Request found, released from the list
  726. [eap] EAP/peap
  727. [eap] processing type peap
  728. [peap] processing EAP-TLS
  729. TLS Length 198
  730. [peap] Length Included
  731. [peap] eaptls_verify returned 11
  732. [peap] <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange
  733. [peap] TLS_accept: SSLv3 read client key exchange A
  734. [peap] <<< TLS 1.0 ChangeCipherSpec [length 0001]
  735. [peap] <<< TLS 1.0 Handshake [length 0010], Finished
  736. [peap] TLS_accept: SSLv3 read finished A
  737. [peap] >>> TLS 1.0 ChangeCipherSpec [length 0001]
  738. [peap] TLS_accept: SSLv3 write change cipher spec A
  739. [peap] >>> TLS 1.0 Handshake [length 0010], Finished
  740. [peap] TLS_accept: SSLv3 write finished A
  741. [peap] TLS_accept: SSLv3 flush data
  742. [peap] (other): SSL negotiation finished successfully
  743. SSL Connection Established
  744. [peap] eaptls_process returned 13
  745. [peap] EAPTLS_HANDLED
  746. ++[eap] returns handled
  747. Sending Access-Challenge of id 20 to 127.0.0.1 port 4308
  748. EAP-Message = 0x010500411900140301000101160301003087f42b13d7006fcfe3cf3429f5d8bab43fe74c103d5be6eab9675d35aa3ff75fca49ab01a84e2fe91d1ad301c6a8d765
  749. Message-Authenticator = 0x00000000000000000000000000000000
  750. State = 0x1767150a14620c5fd9e6a273eb631eef
  751. Finished request 3.
  752. Going to the next request
  753. Waking up in 9.7 seconds.
  754. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=21, length=216
  755. User-Name = "user1"
  756. Calling-Station-Id = "00-13-CE-F0-6E-32"
  757. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  758. Symbol-Wlan-Index = "satishtest"
  759. NAS-Port = 1
  760. NAS-Port-Type = Wireless-802.11
  761. Framed-MTU = 1400
  762. Service-Type = Framed-User
  763. NAS-IP-Address = 127.0.0.1
  764. NAS-Identifier = "ap71xx-0F1AE6"
  765. NAS-Port-Id = "radio1"
  766. Connect-Info = "CONNECT 54Mbps 802.11bg"
  767. State = 0x1767150a14620c5fd9e6a273eb631eef
  768. EAP-Message = 0x020500061900
  769. Message-Authenticator = 0x045c96f5313401666fe023f1b95310da
  770. +- entering group authorize {...}
  771. ++[preprocess] returns ok
  772. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  773. [suffix_oblic] No such realm "NULL"
  774. ++[suffix_oblic] returns noop
  775. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  776. [suffix_oblic_fs] No such realm "NULL"
  777. ++[suffix_oblic_fs] returns noop
  778. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  779. [prefix_oblic] No such realm "NULL"
  780. ++[prefix_oblic] returns noop
  781. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  782. [prefix_oblic_fs] No such realm "NULL"
  783. ++[prefix_oblic_fs] returns noop
  784. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  785. [suffix_at] No such realm "NULL"
  786. ++[suffix_at] returns noop
  787. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  788. [prefix_at] No such realm "NULL"
  789. ++[prefix_at] returns noop
  790. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  791. [suffix_percent] No such realm "NULL"
  792. ++[suffix_percent] returns noop
  793. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  794. [prefix_percent] No such realm "NULL"
  795. ++[prefix_percent] returns noop
  796. [copy_user_name] expand: %{User-Name} -> user1
  797. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  798. ++[copy_user_name] returns ok
  799. [passwd] Added User-Password: 'symbol123' to config_items
  800. ++[passwd] returns ok
  801. [ldap] rlm_ldap: performing user authorization for user1
  802. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  803. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  804. rlm_ldap: ldap_get_conn: Checking Id: 0
  805. rlm_ldap: ldap_get_conn: Got Id: 0
  806. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  807. [ldap] looking for check items in directory...
  808. [ldap] looking for reply items in directory...
  809. [ldap] user user1 authorized to use remote access
  810. rlm_ldap: ldap_release_conn: Release Id: 0
  811. ++[ldap] returns ok
  812. ++? if (fail)
  813. ? Evaluating (fail) -> FALSE
  814. ++? if (fail) -> FALSE
  815. [eap] EAP packet type response id 5 length 6
  816. [eap] Continuing tunnel setup.
  817. ++[eap] returns ok
  818. [pap] Found existing Auth-Type, not changing it.
  819. ++[pap] returns noop
  820. ++[logintime] returns noop
  821. Found Auth-Type = EAP
  822. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  823. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  824. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  825. !!! Please update your configuration so that the "known good" !!!
  826. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  827. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  828. +- entering group authenticate {...}
  829. [eap] Request found, released from the list
  830. [eap] EAP/peap
  831. [eap] processing type peap
  832. [peap] processing EAP-TLS
  833. [peap] Received TLS ACK
  834. [peap] ACK handshake is finished
  835. [peap] eaptls_verify returned 3
  836. [peap] eaptls_process returned 3
  837. [peap] EAPTLS_SUCCESS
  838. ++[eap] returns handled
  839. Sending Access-Challenge of id 21 to 127.0.0.1 port 4308
  840. EAP-Message = 0x0106002b1900170301002082a0496f39bde604dd2d41b8ea98ab8dffcffd0b7e77bc2690fa7db29d17c378
  841. Message-Authenticator = 0x00000000000000000000000000000000
  842. State = 0x1767150a13610c5fd9e6a273eb631eef
  843. Finished request 4.
  844. Going to the next request
  845. Waking up in 9.7 seconds.
  846. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=22, length=253
  847. User-Name = "user1"
  848. Calling-Station-Id = "00-13-CE-F0-6E-32"
  849. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  850. Symbol-Wlan-Index = "satishtest"
  851. NAS-Port = 1
  852. NAS-Port-Type = Wireless-802.11
  853. Framed-MTU = 1400
  854. Service-Type = Framed-User
  855. NAS-IP-Address = 127.0.0.1
  856. NAS-Identifier = "ap71xx-0F1AE6"
  857. NAS-Port-Id = "radio1"
  858. Connect-Info = "CONNECT 54Mbps 802.11bg"
  859. State = 0x1767150a13610c5fd9e6a273eb631eef
  860. EAP-Message = 0x0206002b19001703010020e7b0d985c7243a3afd6839f8ea1ec9f356a7a48b95c80043a733b1846b3f190f
  861. Message-Authenticator = 0x574fb70e0327515e0d7a9ede8e9cefaa
  862. +- entering group authorize {...}
  863. ++[preprocess] returns ok
  864. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  865. [suffix_oblic] No such realm "NULL"
  866. ++[suffix_oblic] returns noop
  867. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  868. [suffix_oblic_fs] No such realm "NULL"
  869. ++[suffix_oblic_fs] returns noop
  870. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  871. [prefix_oblic] No such realm "NULL"
  872. ++[prefix_oblic] returns noop
  873. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  874. [prefix_oblic_fs] No such realm "NULL"
  875. ++[prefix_oblic_fs] returns noop
  876. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  877. [suffix_at] No such realm "NULL"
  878. ++[suffix_at] returns noop
  879. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  880. [prefix_at] No such realm "NULL"
  881. ++[prefix_at] returns noop
  882. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  883. [suffix_percent] No such realm "NULL"
  884. ++[suffix_percent] returns noop
  885. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  886. [prefix_percent] No such realm "NULL"
  887. ++[prefix_percent] returns noop
  888. [copy_user_name] expand: %{User-Name} -> user1
  889. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  890. ++[copy_user_name] returns ok
  891. [passwd] Added User-Password: 'symbol123' to config_items
  892. ++[passwd] returns ok
  893. [ldap] rlm_ldap: performing user authorization for user1
  894. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  895. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  896. rlm_ldap: ldap_get_conn: Checking Id: 0
  897. rlm_ldap: ldap_get_conn: Got Id: 0
  898. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  899. [ldap] looking for check items in directory...
  900. [ldap] looking for reply items in directory...
  901. [ldap] user user1 authorized to use remote access
  902. rlm_ldap: ldap_release_conn: Release Id: 0
  903. ++[ldap] returns ok
  904. ++? if (fail)
  905. ? Evaluating (fail) -> FALSE
  906. ++? if (fail) -> FALSE
  907. [eap] EAP packet type response id 6 length 43
  908. [eap] Continuing tunnel setup.
  909. ++[eap] returns ok
  910. [pap] Found existing Auth-Type, not changing it.
  911. ++[pap] returns noop
  912. ++[logintime] returns noop
  913. Found Auth-Type = EAP
  914. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  915. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  916. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  917. !!! Please update your configuration so that the "known good" !!!
  918. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  919. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  920. +- entering group authenticate {...}
  921. [eap] Request found, released from the list
  922. [eap] EAP/peap
  923. [eap] processing type peap
  924. [peap] processing EAP-TLS
  925. [peap] eaptls_verify returned 7
  926. [peap] Done initial handshake
  927. [peap] eaptls_process returned 7
  928. [peap] EAPTLS_OK
  929. [peap] Session established. Decoding tunneled attributes.
  930. [peap] Identity - user1
  931. [peap] Got tunneled request
  932. EAP-Message = 0x0206000a017573657231
  933. server {
  934. PEAP: Got tunneled identity of user1
  935. PEAP: Setting default EAP type for tunneled EAP session.
  936. PEAP: Setting User-Name to user1
  937. Sending tunneled request
  938. EAP-Message = 0x0206000a017573657231
  939. FreeRADIUS-Proxied-To = 127.0.0.1
  940. User-Name = "user1"
  941. Calling-Station-Id = "00-13-CE-F0-6E-32"
  942. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  943. Symbol-Wlan-Index = "satishtest"
  944. NAS-Port = 1
  945. NAS-Port-Type = Wireless-802.11
  946. Framed-MTU = 1400
  947. Service-Type = Framed-User
  948. NAS-IP-Address = 127.0.0.1
  949. NAS-Identifier = "ap71xx-0F1AE6"
  950. NAS-Port-Id = "radio1"
  951. Connect-Info = "CONNECT 54Mbps 802.11bg"
  952. server {
  953. +- entering group authorize {...}
  954. ++[preprocess] returns ok
  955. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  956. [suffix_oblic] No such realm "NULL"
  957. ++[suffix_oblic] returns noop
  958. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  959. [suffix_oblic_fs] No such realm "NULL"
  960. ++[suffix_oblic_fs] returns noop
  961. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  962. [prefix_oblic] No such realm "NULL"
  963. ++[prefix_oblic] returns noop
  964. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  965. [prefix_oblic_fs] No such realm "NULL"
  966. ++[prefix_oblic_fs] returns noop
  967. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  968. [suffix_at] No such realm "NULL"
  969. ++[suffix_at] returns noop
  970. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  971. [prefix_at] No such realm "NULL"
  972. ++[prefix_at] returns noop
  973. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  974. [suffix_percent] No such realm "NULL"
  975. ++[suffix_percent] returns noop
  976. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  977. [prefix_percent] No such realm "NULL"
  978. ++[prefix_percent] returns noop
  979. [copy_user_name] expand: %{User-Name} -> user1
  980. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  981. ++[copy_user_name] returns ok
  982. [passwd] Added User-Password: 'symbol123' to config_items
  983. ++[passwd] returns ok
  984. [ldap] rlm_ldap: performing user authorization for user1
  985. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  986. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  987. rlm_ldap: ldap_get_conn: Checking Id: 0
  988. rlm_ldap: ldap_get_conn: Got Id: 0
  989. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  990. [ldap] looking for check items in directory...
  991. [ldap] looking for reply items in directory...
  992. [ldap] user user1 authorized to use remote access
  993. rlm_ldap: ldap_release_conn: Release Id: 0
  994. ++[ldap] returns ok
  995. ++? if (fail)
  996. ? Evaluating (fail) -> FALSE
  997. ++? if (fail) -> FALSE
  998. [eap] EAP packet type response id 6 length 10
  999. [eap] No EAP Start, assuming it's an on-going EAP conversation
  1000. ++[eap] returns updated
  1001. [pap] Found existing Auth-Type, not changing it.
  1002. ++[pap] returns noop
  1003. ++[logintime] returns noop
  1004. Found Auth-Type = EAP
  1005. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1006. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1007. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1008. !!! Please update your configuration so that the "known good" !!!
  1009. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1010. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1011. +- entering group authenticate {...}
  1012. [eap] EAP Identity
  1013. [eap] processing type md5
  1014. rlm_eap_md5: Issuing Challenge
  1015. ++[eap] returns handled
  1016. } # server
  1017. [peap] Got tunneled reply code 11
  1018. EAP-Message = 0x010700160410f4701109d7936668b89b40e140e74151
  1019. Message-Authenticator = 0x00000000000000000000000000000000
  1020. State = 0x1d31007d1d360414e90a68c3c2bc1dfd
  1021. [peap] Got tunneled reply RADIUS code 11
  1022. EAP-Message = 0x010700160410f4701109d7936668b89b40e140e74151
  1023. Message-Authenticator = 0x00000000000000000000000000000000
  1024. State = 0x1d31007d1d360414e90a68c3c2bc1dfd
  1025. [peap] Got tunneled Access-Challenge
  1026. ++[eap] returns handled
  1027. Sending Access-Challenge of id 22 to 127.0.0.1 port 4308
  1028. EAP-Message = 0x0107003b1900170301003096f92f213fd44638b43997645739aad9e64d8015e56f6d01ab41e0fe810fa125f450d8deffa1fd0e331f7382f989afd1
  1029. Message-Authenticator = 0x00000000000000000000000000000000
  1030. State = 0x1767150a12600c5fd9e6a273eb631eef
  1031. Finished request 5.
  1032. Going to the next request
  1033. Waking up in 9.7 seconds.
  1034. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=23, length=253
  1035. User-Name = "user1"
  1036. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1037. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1038. Symbol-Wlan-Index = "satishtest"
  1039. NAS-Port = 1
  1040. NAS-Port-Type = Wireless-802.11
  1041. Framed-MTU = 1400
  1042. Service-Type = Framed-User
  1043. NAS-IP-Address = 127.0.0.1
  1044. NAS-Identifier = "ap71xx-0F1AE6"
  1045. NAS-Port-Id = "radio1"
  1046. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1047. State = 0x1767150a12600c5fd9e6a273eb631eef
  1048. EAP-Message = 0x0207002b19001703010020e82529b06402ede2d45637d0d7d1b563e9301dd7c52c72ef8dd9d5832bb1b61f
  1049. Message-Authenticator = 0x9fd26fe2a056cb87acf1db9dbe5a4f6c
  1050. +- entering group authorize {...}
  1051. ++[preprocess] returns ok
  1052. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1053. [suffix_oblic] No such realm "NULL"
  1054. ++[suffix_oblic] returns noop
  1055. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1056. [suffix_oblic_fs] No such realm "NULL"
  1057. ++[suffix_oblic_fs] returns noop
  1058. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1059. [prefix_oblic] No such realm "NULL"
  1060. ++[prefix_oblic] returns noop
  1061. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1062. [prefix_oblic_fs] No such realm "NULL"
  1063. ++[prefix_oblic_fs] returns noop
  1064. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1065. [suffix_at] No such realm "NULL"
  1066. ++[suffix_at] returns noop
  1067. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1068. [prefix_at] No such realm "NULL"
  1069. ++[prefix_at] returns noop
  1070. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1071. [suffix_percent] No such realm "NULL"
  1072. ++[suffix_percent] returns noop
  1073. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1074. [prefix_percent] No such realm "NULL"
  1075. ++[prefix_percent] returns noop
  1076. [copy_user_name] expand: %{User-Name} -> user1
  1077. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1078. ++[copy_user_name] returns ok
  1079. [passwd] Added User-Password: 'symbol123' to config_items
  1080. ++[passwd] returns ok
  1081. [ldap] rlm_ldap: performing user authorization for user1
  1082. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1083. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1084. rlm_ldap: ldap_get_conn: Checking Id: 0
  1085. rlm_ldap: ldap_get_conn: Got Id: 0
  1086. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  1087. [ldap] looking for check items in directory...
  1088. [ldap] looking for reply items in directory...
  1089. [ldap] user user1 authorized to use remote access
  1090. rlm_ldap: ldap_release_conn: Release Id: 0
  1091. ++[ldap] returns ok
  1092. ++? if (fail)
  1093. ? Evaluating (fail) -> FALSE
  1094. ++? if (fail) -> FALSE
  1095. [eap] EAP packet type response id 7 length 43
  1096. [eap] Continuing tunnel setup.
  1097. ++[eap] returns ok
  1098. [pap] Found existing Auth-Type, not changing it.
  1099. ++[pap] returns noop
  1100. ++[logintime] returns noop
  1101. Found Auth-Type = EAP
  1102. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1103. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1104. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1105. !!! Please update your configuration so that the "known good" !!!
  1106. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1107. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1108. +- entering group authenticate {...}
  1109. [eap] Request found, released from the list
  1110. [eap] EAP/peap
  1111. [eap] processing type peap
  1112. [peap] processing EAP-TLS
  1113. [peap] eaptls_verify returned 7
  1114. [peap] Done initial handshake
  1115. [peap] eaptls_process returned 7
  1116. [peap] EAPTLS_OK
  1117. [peap] Session established. Decoding tunneled attributes.
  1118. [peap] EAP type nak
  1119. [peap] Got tunneled request
  1120. EAP-Message = 0x020700060306
  1121. server {
  1122. PEAP: Setting User-Name to user1
  1123. Sending tunneled request
  1124. EAP-Message = 0x020700060306
  1125. FreeRADIUS-Proxied-To = 127.0.0.1
  1126. User-Name = "user1"
  1127. State = 0x1d31007d1d360414e90a68c3c2bc1dfd
  1128. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1129. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1130. Symbol-Wlan-Index = "satishtest"
  1131. NAS-Port = 1
  1132. NAS-Port-Type = Wireless-802.11
  1133. Framed-MTU = 1400
  1134. Service-Type = Framed-User
  1135. NAS-IP-Address = 127.0.0.1
  1136. NAS-Identifier = "ap71xx-0F1AE6"
  1137. NAS-Port-Id = "radio1"
  1138. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1139. server {
  1140. +- entering group authorize {...}
  1141. ++[preprocess] returns ok
  1142. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1143. [suffix_oblic] No such realm "NULL"
  1144. ++[suffix_oblic] returns noop
  1145. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1146. [suffix_oblic_fs] No such realm "NULL"
  1147. ++[suffix_oblic_fs] returns noop
  1148. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1149. [prefix_oblic] No such realm "NULL"
  1150. ++[prefix_oblic] returns noop
  1151. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1152. [prefix_oblic_fs] No such realm "NULL"
  1153. ++[prefix_oblic_fs] returns noop
  1154. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1155. [suffix_at] No such realm "NULL"
  1156. ++[suffix_at] returns noop
  1157. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1158. [prefix_at] No such realm "NULL"
  1159. ++[prefix_at] returns noop
  1160. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1161. [suffix_percent] No such realm "NULL"
  1162. ++[suffix_percent] returns noop
  1163. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1164. [prefix_percent] No such realm "NULL"
  1165. ++[prefix_percent] returns noop
  1166. [copy_user_name] expand: %{User-Name} -> user1
  1167. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1168. ++[copy_user_name] returns ok
  1169. [passwd] Added User-Password: 'symbol123' to config_items
  1170. ++[passwd] returns ok
  1171. [ldap] rlm_ldap: performing user authorization for user1
  1172. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1173. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1174. rlm_ldap: ldap_get_conn: Checking Id: 0
  1175. rlm_ldap: ldap_get_conn: Got Id: 0
  1176. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  1177. [ldap] looking for check items in directory...
  1178. [ldap] looking for reply items in directory...
  1179. [ldap] user user1 authorized to use remote access
  1180. rlm_ldap: ldap_release_conn: Release Id: 0
  1181. ++[ldap] returns ok
  1182. ++? if (fail)
  1183. ? Evaluating (fail) -> FALSE
  1184. ++? if (fail) -> FALSE
  1185. [eap] EAP packet type response id 7 length 6
  1186. [eap] No EAP Start, assuming it's an on-going EAP conversation
  1187. ++[eap] returns updated
  1188. [pap] Found existing Auth-Type, not changing it.
  1189. ++[pap] returns noop
  1190. ++[logintime] returns noop
  1191. Found Auth-Type = EAP
  1192. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1193. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1194. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1195. !!! Please update your configuration so that the "known good" !!!
  1196. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1197. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1198. +- entering group authenticate {...}
  1199. [eap] Request found, released from the list
  1200. [eap] EAP NAK
  1201. [eap] EAP-NAK asked for EAP-Type/gtc
  1202. [eap] processing type gtc
  1203. ++[eap] returns handled
  1204. } # server
  1205. [peap] Got tunneled reply code 11
  1206. EAP-Message = 0x0108000f0650617373776f72643a20
  1207. Message-Authenticator = 0x00000000000000000000000000000000
  1208. State = 0x1d31007d1c390614e90a68c3c2bc1dfd
  1209. [peap] Got tunneled reply RADIUS code 11
  1210. EAP-Message = 0x0108000f0650617373776f72643a20
  1211. Message-Authenticator = 0x00000000000000000000000000000000
  1212. State = 0x1d31007d1c390614e90a68c3c2bc1dfd
  1213. [peap] Got tunneled Access-Challenge
  1214. ++[eap] returns handled
  1215. Sending Access-Challenge of id 23 to 127.0.0.1 port 4308
  1216. EAP-Message = 0x0108002b19001703010020aa422a5be86bcd70b5e7ffecef5acc7f95f58212a290190a7f4caa7279dbbefc
  1217. Message-Authenticator = 0x00000000000000000000000000000000
  1218. State = 0x1767150a116f0c5fd9e6a273eb631eef
  1219. Finished request 6.
  1220. Going to the next request
  1221. Waking up in 9.7 seconds.
  1222. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=24, length=253
  1223. User-Name = "user1"
  1224. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1225. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1226. Symbol-Wlan-Index = "satishtest"
  1227. NAS-Port = 1
  1228. NAS-Port-Type = Wireless-802.11
  1229. Framed-MTU = 1400
  1230. Service-Type = Framed-User
  1231. NAS-IP-Address = 127.0.0.1
  1232. NAS-Identifier = "ap71xx-0F1AE6"
  1233. NAS-Port-Id = "radio1"
  1234. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1235. State = 0x1767150a116f0c5fd9e6a273eb631eef
  1236. EAP-Message = 0x0208002b190017030100204d06305257386554872dafd42d19e58a48420b7b12887cc1840fd864fb368fdf
  1237. Message-Authenticator = 0x087a16cb713f4750d973f24fdaacc982
  1238. +- entering group authorize {...}
  1239. ++[preprocess] returns ok
  1240. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1241. [suffix_oblic] No such realm "NULL"
  1242. ++[suffix_oblic] returns noop
  1243. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1244. [suffix_oblic_fs] No such realm "NULL"
  1245. ++[suffix_oblic_fs] returns noop
  1246. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1247. [prefix_oblic] No such realm "NULL"
  1248. ++[prefix_oblic] returns noop
  1249. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1250. [prefix_oblic_fs] No such realm "NULL"
  1251. ++[prefix_oblic_fs] returns noop
  1252. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1253. [suffix_at] No such realm "NULL"
  1254. ++[suffix_at] returns noop
  1255. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1256. [prefix_at] No such realm "NULL"
  1257. ++[prefix_at] returns noop
  1258. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1259. [suffix_percent] No such realm "NULL"
  1260. ++[suffix_percent] returns noop
  1261. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1262. [prefix_percent] No such realm "NULL"
  1263. ++[prefix_percent] returns noop
  1264. [copy_user_name] expand: %{User-Name} -> user1
  1265. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1266. ++[copy_user_name] returns ok
  1267. [passwd] Added User-Password: 'symbol123' to config_items
  1268. ++[passwd] returns ok
  1269. [ldap] rlm_ldap: performing user authorization for user1
  1270. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1271. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1272. rlm_ldap: ldap_get_conn: Checking Id: 0
  1273. rlm_ldap: ldap_get_conn: Got Id: 0
  1274. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  1275. [ldap] looking for check items in directory...
  1276. [ldap] looking for reply items in directory...
  1277. [ldap] user user1 authorized to use remote access
  1278. rlm_ldap: ldap_release_conn: Release Id: 0
  1279. ++[ldap] returns ok
  1280. ++? if (fail)
  1281. ? Evaluating (fail) -> FALSE
  1282. ++? if (fail) -> FALSE
  1283. [eap] EAP packet type response id 8 length 43
  1284. [eap] Continuing tunnel setup.
  1285. ++[eap] returns ok
  1286. [pap] Found existing Auth-Type, not changing it.
  1287. ++[pap] returns noop
  1288. ++[logintime] returns noop
  1289. Found Auth-Type = EAP
  1290. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1291. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1292. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1293. !!! Please update your configuration so that the "known good" !!!
  1294. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1295. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1296. +- entering group authenticate {...}
  1297. [eap] Request found, released from the list
  1298. [eap] EAP/peap
  1299. [eap] processing type peap
  1300. [peap] processing EAP-TLS
  1301. [peap] eaptls_verify returned 7
  1302. [peap] Done initial handshake
  1303. [peap] eaptls_process returned 7
  1304. [peap] EAPTLS_OK
  1305. [peap] Session established. Decoding tunneled attributes.
  1306. [peap] EAP type gtc
  1307. [peap] Got tunneled request
  1308. EAP-Message = 0x0208000e0673796d626f6c313233
  1309. server {
  1310. PEAP: Setting User-Name to user1
  1311. Sending tunneled request
  1312. EAP-Message = 0x0208000e0673796d626f6c313233
  1313. FreeRADIUS-Proxied-To = 127.0.0.1
  1314. User-Name = "user1"
  1315. State = 0x1d31007d1c390614e90a68c3c2bc1dfd
  1316. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1317. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1318. Symbol-Wlan-Index = "satishtest"
  1319. NAS-Port = 1
  1320. NAS-Port-Type = Wireless-802.11
  1321. Framed-MTU = 1400
  1322. Service-Type = Framed-User
  1323. NAS-IP-Address = 127.0.0.1
  1324. NAS-Identifier = "ap71xx-0F1AE6"
  1325. NAS-Port-Id = "radio1"
  1326. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1327. server {
  1328. +- entering group authorize {...}
  1329. ++[preprocess] returns ok
  1330. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1331. [suffix_oblic] No such realm "NULL"
  1332. ++[suffix_oblic] returns noop
  1333. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1334. [suffix_oblic_fs] No such realm "NULL"
  1335. ++[suffix_oblic_fs] returns noop
  1336. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1337. [prefix_oblic] No such realm "NULL"
  1338. ++[prefix_oblic] returns noop
  1339. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1340. [prefix_oblic_fs] No such realm "NULL"
  1341. ++[prefix_oblic_fs] returns noop
  1342. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1343. [suffix_at] No such realm "NULL"
  1344. ++[suffix_at] returns noop
  1345. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1346. [prefix_at] No such realm "NULL"
  1347. ++[prefix_at] returns noop
  1348. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1349. [suffix_percent] No such realm "NULL"
  1350. ++[suffix_percent] returns noop
  1351. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1352. [prefix_percent] No such realm "NULL"
  1353. ++[prefix_percent] returns noop
  1354. [copy_user_name] expand: %{User-Name} -> user1
  1355. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1356. ++[copy_user_name] returns ok
  1357. [passwd] Added User-Password: 'symbol123' to config_items
  1358. ++[passwd] returns ok
  1359. [ldap] rlm_ldap: performing user authorization for user1
  1360. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1361. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1362. rlm_ldap: ldap_get_conn: Checking Id: 0
  1363. rlm_ldap: ldap_get_conn: Got Id: 0
  1364. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  1365. [ldap] looking for check items in directory...
  1366. [ldap] looking for reply items in directory...
  1367. [ldap] user user1 authorized to use remote access
  1368. rlm_ldap: ldap_release_conn: Release Id: 0
  1369. ++[ldap] returns ok
  1370. ++? if (fail)
  1371. ? Evaluating (fail) -> FALSE
  1372. ++? if (fail) -> FALSE
  1373. [eap] EAP packet type response id 8 length 14
  1374. [eap] No EAP Start, assuming it's an on-going EAP conversation
  1375. ++[eap] returns updated
  1376. [pap] Found existing Auth-Type, not changing it.
  1377. ++[pap] returns noop
  1378. ++[logintime] returns noop
  1379. Found Auth-Type = EAP
  1380. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1381. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1382. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1383. !!! Please update your configuration so that the "known good" !!!
  1384. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1385. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1386. +- entering group authenticate {...}
  1387. [eap] Request found, released from the list
  1388. [eap] EAP/gtc
  1389. [eap] processing type gtc
  1390. [gtc] +- entering group LDAP {...}
  1391. [ldap] login attempt by "user1" with password "symbol123"
  1392. [ldap] user DN: CN=user1,CN=Users,DC=wlan,DC=com
  1393. rlm_ldap: (re)connect to 192.168.1.25:389, authentication 1
  1394. rlm_ldap: bind as CN=user1,CN=Users,DC=wlan,DC=com/symbol123 to 192.168.1.25:389
  1395. rlm_ldap: waiting for bind result ...
  1396. rlm_ldap: Bind was successful
  1397. [ldap] user user1 authenticated succesfully
  1398. ++[ldap] returns ok
  1399. rlm_eap_gtc: Everything is OK.
  1400. [eap] Freeing handler
  1401. ++[eap] returns ok
  1402. Login OK: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32 via TLS tunnel)
  1403. WARNING: Empty section. Using default return values.
  1404. } # server
  1405. [peap] Got tunneled reply code 2
  1406. EAP-Message = 0x03080004
  1407. Message-Authenticator = 0x00000000000000000000000000000000
  1408. User-Name = "user1"
  1409. [peap] Got tunneled reply RADIUS code 2
  1410. EAP-Message = 0x03080004
  1411. Message-Authenticator = 0x00000000000000000000000000000000
  1412. User-Name = "user1"
  1413. [peap] Tunneled authentication was successful.
  1414. [peap] SUCCESS
  1415. [peap] Saving tunneled attributes for later
  1416. ++[eap] returns handled
  1417. Sending Access-Challenge of id 24 to 127.0.0.1 port 4308
  1418. EAP-Message = 0x0109002b1900170301002045271eac9bd5b3595b3ce67c5e84f700d92419edbfa2f9ac47cc3719a37a9e1d
  1419. Message-Authenticator = 0x00000000000000000000000000000000
  1420. State = 0x1767150a106e0c5fd9e6a273eb631eef
  1421. Finished request 7.
  1422. Going to the next request
  1423. Waking up in 9.6 seconds.
  1424. rad_recv: Access-Request packet from host 127.0.0.1 port 4308, id=25, length=253
  1425. User-Name = "user1"
  1426. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1427. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1428. Symbol-Wlan-Index = "satishtest"
  1429. NAS-Port = 1
  1430. NAS-Port-Type = Wireless-802.11
  1431. Framed-MTU = 1400
  1432. Service-Type = Framed-User
  1433. NAS-IP-Address = 127.0.0.1
  1434. NAS-Identifier = "ap71xx-0F1AE6"
  1435. NAS-Port-Id = "radio1"
  1436. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1437. State = 0x1767150a106e0c5fd9e6a273eb631eef
  1438. EAP-Message = 0x0209002b19001703010020ce56b13c8c3886fbba2c469863bb4deb341ba3e3ecab5714590704d9c8684d58
  1439. Message-Authenticator = 0xb33c8ddb2737918d833edd24852d6022
  1440. +- entering group authorize {...}
  1441. ++[preprocess] returns ok
  1442. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1443. [suffix_oblic] No such realm "NULL"
  1444. ++[suffix_oblic] returns noop
  1445. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1446. [suffix_oblic_fs] No such realm "NULL"
  1447. ++[suffix_oblic_fs] returns noop
  1448. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1449. [prefix_oblic] No such realm "NULL"
  1450. ++[prefix_oblic] returns noop
  1451. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1452. [prefix_oblic_fs] No such realm "NULL"
  1453. ++[prefix_oblic_fs] returns noop
  1454. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1455. [suffix_at] No such realm "NULL"
  1456. ++[suffix_at] returns noop
  1457. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1458. [prefix_at] No such realm "NULL"
  1459. ++[prefix_at] returns noop
  1460. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1461. [suffix_percent] No such realm "NULL"
  1462. ++[suffix_percent] returns noop
  1463. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1464. [prefix_percent] No such realm "NULL"
  1465. ++[prefix_percent] returns noop
  1466. [copy_user_name] expand: %{User-Name} -> user1
  1467. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1468. ++[copy_user_name] returns ok
  1469. [passwd] Added User-Password: 'symbol123' to config_items
  1470. ++[passwd] returns ok
  1471. [ldap] rlm_ldap: performing user authorization for user1
  1472. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1473. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1474. rlm_ldap: ldap_get_conn: Checking Id: 0
  1475. rlm_ldap: ldap_get_conn: Got Id: 0
  1476. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  1477. [ldap] looking for check items in directory...
  1478. [ldap] looking for reply items in directory...
  1479. [ldap] user user1 authorized to use remote access
  1480. rlm_ldap: ldap_release_conn: Release Id: 0
  1481. ++[ldap] returns ok
  1482. ++? if (fail)
  1483. ? Evaluating (fail) -> FALSE
  1484. ++? if (fail) -> FALSE
  1485. [eap] EAP packet type response id 9 length 43
  1486. [eap] Continuing tunnel setup.
  1487. ++[eap] returns ok
  1488. [pap] Found existing Auth-Type, not changing it.
  1489. ++[pap] returns noop
  1490. ++[logintime] returns noop
  1491. Found Auth-Type = EAP
  1492. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1493. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1494. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1495. !!! Please update your configuration so that the "known good" !!!
  1496. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1497. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1498. +- entering group authenticate {...}
  1499. [eap] Request found, released from the list
  1500. [eap] EAP/peap
  1501. [eap] processing type peap
  1502. [peap] processing EAP-TLS
  1503. [peap] eaptls_verify returned 7
  1504. [peap] Done initial handshake
  1505. [peap] eaptls_process returned 7
  1506. [peap] EAPTLS_OK
  1507. [peap] Session established. Decoding tunneled attributes.
  1508. [peap] Received EAP-TLV response.
  1509. [peap] Success
  1510. [peap] Using saved attributes from the original Access-Accept
  1511. [eap] Freeing handler
  1512. ++[eap] returns ok
  1513. Login OK: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32)
  1514. WARNING: Empty section. Using default return values.
  1515. Sending Access-Accept of id 25 to 127.0.0.1 port 4308
  1516. User-Name = "user1"
  1517. MS-MPPE-Recv-Key = 0x4aa83deffe6c69a7b0933024fe14c4065c7d5f404505b8e556302be3315b99b6
  1518. MS-MPPE-Send-Key = 0xf9e6a63d264d2c8a790dd49fcb401c13bf8da275fb3de8c873af3701c810edd4
  1519. EAP-Message = 0x03090004
  1520. Message-Authenticator = 0x00000000000000000000000000000000
  1521. Finished request 8.
  1522. Going to the next request
  1523. Waking up in 9.6 seconds.
  1524. Cleaning up request 0 ID 17 with timestamp +5
  1525. Cleaning up request 1 ID 18 with timestamp +5
  1526. Waking up in 0.1 seconds.
  1527. Cleaning up request 2 ID 19 with timestamp +5
  1528. Cleaning up request 3 ID 20 with timestamp +5
  1529. Cleaning up request 4 ID 21 with timestamp +5
  1530. Cleaning up request 5 ID 22 with timestamp +5
  1531. Cleaning up request 6 ID 23 with timestamp +5
  1532. Cleaning up request 7 ID 24 with timestamp +5
  1533. Cleaning up request 8 ID 25 with timestamp +5
  1534. Ready to process requests.
  1535. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=26, length=202
  1536. User-Name = "user1"
  1537. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1538. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1539. Symbol-Wlan-Index = "satishtest"
  1540. NAS-Port = 1
  1541. NAS-Port-Type = Wireless-802.11
  1542. Framed-MTU = 1400
  1543. Service-Type = Framed-User
  1544. NAS-IP-Address = 127.0.0.1
  1545. NAS-Identifier = "ap71xx-0F1AE6"
  1546. NAS-Port-Id = "radio1"
  1547. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1548. EAP-Message = 0x0201000a017573657231
  1549. Message-Authenticator = 0x7adc18770b26b8d29a57bce75843ea41
  1550. +- entering group authorize {...}
  1551. ++[preprocess] returns ok
  1552. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1553. [suffix_oblic] No such realm "NULL"
  1554. ++[suffix_oblic] returns noop
  1555. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1556. [suffix_oblic_fs] No such realm "NULL"
  1557. ++[suffix_oblic_fs] returns noop
  1558. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1559. [prefix_oblic] No such realm "NULL"
  1560. ++[prefix_oblic] returns noop
  1561. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1562. [prefix_oblic_fs] No such realm "NULL"
  1563. ++[prefix_oblic_fs] returns noop
  1564. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1565. [suffix_at] No such realm "NULL"
  1566. ++[suffix_at] returns noop
  1567. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1568. [prefix_at] No such realm "NULL"
  1569. ++[prefix_at] returns noop
  1570. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1571. [suffix_percent] No such realm "NULL"
  1572. ++[suffix_percent] returns noop
  1573. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1574. [prefix_percent] No such realm "NULL"
  1575. ++[prefix_percent] returns noop
  1576. [copy_user_name] expand: %{User-Name} -> user1
  1577. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1578. ++[copy_user_name] returns ok
  1579. [passwd] Added User-Password: 'symbol123' to config_items
  1580. ++[passwd] returns ok
  1581. [ldap] rlm_ldap: performing user authorization for user1
  1582. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1583. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1584. rlm_ldap: ldap_get_conn: Checking Id: 0
  1585. rlm_ldap: ldap_get_conn: Got Id: 0
  1586. rlm_ldap: performing search in DC=wlan,DC=com, with filter (sAMAccountName=user1)
  1587. rlm_ldap: ldap_search() failed: Timed out while waiting for server to respond. Please increase the timeout.
  1588. ldap server 192.168.1.25 is dead
  1589. rlm_ldap: attempting LDAP reconnection
  1590. rlm_ldap: closing existing LDAP connection
  1591. rlm_ldap: (re)connection attempt failed
  1592. [ldap] search failed
  1593. rlm_ldap: ldap_release_conn: Release Id: 0
  1594. ++[ldap] returns fail
  1595. ++? if (fail)
  1596. ? Evaluating (fail) -> TRUE
  1597. ++? if (fail) -> TRUE
  1598. ++- entering if (fail) {...}
  1599. [files] users: Matched entry DEFAULT at line 11
  1600. [files] users: Matched entry DEFAULT at line 14
  1601. +++[files] returns ok
  1602. ++- if (fail) returns ok
  1603. [eap] EAP packet type response id 1 length 10
  1604. [eap] No EAP Start, assuming it's an on-going EAP conversation
  1605. ++[eap] returns updated
  1606. [pap] Found existing Auth-Type, not changing it.
  1607. ++[pap] returns noop
  1608. ++[logintime] returns noop
  1609. Found Auth-Type = Local
  1610. Found Auth-Type = EAP
  1611. Warning: Found 2 auth-types on request for user 'user1'
  1612. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1613. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1614. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1615. !!! Please update your configuration so that the "known good" !!!
  1616. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1617. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1618. +- entering group authenticate {...}
  1619. [eap] EAP Identity
  1620. [eap] processing type tls
  1621. [tls] Requiring client certificate
  1622. [tls] Initiate
  1623. [tls] Start returned 1
  1624. ++[eap] returns handled
  1625. Sending Access-Challenge of id 26 to 127.0.0.1 port 4309
  1626. EAP-Message = 0x010200060d20
  1627. Message-Authenticator = 0x00000000000000000000000000000000
  1628. State = 0x3242113932401ce0cdd9a600676a5050
  1629. Finished request 9.
  1630. Going to the next request
  1631. Waking up in 9.9 seconds.
  1632. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=26, length=202
  1633. Sending duplicate reply to client localhost port 4309 - ID: 26
  1634. Sending Access-Challenge of id 26 to 127.0.0.1 port 4309
  1635. Waking up in 9.9 seconds.
  1636. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=27, length=216
  1637. User-Name = "user1"
  1638. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1639. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1640. Symbol-Wlan-Index = "satishtest"
  1641. NAS-Port = 1
  1642. NAS-Port-Type = Wireless-802.11
  1643. Framed-MTU = 1400
  1644. Service-Type = Framed-User
  1645. NAS-IP-Address = 127.0.0.1
  1646. NAS-Identifier = "ap71xx-0F1AE6"
  1647. NAS-Port-Id = "radio1"
  1648. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1649. State = 0x3242113932401ce0cdd9a600676a5050
  1650. EAP-Message = 0x020200060319
  1651. Message-Authenticator = 0xb1b902b458654cf52c0494483a133c1a
  1652. +- entering group authorize {...}
  1653. ++[preprocess] returns ok
  1654. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1655. [suffix_oblic] No such realm "NULL"
  1656. ++[suffix_oblic] returns noop
  1657. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1658. [suffix_oblic_fs] No such realm "NULL"
  1659. ++[suffix_oblic_fs] returns noop
  1660. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1661. [prefix_oblic] No such realm "NULL"
  1662. ++[prefix_oblic] returns noop
  1663. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1664. [prefix_oblic_fs] No such realm "NULL"
  1665. ++[prefix_oblic_fs] returns noop
  1666. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1667. [suffix_at] No such realm "NULL"
  1668. ++[suffix_at] returns noop
  1669. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1670. [prefix_at] No such realm "NULL"
  1671. ++[prefix_at] returns noop
  1672. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1673. [suffix_percent] No such realm "NULL"
  1674. ++[suffix_percent] returns noop
  1675. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1676. [prefix_percent] No such realm "NULL"
  1677. ++[prefix_percent] returns noop
  1678. [copy_user_name] expand: %{User-Name} -> user1
  1679. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1680. ++[copy_user_name] returns ok
  1681. [passwd] Added User-Password: 'symbol123' to config_items
  1682. ++[passwd] returns ok
  1683. [ldap] rlm_ldap: performing user authorization for user1
  1684. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1685. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1686. rlm_ldap: ldap_get_conn: Checking Id: 0
  1687. rlm_ldap: ldap_get_conn: Got Id: 0
  1688. [ldap] search failed
  1689. rlm_ldap: ldap_release_conn: Release Id: 0
  1690. ++[ldap] returns fail
  1691. ++? if (fail)
  1692. ? Evaluating (fail) -> TRUE
  1693. ++? if (fail) -> TRUE
  1694. ++- entering if (fail) {...}
  1695. [files] users: Matched entry DEFAULT at line 11
  1696. [files] users: Matched entry DEFAULT at line 14
  1697. +++[files] returns ok
  1698. ++- if (fail) returns ok
  1699. [eap] EAP packet type response id 2 length 6
  1700. [eap] No EAP Start, assuming it's an on-going EAP conversation
  1701. ++[eap] returns updated
  1702. [pap] Found existing Auth-Type, not changing it.
  1703. ++[pap] returns noop
  1704. ++[logintime] returns noop
  1705. Found Auth-Type = Local
  1706. Found Auth-Type = EAP
  1707. Warning: Found 2 auth-types on request for user 'user1'
  1708. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1709. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1710. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1711. !!! Please update your configuration so that the "known good" !!!
  1712. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1713. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1714. +- entering group authenticate {...}
  1715. [eap] Request found, released from the list
  1716. [eap] EAP NAK
  1717. [eap] EAP-NAK asked for EAP-Type/peap
  1718. [eap] processing type tls
  1719. [tls] Initiate
  1720. [tls] Start returned 1
  1721. ++[eap] returns handled
  1722. Sending Access-Challenge of id 27 to 127.0.0.1 port 4309
  1723. EAP-Message = 0x010300061920
  1724. Message-Authenticator = 0x00000000000000000000000000000000
  1725. State = 0x32421139334108e0cdd9a600676a5050
  1726. Finished request 10.
  1727. Going to the next request
  1728. Waking up in 9.9 seconds.
  1729. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=28, length=292
  1730. User-Name = "user1"
  1731. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1732. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1733. Symbol-Wlan-Index = "satishtest"
  1734. NAS-Port = 1
  1735. NAS-Port-Type = Wireless-802.11
  1736. Framed-MTU = 1400
  1737. Service-Type = Framed-User
  1738. NAS-IP-Address = 127.0.0.1
  1739. NAS-Identifier = "ap71xx-0F1AE6"
  1740. NAS-Port-Id = "radio1"
  1741. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1742. State = 0x32421139334108e0cdd9a600676a5050
  1743. EAP-Message = 0x0203005219800000004816030100430100003f03014dc4cdb8db582308ca33b1f2e7257b808d8d5cff9d6be7da1af3d6e45d5a7f2a00001800390038003300320016001300660035002f000a000500040100
  1744. Message-Authenticator = 0xd5fca223573c313bc675f849e2512dfc
  1745. +- entering group authorize {...}
  1746. ++[preprocess] returns ok
  1747. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1748. [suffix_oblic] No such realm "NULL"
  1749. ++[suffix_oblic] returns noop
  1750. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1751. [suffix_oblic_fs] No such realm "NULL"
  1752. ++[suffix_oblic_fs] returns noop
  1753. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1754. [prefix_oblic] No such realm "NULL"
  1755. ++[prefix_oblic] returns noop
  1756. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1757. [prefix_oblic_fs] No such realm "NULL"
  1758. ++[prefix_oblic_fs] returns noop
  1759. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1760. [suffix_at] No such realm "NULL"
  1761. ++[suffix_at] returns noop
  1762. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1763. [prefix_at] No such realm "NULL"
  1764. ++[prefix_at] returns noop
  1765. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1766. [suffix_percent] No such realm "NULL"
  1767. ++[suffix_percent] returns noop
  1768. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1769. [prefix_percent] No such realm "NULL"
  1770. ++[prefix_percent] returns noop
  1771. [copy_user_name] expand: %{User-Name} -> user1
  1772. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1773. ++[copy_user_name] returns ok
  1774. [passwd] Added User-Password: 'symbol123' to config_items
  1775. ++[passwd] returns ok
  1776. [ldap] rlm_ldap: performing user authorization for user1
  1777. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1778. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1779. rlm_ldap: ldap_get_conn: Checking Id: 0
  1780. rlm_ldap: ldap_get_conn: Got Id: 0
  1781. [ldap] search failed
  1782. rlm_ldap: ldap_release_conn: Release Id: 0
  1783. ++[ldap] returns fail
  1784. ++? if (fail)
  1785. ? Evaluating (fail) -> TRUE
  1786. ++? if (fail) -> TRUE
  1787. ++- entering if (fail) {...}
  1788. [files] users: Matched entry DEFAULT at line 11
  1789. [files] users: Matched entry DEFAULT at line 14
  1790. +++[files] returns ok
  1791. ++- if (fail) returns ok
  1792. [eap] EAP packet type response id 3 length 82
  1793. [eap] Continuing tunnel setup.
  1794. ++[eap] returns ok
  1795. [pap] Found existing Auth-Type, not changing it.
  1796. ++[pap] returns noop
  1797. ++[logintime] returns noop
  1798. Found Auth-Type = Local
  1799. Found Auth-Type = EAP
  1800. Warning: Found 2 auth-types on request for user 'user1'
  1801. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1802. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1803. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1804. !!! Please update your configuration so that the "known good" !!!
  1805. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1806. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1807. +- entering group authenticate {...}
  1808. [eap] Request found, released from the list
  1809. [eap] EAP/peap
  1810. [eap] processing type peap
  1811. [peap] processing EAP-TLS
  1812. TLS Length 72
  1813. [peap] Length Included
  1814. [peap] eaptls_verify returned 11
  1815. [peap] (other): before/accept initialization
  1816. [peap] TLS_accept: before/accept initialization
  1817. [peap] <<< TLS 1.0 Handshake [length 0043], ClientHello
  1818. [peap] TLS_accept: SSLv3 read client hello A
  1819. [peap] >>> TLS 1.0 Handshake [length 002a], ServerHello
  1820. [peap] TLS_accept: SSLv3 write server hello A
  1821. [peap] >>> TLS 1.0 Handshake [length 01e2], Certificate
  1822. [peap] TLS_accept: SSLv3 write certificate A
  1823. [peap] >>> TLS 1.0 Handshake [length 018d], ServerKeyExchange
  1824. [peap] TLS_accept: SSLv3 write key exchange A
  1825. [peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
  1826. [peap] TLS_accept: SSLv3 write server done A
  1827. [peap] TLS_accept: SSLv3 flush data
  1828. [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A
  1829. In SSL Handshake Phase
  1830. In SSL Accept mode
  1831. [peap] eaptls_process returned 13
  1832. [peap] EAPTLS_HANDLED
  1833. ++[eap] returns handled
  1834. Sending Access-Challenge of id 28 to 127.0.0.1 port 4309
  1835. EAP-Message = 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
  1836. EAP-Message = 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
  1837. EAP-Message = 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
  1838. EAP-Message = 0x1b3731ac7d0539deb1f0136fdf30309138c24488e4ec1aad17e7781eb2c7038bd2cc8d95390bfbe91210a96f287f5c7145daacb56e008017752c6dc4577da258c6d7a55797826fde1f848ef00ad83b65dc7fc50d28fc07a30850013344d49fad361df6148d2e74a4e499185658ea81e38c290adbfd2bc8eae16482f0cffe7ca6ea6871ea6c4a1b0b6c9940af20dcaae86e085f7cbf7c03a7372a7ccc18d397bd7396af376fc491f43e15018fa1e711d8bd7198fb42ae5716030100040e000000
  1839. Message-Authenticator = 0x00000000000000000000000000000000
  1840. State = 0x32421139304608e0cdd9a600676a5050
  1841. Finished request 11.
  1842. Going to the next request
  1843. Waking up in 9.8 seconds.
  1844. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=29, length=418
  1845. User-Name = "user1"
  1846. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1847. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1848. Symbol-Wlan-Index = "satishtest"
  1849. NAS-Port = 1
  1850. NAS-Port-Type = Wireless-802.11
  1851. Framed-MTU = 1400
  1852. Service-Type = Framed-User
  1853. NAS-IP-Address = 127.0.0.1
  1854. NAS-Identifier = "ap71xx-0F1AE6"
  1855. NAS-Port-Id = "radio1"
  1856. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1857. State = 0x32421139304608e0cdd9a600676a5050
  1858. EAP-Message = 0x020400d01980000000c61603010086100000820080accf115f032bf15c0be3eef663b732225ef723b94aa4b945c51b8e6c1c5f64794444c0dc511765cde5b2b80d4fda225380e602678a58afa91f54da41cc2e04a0e660a1d521f3f2fb03dec16c629c4f1038366f429050ed5b195a32ad5a3a317c904ca11f679fd508e1daffe044c42d65172c1a6fac737228aa959bd018a74fa21403010001011603010030397eefc885e1772eae336c11b1aa239e4c9fff7de03660ff403821b62034a22b737d3ff43ffb833357481fc1c8542764
  1859. Message-Authenticator = 0x6319dc2cf19574dd2fcb2cc64e6e0bdb
  1860. +- entering group authorize {...}
  1861. ++[preprocess] returns ok
  1862. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1863. [suffix_oblic] No such realm "NULL"
  1864. ++[suffix_oblic] returns noop
  1865. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1866. [suffix_oblic_fs] No such realm "NULL"
  1867. ++[suffix_oblic_fs] returns noop
  1868. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1869. [prefix_oblic] No such realm "NULL"
  1870. ++[prefix_oblic] returns noop
  1871. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1872. [prefix_oblic_fs] No such realm "NULL"
  1873. ++[prefix_oblic_fs] returns noop
  1874. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1875. [suffix_at] No such realm "NULL"
  1876. ++[suffix_at] returns noop
  1877. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1878. [prefix_at] No such realm "NULL"
  1879. ++[prefix_at] returns noop
  1880. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1881. [suffix_percent] No such realm "NULL"
  1882. ++[suffix_percent] returns noop
  1883. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1884. [prefix_percent] No such realm "NULL"
  1885. ++[prefix_percent] returns noop
  1886. [copy_user_name] expand: %{User-Name} -> user1
  1887. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1888. ++[copy_user_name] returns ok
  1889. [passwd] Added User-Password: 'symbol123' to config_items
  1890. ++[passwd] returns ok
  1891. [ldap] rlm_ldap: performing user authorization for user1
  1892. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  1893. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  1894. rlm_ldap: ldap_get_conn: Checking Id: 0
  1895. rlm_ldap: ldap_get_conn: Got Id: 0
  1896. [ldap] search failed
  1897. rlm_ldap: ldap_release_conn: Release Id: 0
  1898. ++[ldap] returns fail
  1899. ++? if (fail)
  1900. ? Evaluating (fail) -> TRUE
  1901. ++? if (fail) -> TRUE
  1902. ++- entering if (fail) {...}
  1903. [files] users: Matched entry DEFAULT at line 11
  1904. [files] users: Matched entry DEFAULT at line 14
  1905. +++[files] returns ok
  1906. ++- if (fail) returns ok
  1907. [eap] EAP packet type response id 4 length 208
  1908. [eap] Continuing tunnel setup.
  1909. ++[eap] returns ok
  1910. [pap] Found existing Auth-Type, not changing it.
  1911. ++[pap] returns noop
  1912. ++[logintime] returns noop
  1913. Found Auth-Type = Local
  1914. Found Auth-Type = EAP
  1915. Warning: Found 2 auth-types on request for user 'user1'
  1916. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1917. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  1918. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1919. !!! Please update your configuration so that the "known good" !!!
  1920. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  1921. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  1922. +- entering group authenticate {...}
  1923. [eap] Request found, released from the list
  1924. [eap] EAP/peap
  1925. [eap] processing type peap
  1926. [peap] processing EAP-TLS
  1927. TLS Length 198
  1928. [peap] Length Included
  1929. [peap] eaptls_verify returned 11
  1930. [peap] <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange
  1931. [peap] TLS_accept: SSLv3 read client key exchange A
  1932. [peap] <<< TLS 1.0 ChangeCipherSpec [length 0001]
  1933. [peap] <<< TLS 1.0 Handshake [length 0010], Finished
  1934. [peap] TLS_accept: SSLv3 read finished A
  1935. [peap] >>> TLS 1.0 ChangeCipherSpec [length 0001]
  1936. [peap] TLS_accept: SSLv3 write change cipher spec A
  1937. [peap] >>> TLS 1.0 Handshake [length 0010], Finished
  1938. [peap] TLS_accept: SSLv3 write finished A
  1939. [peap] TLS_accept: SSLv3 flush data
  1940. [peap] (other): SSL negotiation finished successfully
  1941. SSL Connection Established
  1942. [peap] eaptls_process returned 13
  1943. [peap] EAPTLS_HANDLED
  1944. ++[eap] returns handled
  1945. Sending Access-Challenge of id 29 to 127.0.0.1 port 4309
  1946. EAP-Message = 0x010500411900140301000101160301003070b885222506dd9e8454456a639567b79c1e1d5a9e2ae3c1088f577b0da48622780320eea7e9dab7c7d391e3fb0eeb25
  1947. Message-Authenticator = 0x00000000000000000000000000000000
  1948. State = 0x32421139314708e0cdd9a600676a5050
  1949. Finished request 12.
  1950. Going to the next request
  1951. Waking up in 9.8 seconds.
  1952. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=30, length=216
  1953. User-Name = "user1"
  1954. Calling-Station-Id = "00-13-CE-F0-6E-32"
  1955. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  1956. Symbol-Wlan-Index = "satishtest"
  1957. NAS-Port = 1
  1958. NAS-Port-Type = Wireless-802.11
  1959. Framed-MTU = 1400
  1960. Service-Type = Framed-User
  1961. NAS-IP-Address = 127.0.0.1
  1962. NAS-Identifier = "ap71xx-0F1AE6"
  1963. NAS-Port-Id = "radio1"
  1964. Connect-Info = "CONNECT 54Mbps 802.11bg"
  1965. State = 0x32421139314708e0cdd9a600676a5050
  1966. EAP-Message = 0x020500061900
  1967. Message-Authenticator = 0xe4ed1578687e1802a943c5b2af4fb11b
  1968. +- entering group authorize {...}
  1969. ++[preprocess] returns ok
  1970. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1971. [suffix_oblic] No such realm "NULL"
  1972. ++[suffix_oblic] returns noop
  1973. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1974. [suffix_oblic_fs] No such realm "NULL"
  1975. ++[suffix_oblic_fs] returns noop
  1976. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  1977. [prefix_oblic] No such realm "NULL"
  1978. ++[prefix_oblic] returns noop
  1979. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  1980. [prefix_oblic_fs] No such realm "NULL"
  1981. ++[prefix_oblic_fs] returns noop
  1982. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  1983. [suffix_at] No such realm "NULL"
  1984. ++[suffix_at] returns noop
  1985. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  1986. [prefix_at] No such realm "NULL"
  1987. ++[prefix_at] returns noop
  1988. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1989. [suffix_percent] No such realm "NULL"
  1990. ++[suffix_percent] returns noop
  1991. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  1992. [prefix_percent] No such realm "NULL"
  1993. ++[prefix_percent] returns noop
  1994. [copy_user_name] expand: %{User-Name} -> user1
  1995. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  1996. ++[copy_user_name] returns ok
  1997. [passwd] Added User-Password: 'symbol123' to config_items
  1998. ++[passwd] returns ok
  1999. [ldap] rlm_ldap: performing user authorization for user1
  2000. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2001. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2002. rlm_ldap: ldap_get_conn: Checking Id: 0
  2003. rlm_ldap: ldap_get_conn: Got Id: 0
  2004. [ldap] search failed
  2005. rlm_ldap: ldap_release_conn: Release Id: 0
  2006. ++[ldap] returns fail
  2007. ++? if (fail)
  2008. ? Evaluating (fail) -> TRUE
  2009. ++? if (fail) -> TRUE
  2010. ++- entering if (fail) {...}
  2011. [files] users: Matched entry DEFAULT at line 11
  2012. [files] users: Matched entry DEFAULT at line 14
  2013. +++[files] returns ok
  2014. ++- if (fail) returns ok
  2015. [eap] EAP packet type response id 5 length 6
  2016. [eap] Continuing tunnel setup.
  2017. ++[eap] returns ok
  2018. [pap] Found existing Auth-Type, not changing it.
  2019. ++[pap] returns noop
  2020. ++[logintime] returns noop
  2021. Found Auth-Type = Local
  2022. Found Auth-Type = EAP
  2023. Warning: Found 2 auth-types on request for user 'user1'
  2024. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2025. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2026. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2027. !!! Please update your configuration so that the "known good" !!!
  2028. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2029. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2030. +- entering group authenticate {...}
  2031. [eap] Request found, released from the list
  2032. [eap] EAP/peap
  2033. [eap] processing type peap
  2034. [peap] processing EAP-TLS
  2035. [peap] Received TLS ACK
  2036. [peap] ACK handshake is finished
  2037. [peap] eaptls_verify returned 3
  2038. [peap] eaptls_process returned 3
  2039. [peap] EAPTLS_SUCCESS
  2040. ++[eap] returns handled
  2041. Sending Access-Challenge of id 30 to 127.0.0.1 port 4309
  2042. EAP-Message = 0x0106002b19001703010020dfab115b9c32da63750eafcdb690475e1d75ac41257b5e4c2839d67f504f5807
  2043. Message-Authenticator = 0x00000000000000000000000000000000
  2044. State = 0x32421139364408e0cdd9a600676a5050
  2045. Finished request 13.
  2046. Going to the next request
  2047. Waking up in 9.7 seconds.
  2048. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=31, length=253
  2049. User-Name = "user1"
  2050. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2051. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2052. Symbol-Wlan-Index = "satishtest"
  2053. NAS-Port = 1
  2054. NAS-Port-Type = Wireless-802.11
  2055. Framed-MTU = 1400
  2056. Service-Type = Framed-User
  2057. NAS-IP-Address = 127.0.0.1
  2058. NAS-Identifier = "ap71xx-0F1AE6"
  2059. NAS-Port-Id = "radio1"
  2060. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2061. State = 0x32421139364408e0cdd9a600676a5050
  2062. EAP-Message = 0x0206002b190017030100209818bbc502f5a2e491a632d5bc7a15f97ecdf202070d2a5c06ce6b62a3bb3260
  2063. Message-Authenticator = 0x06fb79fb782b1ed3a6b4a57cacfdec32
  2064. +- entering group authorize {...}
  2065. ++[preprocess] returns ok
  2066. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2067. [suffix_oblic] No such realm "NULL"
  2068. ++[suffix_oblic] returns noop
  2069. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2070. [suffix_oblic_fs] No such realm "NULL"
  2071. ++[suffix_oblic_fs] returns noop
  2072. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2073. [prefix_oblic] No such realm "NULL"
  2074. ++[prefix_oblic] returns noop
  2075. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2076. [prefix_oblic_fs] No such realm "NULL"
  2077. ++[prefix_oblic_fs] returns noop
  2078. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2079. [suffix_at] No such realm "NULL"
  2080. ++[suffix_at] returns noop
  2081. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2082. [prefix_at] No such realm "NULL"
  2083. ++[prefix_at] returns noop
  2084. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2085. [suffix_percent] No such realm "NULL"
  2086. ++[suffix_percent] returns noop
  2087. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2088. [prefix_percent] No such realm "NULL"
  2089. ++[prefix_percent] returns noop
  2090. [copy_user_name] expand: %{User-Name} -> user1
  2091. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2092. ++[copy_user_name] returns ok
  2093. [passwd] Added User-Password: 'symbol123' to config_items
  2094. ++[passwd] returns ok
  2095. [ldap] rlm_ldap: performing user authorization for user1
  2096. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2097. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2098. rlm_ldap: ldap_get_conn: Checking Id: 0
  2099. rlm_ldap: ldap_get_conn: Got Id: 0
  2100. [ldap] search failed
  2101. rlm_ldap: ldap_release_conn: Release Id: 0
  2102. ++[ldap] returns fail
  2103. ++? if (fail)
  2104. ? Evaluating (fail) -> TRUE
  2105. ++? if (fail) -> TRUE
  2106. ++- entering if (fail) {...}
  2107. [files] users: Matched entry DEFAULT at line 11
  2108. [files] users: Matched entry DEFAULT at line 14
  2109. +++[files] returns ok
  2110. ++- if (fail) returns ok
  2111. [eap] EAP packet type response id 6 length 43
  2112. [eap] Continuing tunnel setup.
  2113. ++[eap] returns ok
  2114. [pap] Found existing Auth-Type, not changing it.
  2115. ++[pap] returns noop
  2116. ++[logintime] returns noop
  2117. Found Auth-Type = Local
  2118. Found Auth-Type = EAP
  2119. Warning: Found 2 auth-types on request for user 'user1'
  2120. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2121. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2122. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2123. !!! Please update your configuration so that the "known good" !!!
  2124. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2125. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2126. +- entering group authenticate {...}
  2127. [eap] Request found, released from the list
  2128. [eap] EAP/peap
  2129. [eap] processing type peap
  2130. [peap] processing EAP-TLS
  2131. [peap] eaptls_verify returned 7
  2132. [peap] Done initial handshake
  2133. [peap] eaptls_process returned 7
  2134. [peap] EAPTLS_OK
  2135. [peap] Session established. Decoding tunneled attributes.
  2136. [peap] Identity - user1
  2137. [peap] Got tunneled request
  2138. EAP-Message = 0x0206000a017573657231
  2139. server {
  2140. PEAP: Got tunneled identity of user1
  2141. PEAP: Setting default EAP type for tunneled EAP session.
  2142. PEAP: Setting User-Name to user1
  2143. Sending tunneled request
  2144. EAP-Message = 0x0206000a017573657231
  2145. FreeRADIUS-Proxied-To = 127.0.0.1
  2146. User-Name = "user1"
  2147. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2148. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2149. Symbol-Wlan-Index = "satishtest"
  2150. NAS-Port = 1
  2151. NAS-Port-Type = Wireless-802.11
  2152. Framed-MTU = 1400
  2153. Service-Type = Framed-User
  2154. NAS-IP-Address = 127.0.0.1
  2155. NAS-Identifier = "ap71xx-0F1AE6"
  2156. NAS-Port-Id = "radio1"
  2157. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2158. server {
  2159. +- entering group authorize {...}
  2160. ++[preprocess] returns ok
  2161. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2162. [suffix_oblic] No such realm "NULL"
  2163. ++[suffix_oblic] returns noop
  2164. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2165. [suffix_oblic_fs] No such realm "NULL"
  2166. ++[suffix_oblic_fs] returns noop
  2167. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2168. [prefix_oblic] No such realm "NULL"
  2169. ++[prefix_oblic] returns noop
  2170. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2171. [prefix_oblic_fs] No such realm "NULL"
  2172. ++[prefix_oblic_fs] returns noop
  2173. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2174. [suffix_at] No such realm "NULL"
  2175. ++[suffix_at] returns noop
  2176. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2177. [prefix_at] No such realm "NULL"
  2178. ++[prefix_at] returns noop
  2179. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2180. [suffix_percent] No such realm "NULL"
  2181. ++[suffix_percent] returns noop
  2182. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2183. [prefix_percent] No such realm "NULL"
  2184. ++[prefix_percent] returns noop
  2185. [copy_user_name] expand: %{User-Name} -> user1
  2186. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2187. ++[copy_user_name] returns ok
  2188. [passwd] Added User-Password: 'symbol123' to config_items
  2189. ++[passwd] returns ok
  2190. [ldap] rlm_ldap: performing user authorization for user1
  2191. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2192. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2193. rlm_ldap: ldap_get_conn: Checking Id: 0
  2194. rlm_ldap: ldap_get_conn: Got Id: 0
  2195. [ldap] search failed
  2196. rlm_ldap: ldap_release_conn: Release Id: 0
  2197. ++[ldap] returns fail
  2198. ++? if (fail)
  2199. ? Evaluating (fail) -> TRUE
  2200. ++? if (fail) -> TRUE
  2201. ++- entering if (fail) {...}
  2202. [files] users: Matched entry DEFAULT at line 11
  2203. [files] users: Matched entry DEFAULT at line 14
  2204. +++[files] returns ok
  2205. ++- if (fail) returns ok
  2206. [eap] EAP packet type response id 6 length 10
  2207. [eap] No EAP Start, assuming it's an on-going EAP conversation
  2208. ++[eap] returns updated
  2209. [pap] Found existing Auth-Type, not changing it.
  2210. ++[pap] returns noop
  2211. ++[logintime] returns noop
  2212. Found Auth-Type = Local
  2213. Found Auth-Type = EAP
  2214. Warning: Found 2 auth-types on request for user 'user1'
  2215. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2216. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2217. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2218. !!! Please update your configuration so that the "known good" !!!
  2219. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2220. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2221. +- entering group authenticate {...}
  2222. [eap] EAP Identity
  2223. [eap] processing type md5
  2224. rlm_eap_md5: Issuing Challenge
  2225. ++[eap] returns handled
  2226. } # server
  2227. [peap] Got tunneled reply code 11
  2228. EAP-Message = 0x01070016041019ed963995bc776f3125ddba2453a396
  2229. Message-Authenticator = 0x00000000000000000000000000000000
  2230. State = 0x6d9071606d977598c78a8e1756dd74ff
  2231. [peap] Got tunneled reply RADIUS code 11
  2232. EAP-Message = 0x01070016041019ed963995bc776f3125ddba2453a396
  2233. Message-Authenticator = 0x00000000000000000000000000000000
  2234. State = 0x6d9071606d977598c78a8e1756dd74ff
  2235. [peap] Got tunneled Access-Challenge
  2236. ++[eap] returns handled
  2237. Sending Access-Challenge of id 31 to 127.0.0.1 port 4309
  2238. EAP-Message = 0x0107003b190017030100300bf5c82c72096a11a803f93fa15829422a2d3a5be82cf3b5bd03ecf94fec417fb121a204971651c11606e52ea222e7e8
  2239. Message-Authenticator = 0x00000000000000000000000000000000
  2240. State = 0x32421139374508e0cdd9a600676a5050
  2241. Finished request 14.
  2242. Going to the next request
  2243. Waking up in 9.7 seconds.
  2244. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=32, length=253
  2245. User-Name = "user1"
  2246. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2247. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2248. Symbol-Wlan-Index = "satishtest"
  2249. NAS-Port = 1
  2250. NAS-Port-Type = Wireless-802.11
  2251. Framed-MTU = 1400
  2252. Service-Type = Framed-User
  2253. NAS-IP-Address = 127.0.0.1
  2254. NAS-Identifier = "ap71xx-0F1AE6"
  2255. NAS-Port-Id = "radio1"
  2256. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2257. State = 0x32421139374508e0cdd9a600676a5050
  2258. EAP-Message = 0x0207002b19001703010020c53b0eedde31d09e761afe398c4219f0832aedb66c7f88e6c6708edfa98ffb53
  2259. Message-Authenticator = 0x03983287607e0bcb44a38d3eb3fcbd47
  2260. +- entering group authorize {...}
  2261. ++[preprocess] returns ok
  2262. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2263. [suffix_oblic] No such realm "NULL"
  2264. ++[suffix_oblic] returns noop
  2265. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2266. [suffix_oblic_fs] No such realm "NULL"
  2267. ++[suffix_oblic_fs] returns noop
  2268. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2269. [prefix_oblic] No such realm "NULL"
  2270. ++[prefix_oblic] returns noop
  2271. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2272. [prefix_oblic_fs] No such realm "NULL"
  2273. ++[prefix_oblic_fs] returns noop
  2274. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2275. [suffix_at] No such realm "NULL"
  2276. ++[suffix_at] returns noop
  2277. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2278. [prefix_at] No such realm "NULL"
  2279. ++[prefix_at] returns noop
  2280. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2281. [suffix_percent] No such realm "NULL"
  2282. ++[suffix_percent] returns noop
  2283. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2284. [prefix_percent] No such realm "NULL"
  2285. ++[prefix_percent] returns noop
  2286. [copy_user_name] expand: %{User-Name} -> user1
  2287. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2288. ++[copy_user_name] returns ok
  2289. [passwd] Added User-Password: 'symbol123' to config_items
  2290. ++[passwd] returns ok
  2291. [ldap] rlm_ldap: performing user authorization for user1
  2292. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2293. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2294. rlm_ldap: ldap_get_conn: Checking Id: 0
  2295. rlm_ldap: ldap_get_conn: Got Id: 0
  2296. [ldap] search failed
  2297. rlm_ldap: ldap_release_conn: Release Id: 0
  2298. ++[ldap] returns fail
  2299. ++? if (fail)
  2300. ? Evaluating (fail) -> TRUE
  2301. ++? if (fail) -> TRUE
  2302. ++- entering if (fail) {...}
  2303. [files] users: Matched entry DEFAULT at line 11
  2304. [files] users: Matched entry DEFAULT at line 14
  2305. +++[files] returns ok
  2306. ++- if (fail) returns ok
  2307. [eap] EAP packet type response id 7 length 43
  2308. [eap] Continuing tunnel setup.
  2309. ++[eap] returns ok
  2310. [pap] Found existing Auth-Type, not changing it.
  2311. ++[pap] returns noop
  2312. ++[logintime] returns noop
  2313. Found Auth-Type = Local
  2314. Found Auth-Type = EAP
  2315. Warning: Found 2 auth-types on request for user 'user1'
  2316. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2317. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2318. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2319. !!! Please update your configuration so that the "known good" !!!
  2320. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2321. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2322. +- entering group authenticate {...}
  2323. [eap] Request found, released from the list
  2324. [eap] EAP/peap
  2325. [eap] processing type peap
  2326. [peap] processing EAP-TLS
  2327. [peap] eaptls_verify returned 7
  2328. [peap] Done initial handshake
  2329. [peap] eaptls_process returned 7
  2330. [peap] EAPTLS_OK
  2331. [peap] Session established. Decoding tunneled attributes.
  2332. [peap] EAP type nak
  2333. [peap] Got tunneled request
  2334. EAP-Message = 0x020700060306
  2335. server {
  2336. PEAP: Setting User-Name to user1
  2337. Sending tunneled request
  2338. EAP-Message = 0x020700060306
  2339. FreeRADIUS-Proxied-To = 127.0.0.1
  2340. User-Name = "user1"
  2341. State = 0x6d9071606d977598c78a8e1756dd74ff
  2342. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2343. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2344. Symbol-Wlan-Index = "satishtest"
  2345. NAS-Port = 1
  2346. NAS-Port-Type = Wireless-802.11
  2347. Framed-MTU = 1400
  2348. Service-Type = Framed-User
  2349. NAS-IP-Address = 127.0.0.1
  2350. NAS-Identifier = "ap71xx-0F1AE6"
  2351. NAS-Port-Id = "radio1"
  2352. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2353. server {
  2354. +- entering group authorize {...}
  2355. ++[preprocess] returns ok
  2356. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2357. [suffix_oblic] No such realm "NULL"
  2358. ++[suffix_oblic] returns noop
  2359. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2360. [suffix_oblic_fs] No such realm "NULL"
  2361. ++[suffix_oblic_fs] returns noop
  2362. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2363. [prefix_oblic] No such realm "NULL"
  2364. ++[prefix_oblic] returns noop
  2365. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2366. [prefix_oblic_fs] No such realm "NULL"
  2367. ++[prefix_oblic_fs] returns noop
  2368. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2369. [suffix_at] No such realm "NULL"
  2370. ++[suffix_at] returns noop
  2371. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2372. [prefix_at] No such realm "NULL"
  2373. ++[prefix_at] returns noop
  2374. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2375. [suffix_percent] No such realm "NULL"
  2376. ++[suffix_percent] returns noop
  2377. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2378. [prefix_percent] No such realm "NULL"
  2379. ++[prefix_percent] returns noop
  2380. [copy_user_name] expand: %{User-Name} -> user1
  2381. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2382. ++[copy_user_name] returns ok
  2383. [passwd] Added User-Password: 'symbol123' to config_items
  2384. ++[passwd] returns ok
  2385. [ldap] rlm_ldap: performing user authorization for user1
  2386. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2387. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2388. rlm_ldap: ldap_get_conn: Checking Id: 0
  2389. rlm_ldap: ldap_get_conn: Got Id: 0
  2390. [ldap] search failed
  2391. rlm_ldap: ldap_release_conn: Release Id: 0
  2392. ++[ldap] returns fail
  2393. ++? if (fail)
  2394. ? Evaluating (fail) -> TRUE
  2395. ++? if (fail) -> TRUE
  2396. ++- entering if (fail) {...}
  2397. [files] users: Matched entry DEFAULT at line 11
  2398. [files] users: Matched entry DEFAULT at line 14
  2399. +++[files] returns ok
  2400. ++- if (fail) returns ok
  2401. [eap] EAP packet type response id 7 length 6
  2402. [eap] No EAP Start, assuming it's an on-going EAP conversation
  2403. ++[eap] returns updated
  2404. [pap] Found existing Auth-Type, not changing it.
  2405. ++[pap] returns noop
  2406. ++[logintime] returns noop
  2407. Found Auth-Type = Local
  2408. Found Auth-Type = EAP
  2409. Warning: Found 2 auth-types on request for user 'user1'
  2410. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2411. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2412. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2413. !!! Please update your configuration so that the "known good" !!!
  2414. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2415. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2416. +- entering group authenticate {...}
  2417. [eap] Request found, released from the list
  2418. [eap] EAP NAK
  2419. [eap] EAP-NAK asked for EAP-Type/gtc
  2420. [eap] processing type gtc
  2421. ++[eap] returns handled
  2422. } # server
  2423. [peap] Got tunneled reply code 11
  2424. EAP-Message = 0x0108000f0650617373776f72643a20
  2425. Message-Authenticator = 0x00000000000000000000000000000000
  2426. State = 0x6d9071606c987798c78a8e1756dd74ff
  2427. [peap] Got tunneled reply RADIUS code 11
  2428. EAP-Message = 0x0108000f0650617373776f72643a20
  2429. Message-Authenticator = 0x00000000000000000000000000000000
  2430. State = 0x6d9071606c987798c78a8e1756dd74ff
  2431. [peap] Got tunneled Access-Challenge
  2432. ++[eap] returns handled
  2433. Sending Access-Challenge of id 32 to 127.0.0.1 port 4309
  2434. EAP-Message = 0x0108002b1900170301002036f636e788312d97a6cb8740d15e2183570c3d4ad1b4465f1f45742b34088eb0
  2435. Message-Authenticator = 0x00000000000000000000000000000000
  2436. State = 0x32421139344a08e0cdd9a600676a5050
  2437. Finished request 15.
  2438. Going to the next request
  2439. Waking up in 9.7 seconds.
  2440. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=33, length=253
  2441. User-Name = "user1"
  2442. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2443. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2444. Symbol-Wlan-Index = "satishtest"
  2445. NAS-Port = 1
  2446. NAS-Port-Type = Wireless-802.11
  2447. Framed-MTU = 1400
  2448. Service-Type = Framed-User
  2449. NAS-IP-Address = 127.0.0.1
  2450. NAS-Identifier = "ap71xx-0F1AE6"
  2451. NAS-Port-Id = "radio1"
  2452. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2453. State = 0x32421139344a08e0cdd9a600676a5050
  2454. EAP-Message = 0x0208002b19001703010020e4e518e027b9cd59c0103857101c6709220a6e78273c3930b179c55b12c0747e
  2455. Message-Authenticator = 0x3aaf39385e4d82d091a1bff91508f6f1
  2456. +- entering group authorize {...}
  2457. ++[preprocess] returns ok
  2458. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2459. [suffix_oblic] No such realm "NULL"
  2460. ++[suffix_oblic] returns noop
  2461. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2462. [suffix_oblic_fs] No such realm "NULL"
  2463. ++[suffix_oblic_fs] returns noop
  2464. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2465. [prefix_oblic] No such realm "NULL"
  2466. ++[prefix_oblic] returns noop
  2467. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2468. [prefix_oblic_fs] No such realm "NULL"
  2469. ++[prefix_oblic_fs] returns noop
  2470. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2471. [suffix_at] No such realm "NULL"
  2472. ++[suffix_at] returns noop
  2473. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2474. [prefix_at] No such realm "NULL"
  2475. ++[prefix_at] returns noop
  2476. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2477. [suffix_percent] No such realm "NULL"
  2478. ++[suffix_percent] returns noop
  2479. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2480. [prefix_percent] No such realm "NULL"
  2481. ++[prefix_percent] returns noop
  2482. [copy_user_name] expand: %{User-Name} -> user1
  2483. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2484. ++[copy_user_name] returns ok
  2485. [passwd] Added User-Password: 'symbol123' to config_items
  2486. ++[passwd] returns ok
  2487. [ldap] rlm_ldap: performing user authorization for user1
  2488. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2489. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2490. rlm_ldap: ldap_get_conn: Checking Id: 0
  2491. rlm_ldap: ldap_get_conn: Got Id: 0
  2492. [ldap] search failed
  2493. rlm_ldap: ldap_release_conn: Release Id: 0
  2494. ++[ldap] returns fail
  2495. ++? if (fail)
  2496. ? Evaluating (fail) -> TRUE
  2497. ++? if (fail) -> TRUE
  2498. ++- entering if (fail) {...}
  2499. [files] users: Matched entry DEFAULT at line 11
  2500. [files] users: Matched entry DEFAULT at line 14
  2501. +++[files] returns ok
  2502. ++- if (fail) returns ok
  2503. [eap] EAP packet type response id 8 length 43
  2504. [eap] Continuing tunnel setup.
  2505. ++[eap] returns ok
  2506. [pap] Found existing Auth-Type, not changing it.
  2507. ++[pap] returns noop
  2508. ++[logintime] returns noop
  2509. Found Auth-Type = Local
  2510. Found Auth-Type = EAP
  2511. Warning: Found 2 auth-types on request for user 'user1'
  2512. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2513. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2514. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2515. !!! Please update your configuration so that the "known good" !!!
  2516. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2517. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2518. +- entering group authenticate {...}
  2519. [eap] Request found, released from the list
  2520. [eap] EAP/peap
  2521. [eap] processing type peap
  2522. [peap] processing EAP-TLS
  2523. [peap] eaptls_verify returned 7
  2524. [peap] Done initial handshake
  2525. [peap] eaptls_process returned 7
  2526. [peap] EAPTLS_OK
  2527. [peap] Session established. Decoding tunneled attributes.
  2528. [peap] EAP type gtc
  2529. [peap] Got tunneled request
  2530. EAP-Message = 0x0208000e0673796d626f6c313233
  2531. server {
  2532. PEAP: Setting User-Name to user1
  2533. Sending tunneled request
  2534. EAP-Message = 0x0208000e0673796d626f6c313233
  2535. FreeRADIUS-Proxied-To = 127.0.0.1
  2536. User-Name = "user1"
  2537. State = 0x6d9071606c987798c78a8e1756dd74ff
  2538. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2539. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2540. Symbol-Wlan-Index = "satishtest"
  2541. NAS-Port = 1
  2542. NAS-Port-Type = Wireless-802.11
  2543. Framed-MTU = 1400
  2544. Service-Type = Framed-User
  2545. NAS-IP-Address = 127.0.0.1
  2546. NAS-Identifier = "ap71xx-0F1AE6"
  2547. NAS-Port-Id = "radio1"
  2548. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2549. server {
  2550. +- entering group authorize {...}
  2551. ++[preprocess] returns ok
  2552. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2553. [suffix_oblic] No such realm "NULL"
  2554. ++[suffix_oblic] returns noop
  2555. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2556. [suffix_oblic_fs] No such realm "NULL"
  2557. ++[suffix_oblic_fs] returns noop
  2558. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2559. [prefix_oblic] No such realm "NULL"
  2560. ++[prefix_oblic] returns noop
  2561. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2562. [prefix_oblic_fs] No such realm "NULL"
  2563. ++[prefix_oblic_fs] returns noop
  2564. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2565. [suffix_at] No such realm "NULL"
  2566. ++[suffix_at] returns noop
  2567. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2568. [prefix_at] No such realm "NULL"
  2569. ++[prefix_at] returns noop
  2570. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2571. [suffix_percent] No such realm "NULL"
  2572. ++[suffix_percent] returns noop
  2573. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2574. [prefix_percent] No such realm "NULL"
  2575. ++[prefix_percent] returns noop
  2576. [copy_user_name] expand: %{User-Name} -> user1
  2577. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2578. ++[copy_user_name] returns ok
  2579. [passwd] Added User-Password: 'symbol123' to config_items
  2580. ++[passwd] returns ok
  2581. [ldap] rlm_ldap: performing user authorization for user1
  2582. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2583. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2584. rlm_ldap: ldap_get_conn: Checking Id: 0
  2585. rlm_ldap: ldap_get_conn: Got Id: 0
  2586. [ldap] search failed
  2587. rlm_ldap: ldap_release_conn: Release Id: 0
  2588. ++[ldap] returns fail
  2589. ++? if (fail)
  2590. ? Evaluating (fail) -> TRUE
  2591. ++? if (fail) -> TRUE
  2592. ++- entering if (fail) {...}
  2593. [files] users: Matched entry DEFAULT at line 11
  2594. [files] users: Matched entry DEFAULT at line 14
  2595. +++[files] returns ok
  2596. ++- if (fail) returns ok
  2597. [eap] EAP packet type response id 8 length 14
  2598. [eap] No EAP Start, assuming it's an on-going EAP conversation
  2599. ++[eap] returns updated
  2600. [pap] Found existing Auth-Type, not changing it.
  2601. ++[pap] returns noop
  2602. ++[logintime] returns noop
  2603. Found Auth-Type = Local
  2604. Found Auth-Type = EAP
  2605. Warning: Found 2 auth-types on request for user 'user1'
  2606. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2607. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2608. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2609. !!! Please update your configuration so that the "known good" !!!
  2610. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2611. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2612. +- entering group authenticate {...}
  2613. [eap] Request found, released from the list
  2614. [eap] EAP/gtc
  2615. [eap] processing type gtc
  2616. [gtc] +- entering group LDAP {...}
  2617. [ldap] login attempt by "user1" with password "symbol123"
  2618. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2619. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2620. rlm_ldap: ldap_get_conn: Checking Id: 0
  2621. rlm_ldap: ldap_get_conn: Got Id: 0
  2622. rlm_ldap: ldap_release_conn: Release Id: 0
  2623. ++[ldap] returns fail
  2624. [eap] Handler failed in EAP/gtc
  2625. [eap] Failed in EAP select
  2626. ++[eap] returns invalid
  2627. Failed to authenticate the user.
  2628. auth: Failed to validate the user.: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32 via TLS tunnel)
  2629. Login incorrect: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32 via TLS tunnel)
  2630. } # server
  2631. [peap] Got tunneled reply code 3
  2632. EAP-Message = 0x04080004
  2633. Message-Authenticator = 0x00000000000000000000000000000000
  2634. [peap] Got tunneled reply RADIUS code 3
  2635. EAP-Message = 0x04080004
  2636. Message-Authenticator = 0x00000000000000000000000000000000
  2637. [peap] Tunneled authentication was rejected.
  2638. [peap] FAILURE
  2639. ++[eap] returns handled
  2640. Sending Access-Challenge of id 33 to 127.0.0.1 port 4309
  2641. EAP-Message = 0x0109002b190017030100200e36690619518c19ccbeb05bd0c569eccfad869fc88329ef9b5f228ea232b2f5
  2642. Message-Authenticator = 0x00000000000000000000000000000000
  2643. State = 0x32421139354b08e0cdd9a600676a5050
  2644. Finished request 16.
  2645. Going to the next request
  2646. Waking up in 9.7 seconds.
  2647. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=34, length=253
  2648. User-Name = "user1"
  2649. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2650. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2651. Symbol-Wlan-Index = "satishtest"
  2652. NAS-Port = 1
  2653. NAS-Port-Type = Wireless-802.11
  2654. Framed-MTU = 1400
  2655. Service-Type = Framed-User
  2656. NAS-IP-Address = 127.0.0.1
  2657. NAS-Identifier = "ap71xx-0F1AE6"
  2658. NAS-Port-Id = "radio1"
  2659. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2660. State = 0x32421139354b08e0cdd9a600676a5050
  2661. EAP-Message = 0x0209002b190017030100207cff25bd9a9aa3da787cfab1ef8a8d05d7eee7c8e8e121d688f0c3f5fe0a2f35
  2662. Message-Authenticator = 0x3eaa132093370d8969f3242045634a90
  2663. +- entering group authorize {...}
  2664. ++[preprocess] returns ok
  2665. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2666. [suffix_oblic] No such realm "NULL"
  2667. ++[suffix_oblic] returns noop
  2668. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2669. [suffix_oblic_fs] No such realm "NULL"
  2670. ++[suffix_oblic_fs] returns noop
  2671. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2672. [prefix_oblic] No such realm "NULL"
  2673. ++[prefix_oblic] returns noop
  2674. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2675. [prefix_oblic_fs] No such realm "NULL"
  2676. ++[prefix_oblic_fs] returns noop
  2677. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2678. [suffix_at] No such realm "NULL"
  2679. ++[suffix_at] returns noop
  2680. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2681. [prefix_at] No such realm "NULL"
  2682. ++[prefix_at] returns noop
  2683. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2684. [suffix_percent] No such realm "NULL"
  2685. ++[suffix_percent] returns noop
  2686. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2687. [prefix_percent] No such realm "NULL"
  2688. ++[prefix_percent] returns noop
  2689. [copy_user_name] expand: %{User-Name} -> user1
  2690. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2691. ++[copy_user_name] returns ok
  2692. [passwd] Added User-Password: 'symbol123' to config_items
  2693. ++[passwd] returns ok
  2694. [ldap] rlm_ldap: performing user authorization for user1
  2695. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2696. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2697. rlm_ldap: ldap_get_conn: Checking Id: 0
  2698. rlm_ldap: ldap_get_conn: Got Id: 0
  2699. [ldap] search failed
  2700. rlm_ldap: ldap_release_conn: Release Id: 0
  2701. ++[ldap] returns fail
  2702. ++? if (fail)
  2703. ? Evaluating (fail) -> TRUE
  2704. ++? if (fail) -> TRUE
  2705. ++- entering if (fail) {...}
  2706. [files] users: Matched entry DEFAULT at line 11
  2707. [files] users: Matched entry DEFAULT at line 14
  2708. +++[files] returns ok
  2709. ++- if (fail) returns ok
  2710. [eap] EAP packet type response id 9 length 43
  2711. [eap] Continuing tunnel setup.
  2712. ++[eap] returns ok
  2713. [pap] Found existing Auth-Type, not changing it.
  2714. ++[pap] returns noop
  2715. ++[logintime] returns noop
  2716. Found Auth-Type = Local
  2717. Found Auth-Type = EAP
  2718. Warning: Found 2 auth-types on request for user 'user1'
  2719. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2720. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2721. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2722. !!! Please update your configuration so that the "known good" !!!
  2723. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2724. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2725. +- entering group authenticate {...}
  2726. [eap] Request found, released from the list
  2727. [eap] EAP/peap
  2728. [eap] processing type peap
  2729. [peap] processing EAP-TLS
  2730. [peap] eaptls_verify returned 7
  2731. [peap] Done initial handshake
  2732. [peap] eaptls_process returned 7
  2733. [peap] EAPTLS_OK
  2734. [peap] Session established. Decoding tunneled attributes.
  2735. [peap] Received EAP-TLV response.
  2736. [peap] Had sent TLV failure. User was rejected earlier in this session.
  2737. [eap] Handler failed in EAP/peap
  2738. [eap] Failed in EAP select
  2739. ++[eap] returns invalid
  2740. Failed to authenticate the user.
  2741. auth: Failed to validate the user.: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32)
  2742. Login incorrect: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32)
  2743. Sending Access-Reject of id 34 to 127.0.0.1 port 4309
  2744. EAP-Message = 0x04090004
  2745. Message-Authenticator = 0x00000000000000000000000000000000
  2746. Finished request 17.
  2747. Going to the next request
  2748. Waking up in 9.7 seconds.
  2749. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=35, length=202
  2750. User-Name = "user1"
  2751. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2752. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2753. Symbol-Wlan-Index = "satishtest"
  2754. NAS-Port = 1
  2755. NAS-Port-Type = Wireless-802.11
  2756. Framed-MTU = 1400
  2757. Service-Type = Framed-User
  2758. NAS-IP-Address = 127.0.0.1
  2759. NAS-Identifier = "ap71xx-0F1AE6"
  2760. NAS-Port-Id = "radio1"
  2761. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2762. EAP-Message = 0x0201000a017573657231
  2763. Message-Authenticator = 0x9e95771f4ab879c61fa3b7781071ce90
  2764. +- entering group authorize {...}
  2765. ++[preprocess] returns ok
  2766. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2767. [suffix_oblic] No such realm "NULL"
  2768. ++[suffix_oblic] returns noop
  2769. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2770. [suffix_oblic_fs] No such realm "NULL"
  2771. ++[suffix_oblic_fs] returns noop
  2772. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2773. [prefix_oblic] No such realm "NULL"
  2774. ++[prefix_oblic] returns noop
  2775. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2776. [prefix_oblic_fs] No such realm "NULL"
  2777. ++[prefix_oblic_fs] returns noop
  2778. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2779. [suffix_at] No such realm "NULL"
  2780. ++[suffix_at] returns noop
  2781. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2782. [prefix_at] No such realm "NULL"
  2783. ++[prefix_at] returns noop
  2784. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2785. [suffix_percent] No such realm "NULL"
  2786. ++[suffix_percent] returns noop
  2787. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2788. [prefix_percent] No such realm "NULL"
  2789. ++[prefix_percent] returns noop
  2790. [copy_user_name] expand: %{User-Name} -> user1
  2791. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2792. ++[copy_user_name] returns ok
  2793. [passwd] Added User-Password: 'symbol123' to config_items
  2794. ++[passwd] returns ok
  2795. [ldap] rlm_ldap: performing user authorization for user1
  2796. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2797. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2798. rlm_ldap: ldap_get_conn: Checking Id: 0
  2799. rlm_ldap: ldap_get_conn: Got Id: 0
  2800. [ldap] search failed
  2801. rlm_ldap: ldap_release_conn: Release Id: 0
  2802. ++[ldap] returns fail
  2803. ++? if (fail)
  2804. ? Evaluating (fail) -> TRUE
  2805. ++? if (fail) -> TRUE
  2806. ++- entering if (fail) {...}
  2807. [files] users: Matched entry DEFAULT at line 11
  2808. [files] users: Matched entry DEFAULT at line 14
  2809. +++[files] returns ok
  2810. ++- if (fail) returns ok
  2811. [eap] EAP packet type response id 1 length 10
  2812. [eap] No EAP Start, assuming it's an on-going EAP conversation
  2813. ++[eap] returns updated
  2814. [pap] Found existing Auth-Type, not changing it.
  2815. ++[pap] returns noop
  2816. ++[logintime] returns noop
  2817. Found Auth-Type = Local
  2818. Found Auth-Type = EAP
  2819. Warning: Found 2 auth-types on request for user 'user1'
  2820. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2821. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2822. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2823. !!! Please update your configuration so that the "known good" !!!
  2824. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2825. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2826. +- entering group authenticate {...}
  2827. [eap] EAP Identity
  2828. [eap] processing type tls
  2829. [tls] Requiring client certificate
  2830. [tls] Initiate
  2831. [tls] Start returned 1
  2832. ++[eap] returns handled
  2833. Sending Access-Challenge of id 35 to 127.0.0.1 port 4309
  2834. EAP-Message = 0x010200060d20
  2835. Message-Authenticator = 0x00000000000000000000000000000000
  2836. State = 0x2f3007e82f320a3a473568eb1d8bd7c8
  2837. Finished request 18.
  2838. Going to the next request
  2839. Waking up in 9.6 seconds.
  2840. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=36, length=216
  2841. User-Name = "user1"
  2842. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2843. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2844. Symbol-Wlan-Index = "satishtest"
  2845. NAS-Port = 1
  2846. NAS-Port-Type = Wireless-802.11
  2847. Framed-MTU = 1400
  2848. Service-Type = Framed-User
  2849. NAS-IP-Address = 127.0.0.1
  2850. NAS-Identifier = "ap71xx-0F1AE6"
  2851. NAS-Port-Id = "radio1"
  2852. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2853. State = 0x2f3007e82f320a3a473568eb1d8bd7c8
  2854. EAP-Message = 0x020200060319
  2855. Message-Authenticator = 0x016cb451584c83d4f4743cd3862779b1
  2856. +- entering group authorize {...}
  2857. ++[preprocess] returns ok
  2858. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2859. [suffix_oblic] No such realm "NULL"
  2860. ++[suffix_oblic] returns noop
  2861. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2862. [suffix_oblic_fs] No such realm "NULL"
  2863. ++[suffix_oblic_fs] returns noop
  2864. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2865. [prefix_oblic] No such realm "NULL"
  2866. ++[prefix_oblic] returns noop
  2867. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2868. [prefix_oblic_fs] No such realm "NULL"
  2869. ++[prefix_oblic_fs] returns noop
  2870. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2871. [suffix_at] No such realm "NULL"
  2872. ++[suffix_at] returns noop
  2873. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2874. [prefix_at] No such realm "NULL"
  2875. ++[prefix_at] returns noop
  2876. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2877. [suffix_percent] No such realm "NULL"
  2878. ++[suffix_percent] returns noop
  2879. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2880. [prefix_percent] No such realm "NULL"
  2881. ++[prefix_percent] returns noop
  2882. [copy_user_name] expand: %{User-Name} -> user1
  2883. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2884. ++[copy_user_name] returns ok
  2885. [passwd] Added User-Password: 'symbol123' to config_items
  2886. ++[passwd] returns ok
  2887. [ldap] rlm_ldap: performing user authorization for user1
  2888. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2889. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2890. rlm_ldap: ldap_get_conn: Checking Id: 0
  2891. rlm_ldap: ldap_get_conn: Got Id: 0
  2892. [ldap] search failed
  2893. rlm_ldap: ldap_release_conn: Release Id: 0
  2894. ++[ldap] returns fail
  2895. ++? if (fail)
  2896. ? Evaluating (fail) -> TRUE
  2897. ++? if (fail) -> TRUE
  2898. ++- entering if (fail) {...}
  2899. [files] users: Matched entry DEFAULT at line 11
  2900. [files] users: Matched entry DEFAULT at line 14
  2901. +++[files] returns ok
  2902. ++- if (fail) returns ok
  2903. [eap] EAP packet type response id 2 length 6
  2904. [eap] No EAP Start, assuming it's an on-going EAP conversation
  2905. ++[eap] returns updated
  2906. [pap] Found existing Auth-Type, not changing it.
  2907. ++[pap] returns noop
  2908. ++[logintime] returns noop
  2909. Found Auth-Type = Local
  2910. Found Auth-Type = EAP
  2911. Warning: Found 2 auth-types on request for user 'user1'
  2912. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2913. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  2914. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2915. !!! Please update your configuration so that the "known good" !!!
  2916. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  2917. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  2918. +- entering group authenticate {...}
  2919. [eap] Request found, released from the list
  2920. [eap] EAP NAK
  2921. [eap] EAP-NAK asked for EAP-Type/peap
  2922. [eap] processing type tls
  2923. [tls] Initiate
  2924. [tls] Start returned 1
  2925. ++[eap] returns handled
  2926. Sending Access-Challenge of id 36 to 127.0.0.1 port 4309
  2927. EAP-Message = 0x010300061920
  2928. Message-Authenticator = 0x00000000000000000000000000000000
  2929. State = 0x2f3007e82e331e3a473568eb1d8bd7c8
  2930. Finished request 19.
  2931. Going to the next request
  2932. Waking up in 9.5 seconds.
  2933. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=37, length=292
  2934. User-Name = "user1"
  2935. Calling-Station-Id = "00-13-CE-F0-6E-32"
  2936. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  2937. Symbol-Wlan-Index = "satishtest"
  2938. NAS-Port = 1
  2939. NAS-Port-Type = Wireless-802.11
  2940. Framed-MTU = 1400
  2941. Service-Type = Framed-User
  2942. NAS-IP-Address = 127.0.0.1
  2943. NAS-Identifier = "ap71xx-0F1AE6"
  2944. NAS-Port-Id = "radio1"
  2945. Connect-Info = "CONNECT 54Mbps 802.11bg"
  2946. State = 0x2f3007e82e331e3a473568eb1d8bd7c8
  2947. EAP-Message = 0x0203005219800000004816030100430100003f03014dc4cdb8af56089ee07f3fc77ddd6ed65a6e978f38fee53146878e4b7d9189bb00001800390038003300320016001300660035002f000a000500040100
  2948. Message-Authenticator = 0x694862570ffe7c4baefe972c89cdb0e5
  2949. +- entering group authorize {...}
  2950. ++[preprocess] returns ok
  2951. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2952. [suffix_oblic] No such realm "NULL"
  2953. ++[suffix_oblic] returns noop
  2954. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2955. [suffix_oblic_fs] No such realm "NULL"
  2956. ++[suffix_oblic_fs] returns noop
  2957. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  2958. [prefix_oblic] No such realm "NULL"
  2959. ++[prefix_oblic] returns noop
  2960. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  2961. [prefix_oblic_fs] No such realm "NULL"
  2962. ++[prefix_oblic_fs] returns noop
  2963. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  2964. [suffix_at] No such realm "NULL"
  2965. ++[suffix_at] returns noop
  2966. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  2967. [prefix_at] No such realm "NULL"
  2968. ++[prefix_at] returns noop
  2969. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2970. [suffix_percent] No such realm "NULL"
  2971. ++[suffix_percent] returns noop
  2972. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  2973. [prefix_percent] No such realm "NULL"
  2974. ++[prefix_percent] returns noop
  2975. [copy_user_name] expand: %{User-Name} -> user1
  2976. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  2977. ++[copy_user_name] returns ok
  2978. [passwd] Added User-Password: 'symbol123' to config_items
  2979. ++[passwd] returns ok
  2980. [ldap] rlm_ldap: performing user authorization for user1
  2981. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  2982. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  2983. rlm_ldap: ldap_get_conn: Checking Id: 0
  2984. rlm_ldap: ldap_get_conn: Got Id: 0
  2985. [ldap] search failed
  2986. rlm_ldap: ldap_release_conn: Release Id: 0
  2987. ++[ldap] returns fail
  2988. ++? if (fail)
  2989. ? Evaluating (fail) -> TRUE
  2990. ++? if (fail) -> TRUE
  2991. ++- entering if (fail) {...}
  2992. [files] users: Matched entry DEFAULT at line 11
  2993. [files] users: Matched entry DEFAULT at line 14
  2994. +++[files] returns ok
  2995. ++- if (fail) returns ok
  2996. [eap] EAP packet type response id 3 length 82
  2997. [eap] Continuing tunnel setup.
  2998. ++[eap] returns ok
  2999. [pap] Found existing Auth-Type, not changing it.
  3000. ++[pap] returns noop
  3001. ++[logintime] returns noop
  3002. Found Auth-Type = Local
  3003. Found Auth-Type = EAP
  3004. Warning: Found 2 auth-types on request for user 'user1'
  3005. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3006. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3007. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3008. !!! Please update your configuration so that the "known good" !!!
  3009. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3010. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3011. +- entering group authenticate {...}
  3012. [eap] Request found, released from the list
  3013. [eap] EAP/peap
  3014. [eap] processing type peap
  3015. [peap] processing EAP-TLS
  3016. TLS Length 72
  3017. [peap] Length Included
  3018. [peap] eaptls_verify returned 11
  3019. [peap] (other): before/accept initialization
  3020. [peap] TLS_accept: before/accept initialization
  3021. [peap] <<< TLS 1.0 Handshake [length 0043], ClientHello
  3022. [peap] TLS_accept: SSLv3 read client hello A
  3023. [peap] >>> TLS 1.0 Handshake [length 002a], ServerHello
  3024. [peap] TLS_accept: SSLv3 write server hello A
  3025. [peap] >>> TLS 1.0 Handshake [length 01e2], Certificate
  3026. [peap] TLS_accept: SSLv3 write certificate A
  3027. [peap] >>> TLS 1.0 Handshake [length 018d], ServerKeyExchange
  3028. [peap] TLS_accept: SSLv3 write key exchange A
  3029. [peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
  3030. [peap] TLS_accept: SSLv3 write server done A
  3031. [peap] TLS_accept: SSLv3 flush data
  3032. [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A
  3033. In SSL Handshake Phase
  3034. In SSL Accept mode
  3035. [peap] eaptls_process returned 13
  3036. [peap] EAPTLS_HANDLED
  3037. ++[eap] returns handled
  3038. Sending Access-Challenge of id 37 to 127.0.0.1 port 4309
  3039. EAP-Message = 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
  3040. EAP-Message = 0x4aba1f43194c2ec34a12d211348e551aabcaaf59abda239802e4d75274f1cac2d3ff923e1a4dcba0afb088cf83f89dc5aef1b39351609df4124486a371d053125a63eaf1462012fd13a2ddaa411432f33de2e5460bf9d5d82d4319931a8c5a540fea453f608efbdc7a56067f281f0203010001a317301530130603551d25040c300a06082b06010505070301300d06092a864886f70d010105050003818100a853e3e12e9d49501e4af1c19b2e71870aa51fac47571cbc5b3ea2057c636b1b82b598f273aaa872b2563605453202cfc456b2cdcdedda780af82493ce4f3f6c66f03aca6a06a530c13c8d5bad0805d5adc52290f6be22c49cc0b59a529a
  3041. EAP-Message = 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
  3042. EAP-Message = 0x2833ee997345e1d6f45309a036623f63ed33dc65aa2cf226d9fa3bf4fc15a0c8ec0d190193aad8b1a9f7b36ba0108a4bd61a5174930080705fb356e8b292d966a00d00da82752c273cb0f56cb748a0da4e1a008caaf6bdd632090f3d3c973f41b4ac8ac036b8b7b2549d85d43eb1035e1674b5fd60a9b1409efc1432830e621c29abdaa4d222aa53732ebfc6ee68a76269e6a3ba585d778caad825ffb5428217cfeed4cbf36adaac51dab50b2b3272702875ae78f41c0816030100040e000000
  3043. Message-Authenticator = 0x00000000000000000000000000000000
  3044. State = 0x2f3007e82d341e3a473568eb1d8bd7c8
  3045. Finished request 20.
  3046. Going to the next request
  3047. Waking up in 9.4 seconds.
  3048. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=38, length=418
  3049. User-Name = "user1"
  3050. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3051. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3052. Symbol-Wlan-Index = "satishtest"
  3053. NAS-Port = 1
  3054. NAS-Port-Type = Wireless-802.11
  3055. Framed-MTU = 1400
  3056. Service-Type = Framed-User
  3057. NAS-IP-Address = 127.0.0.1
  3058. NAS-Identifier = "ap71xx-0F1AE6"
  3059. NAS-Port-Id = "radio1"
  3060. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3061. State = 0x2f3007e82d341e3a473568eb1d8bd7c8
  3062. EAP-Message = 0x020400d01980000000c61603010086100000820080855f4ad132c2b7556b354c5761c43156e8359548c4c2e13208e27d9240584bb5e1a45f32ebd7b32d3cf387c8f6351d89137e6cf480e993ffcac0c9d118faba4dba18950e9206e0e74bde33a0da3fe130f6144d0588fb42b8876b40a54d5f271241128bf59f200538fc1260dce9a6f7baf1c0d84f34021bf2dec48a8e0bd98d951403010001011603010030da55206428503f34904342d24212a739b7fa848676ea6ad39bf1edf99d044a8f8ddfb03f78b3986f72fb106184797192
  3063. Message-Authenticator = 0xb0bba84005e3edcddbf80b8dc0fa21a6
  3064. +- entering group authorize {...}
  3065. ++[preprocess] returns ok
  3066. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3067. [suffix_oblic] No such realm "NULL"
  3068. ++[suffix_oblic] returns noop
  3069. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3070. [suffix_oblic_fs] No such realm "NULL"
  3071. ++[suffix_oblic_fs] returns noop
  3072. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3073. [prefix_oblic] No such realm "NULL"
  3074. ++[prefix_oblic] returns noop
  3075. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3076. [prefix_oblic_fs] No such realm "NULL"
  3077. ++[prefix_oblic_fs] returns noop
  3078. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3079. [suffix_at] No such realm "NULL"
  3080. ++[suffix_at] returns noop
  3081. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3082. [prefix_at] No such realm "NULL"
  3083. ++[prefix_at] returns noop
  3084. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3085. [suffix_percent] No such realm "NULL"
  3086. ++[suffix_percent] returns noop
  3087. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3088. [prefix_percent] No such realm "NULL"
  3089. ++[prefix_percent] returns noop
  3090. [copy_user_name] expand: %{User-Name} -> user1
  3091. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3092. ++[copy_user_name] returns ok
  3093. [passwd] Added User-Password: 'symbol123' to config_items
  3094. ++[passwd] returns ok
  3095. [ldap] rlm_ldap: performing user authorization for user1
  3096. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3097. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3098. rlm_ldap: ldap_get_conn: Checking Id: 0
  3099. rlm_ldap: ldap_get_conn: Got Id: 0
  3100. [ldap] search failed
  3101. rlm_ldap: ldap_release_conn: Release Id: 0
  3102. ++[ldap] returns fail
  3103. ++? if (fail)
  3104. ? Evaluating (fail) -> TRUE
  3105. ++? if (fail) -> TRUE
  3106. ++- entering if (fail) {...}
  3107. [files] users: Matched entry DEFAULT at line 11
  3108. [files] users: Matched entry DEFAULT at line 14
  3109. +++[files] returns ok
  3110. ++- if (fail) returns ok
  3111. [eap] EAP packet type response id 4 length 208
  3112. [eap] Continuing tunnel setup.
  3113. ++[eap] returns ok
  3114. [pap] Found existing Auth-Type, not changing it.
  3115. ++[pap] returns noop
  3116. ++[logintime] returns noop
  3117. Found Auth-Type = Local
  3118. Found Auth-Type = EAP
  3119. Warning: Found 2 auth-types on request for user 'user1'
  3120. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3121. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3122. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3123. !!! Please update your configuration so that the "known good" !!!
  3124. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3125. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3126. +- entering group authenticate {...}
  3127. [eap] Request found, released from the list
  3128. [eap] EAP/peap
  3129. [eap] processing type peap
  3130. [peap] processing EAP-TLS
  3131. TLS Length 198
  3132. [peap] Length Included
  3133. [peap] eaptls_verify returned 11
  3134. [peap] <<< TLS 1.0 Handshake [length 0086], ClientKeyExchange
  3135. [peap] TLS_accept: SSLv3 read client key exchange A
  3136. [peap] <<< TLS 1.0 ChangeCipherSpec [length 0001]
  3137. [peap] <<< TLS 1.0 Handshake [length 0010], Finished
  3138. [peap] TLS_accept: SSLv3 read finished A
  3139. [peap] >>> TLS 1.0 ChangeCipherSpec [length 0001]
  3140. [peap] TLS_accept: SSLv3 write change cipher spec A
  3141. [peap] >>> TLS 1.0 Handshake [length 0010], Finished
  3142. [peap] TLS_accept: SSLv3 write finished A
  3143. [peap] TLS_accept: SSLv3 flush data
  3144. [peap] (other): SSL negotiation finished successfully
  3145. SSL Connection Established
  3146. [peap] eaptls_process returned 13
  3147. [peap] EAPTLS_HANDLED
  3148. ++[eap] returns handled
  3149. Sending Access-Challenge of id 38 to 127.0.0.1 port 4309
  3150. EAP-Message = 0x0105004119001403010001011603010030ad011a52cf24885c70639555142f0a863cdc7b92e506ff3eb493f31beeae99f3d041ba2e4847c5a7ebb1697d7ce70a22
  3151. Message-Authenticator = 0x00000000000000000000000000000000
  3152. State = 0x2f3007e82c351e3a473568eb1d8bd7c8
  3153. Finished request 21.
  3154. Going to the next request
  3155. Waking up in 9.3 seconds.
  3156. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=39, length=216
  3157. User-Name = "user1"
  3158. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3159. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3160. Symbol-Wlan-Index = "satishtest"
  3161. NAS-Port = 1
  3162. NAS-Port-Type = Wireless-802.11
  3163. Framed-MTU = 1400
  3164. Service-Type = Framed-User
  3165. NAS-IP-Address = 127.0.0.1
  3166. NAS-Identifier = "ap71xx-0F1AE6"
  3167. NAS-Port-Id = "radio1"
  3168. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3169. State = 0x2f3007e82c351e3a473568eb1d8bd7c8
  3170. EAP-Message = 0x020500061900
  3171. Message-Authenticator = 0x5d979cb2aba6d1ab66dcd2325c048103
  3172. +- entering group authorize {...}
  3173. ++[preprocess] returns ok
  3174. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3175. [suffix_oblic] No such realm "NULL"
  3176. ++[suffix_oblic] returns noop
  3177. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3178. [suffix_oblic_fs] No such realm "NULL"
  3179. ++[suffix_oblic_fs] returns noop
  3180. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3181. [prefix_oblic] No such realm "NULL"
  3182. ++[prefix_oblic] returns noop
  3183. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3184. [prefix_oblic_fs] No such realm "NULL"
  3185. ++[prefix_oblic_fs] returns noop
  3186. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3187. [suffix_at] No such realm "NULL"
  3188. ++[suffix_at] returns noop
  3189. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3190. [prefix_at] No such realm "NULL"
  3191. ++[prefix_at] returns noop
  3192. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3193. [suffix_percent] No such realm "NULL"
  3194. ++[suffix_percent] returns noop
  3195. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3196. [prefix_percent] No such realm "NULL"
  3197. ++[prefix_percent] returns noop
  3198. [copy_user_name] expand: %{User-Name} -> user1
  3199. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3200. ++[copy_user_name] returns ok
  3201. [passwd] Added User-Password: 'symbol123' to config_items
  3202. ++[passwd] returns ok
  3203. [ldap] rlm_ldap: performing user authorization for user1
  3204. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3205. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3206. rlm_ldap: ldap_get_conn: Checking Id: 0
  3207. rlm_ldap: ldap_get_conn: Got Id: 0
  3208. [ldap] search failed
  3209. rlm_ldap: ldap_release_conn: Release Id: 0
  3210. ++[ldap] returns fail
  3211. ++? if (fail)
  3212. ? Evaluating (fail) -> TRUE
  3213. ++? if (fail) -> TRUE
  3214. ++- entering if (fail) {...}
  3215. [files] users: Matched entry DEFAULT at line 11
  3216. [files] users: Matched entry DEFAULT at line 14
  3217. +++[files] returns ok
  3218. ++- if (fail) returns ok
  3219. [eap] EAP packet type response id 5 length 6
  3220. [eap] Continuing tunnel setup.
  3221. ++[eap] returns ok
  3222. [pap] Found existing Auth-Type, not changing it.
  3223. ++[pap] returns noop
  3224. ++[logintime] returns noop
  3225. Found Auth-Type = Local
  3226. Found Auth-Type = EAP
  3227. Warning: Found 2 auth-types on request for user 'user1'
  3228. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3229. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3230. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3231. !!! Please update your configuration so that the "known good" !!!
  3232. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3233. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3234. +- entering group authenticate {...}
  3235. [eap] Request found, released from the list
  3236. [eap] EAP/peap
  3237. [eap] processing type peap
  3238. [peap] processing EAP-TLS
  3239. [peap] Received TLS ACK
  3240. [peap] ACK handshake is finished
  3241. [peap] eaptls_verify returned 3
  3242. [peap] eaptls_process returned 3
  3243. [peap] EAPTLS_SUCCESS
  3244. ++[eap] returns handled
  3245. Sending Access-Challenge of id 39 to 127.0.0.1 port 4309
  3246. EAP-Message = 0x0106002b19001703010020f270b524c2e59e35af7103103803fa4a3af315bf2eaaa62c7afa35e465eedd91
  3247. Message-Authenticator = 0x00000000000000000000000000000000
  3248. State = 0x2f3007e82b361e3a473568eb1d8bd7c8
  3249. Finished request 22.
  3250. Going to the next request
  3251. Waking up in 9.3 seconds.
  3252. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=40, length=253
  3253. User-Name = "user1"
  3254. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3255. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3256. Symbol-Wlan-Index = "satishtest"
  3257. NAS-Port = 1
  3258. NAS-Port-Type = Wireless-802.11
  3259. Framed-MTU = 1400
  3260. Service-Type = Framed-User
  3261. NAS-IP-Address = 127.0.0.1
  3262. NAS-Identifier = "ap71xx-0F1AE6"
  3263. NAS-Port-Id = "radio1"
  3264. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3265. State = 0x2f3007e82b361e3a473568eb1d8bd7c8
  3266. EAP-Message = 0x0206002b190017030100204163a605e04ff62cd57d7c78b0b33a1182022dbfc743bc7914b1e03e1c247fa7
  3267. Message-Authenticator = 0x06ba6f1120b51d1dc500628ebe1b3613
  3268. +- entering group authorize {...}
  3269. ++[preprocess] returns ok
  3270. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3271. [suffix_oblic] No such realm "NULL"
  3272. ++[suffix_oblic] returns noop
  3273. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3274. [suffix_oblic_fs] No such realm "NULL"
  3275. ++[suffix_oblic_fs] returns noop
  3276. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3277. [prefix_oblic] No such realm "NULL"
  3278. ++[prefix_oblic] returns noop
  3279. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3280. [prefix_oblic_fs] No such realm "NULL"
  3281. ++[prefix_oblic_fs] returns noop
  3282. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3283. [suffix_at] No such realm "NULL"
  3284. ++[suffix_at] returns noop
  3285. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3286. [prefix_at] No such realm "NULL"
  3287. ++[prefix_at] returns noop
  3288. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3289. [suffix_percent] No such realm "NULL"
  3290. ++[suffix_percent] returns noop
  3291. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3292. [prefix_percent] No such realm "NULL"
  3293. ++[prefix_percent] returns noop
  3294. [copy_user_name] expand: %{User-Name} -> user1
  3295. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3296. ++[copy_user_name] returns ok
  3297. [passwd] Added User-Password: 'symbol123' to config_items
  3298. ++[passwd] returns ok
  3299. [ldap] rlm_ldap: performing user authorization for user1
  3300. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3301. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3302. rlm_ldap: ldap_get_conn: Checking Id: 0
  3303. rlm_ldap: ldap_get_conn: Got Id: 0
  3304. [ldap] search failed
  3305. rlm_ldap: ldap_release_conn: Release Id: 0
  3306. ++[ldap] returns fail
  3307. ++? if (fail)
  3308. ? Evaluating (fail) -> TRUE
  3309. ++? if (fail) -> TRUE
  3310. ++- entering if (fail) {...}
  3311. [files] users: Matched entry DEFAULT at line 11
  3312. [files] users: Matched entry DEFAULT at line 14
  3313. +++[files] returns ok
  3314. ++- if (fail) returns ok
  3315. [eap] EAP packet type response id 6 length 43
  3316. [eap] Continuing tunnel setup.
  3317. ++[eap] returns ok
  3318. [pap] Found existing Auth-Type, not changing it.
  3319. ++[pap] returns noop
  3320. ++[logintime] returns noop
  3321. Found Auth-Type = Local
  3322. Found Auth-Type = EAP
  3323. Warning: Found 2 auth-types on request for user 'user1'
  3324. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3325. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3326. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3327. !!! Please update your configuration so that the "known good" !!!
  3328. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3329. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3330. +- entering group authenticate {...}
  3331. [eap] Request found, released from the list
  3332. [eap] EAP/peap
  3333. [eap] processing type peap
  3334. [peap] processing EAP-TLS
  3335. [peap] eaptls_verify returned 7
  3336. [peap] Done initial handshake
  3337. [peap] eaptls_process returned 7
  3338. [peap] EAPTLS_OK
  3339. [peap] Session established. Decoding tunneled attributes.
  3340. [peap] Identity - user1
  3341. [peap] Got tunneled request
  3342. EAP-Message = 0x0206000a017573657231
  3343. server {
  3344. PEAP: Got tunneled identity of user1
  3345. PEAP: Setting default EAP type for tunneled EAP session.
  3346. PEAP: Setting User-Name to user1
  3347. Sending tunneled request
  3348. EAP-Message = 0x0206000a017573657231
  3349. FreeRADIUS-Proxied-To = 127.0.0.1
  3350. User-Name = "user1"
  3351. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3352. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3353. Symbol-Wlan-Index = "satishtest"
  3354. NAS-Port = 1
  3355. NAS-Port-Type = Wireless-802.11
  3356. Framed-MTU = 1400
  3357. Service-Type = Framed-User
  3358. NAS-IP-Address = 127.0.0.1
  3359. NAS-Identifier = "ap71xx-0F1AE6"
  3360. NAS-Port-Id = "radio1"
  3361. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3362. server {
  3363. +- entering group authorize {...}
  3364. ++[preprocess] returns ok
  3365. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3366. [suffix_oblic] No such realm "NULL"
  3367. ++[suffix_oblic] returns noop
  3368. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3369. [suffix_oblic_fs] No such realm "NULL"
  3370. ++[suffix_oblic_fs] returns noop
  3371. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3372. [prefix_oblic] No such realm "NULL"
  3373. ++[prefix_oblic] returns noop
  3374. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3375. [prefix_oblic_fs] No such realm "NULL"
  3376. ++[prefix_oblic_fs] returns noop
  3377. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3378. [suffix_at] No such realm "NULL"
  3379. ++[suffix_at] returns noop
  3380. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3381. [prefix_at] No such realm "NULL"
  3382. ++[prefix_at] returns noop
  3383. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3384. [suffix_percent] No such realm "NULL"
  3385. ++[suffix_percent] returns noop
  3386. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3387. [prefix_percent] No such realm "NULL"
  3388. ++[prefix_percent] returns noop
  3389. [copy_user_name] expand: %{User-Name} -> user1
  3390. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3391. ++[copy_user_name] returns ok
  3392. [passwd] Added User-Password: 'symbol123' to config_items
  3393. ++[passwd] returns ok
  3394. [ldap] rlm_ldap: performing user authorization for user1
  3395. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3396. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3397. rlm_ldap: ldap_get_conn: Checking Id: 0
  3398. rlm_ldap: ldap_get_conn: Got Id: 0
  3399. [ldap] search failed
  3400. rlm_ldap: ldap_release_conn: Release Id: 0
  3401. ++[ldap] returns fail
  3402. ++? if (fail)
  3403. ? Evaluating (fail) -> TRUE
  3404. ++? if (fail) -> TRUE
  3405. ++- entering if (fail) {...}
  3406. [files] users: Matched entry DEFAULT at line 11
  3407. [files] users: Matched entry DEFAULT at line 14
  3408. +++[files] returns ok
  3409. ++- if (fail) returns ok
  3410. [eap] EAP packet type response id 6 length 10
  3411. [eap] No EAP Start, assuming it's an on-going EAP conversation
  3412. ++[eap] returns updated
  3413. [pap] Found existing Auth-Type, not changing it.
  3414. ++[pap] returns noop
  3415. ++[logintime] returns noop
  3416. Found Auth-Type = Local
  3417. Found Auth-Type = EAP
  3418. Warning: Found 2 auth-types on request for user 'user1'
  3419. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3420. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3421. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3422. !!! Please update your configuration so that the "known good" !!!
  3423. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3424. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3425. +- entering group authenticate {...}
  3426. [eap] EAP Identity
  3427. [eap] processing type md5
  3428. rlm_eap_md5: Issuing Challenge
  3429. ++[eap] returns handled
  3430. } # server
  3431. [peap] Got tunneled reply code 11
  3432. EAP-Message = 0x0107001604107ccabd38abbf54df76d9395d858d3377
  3433. Message-Authenticator = 0x00000000000000000000000000000000
  3434. State = 0x821670508211744d3e01c0990e5e85fc
  3435. [peap] Got tunneled reply RADIUS code 11
  3436. EAP-Message = 0x0107001604107ccabd38abbf54df76d9395d858d3377
  3437. Message-Authenticator = 0x00000000000000000000000000000000
  3438. State = 0x821670508211744d3e01c0990e5e85fc
  3439. [peap] Got tunneled Access-Challenge
  3440. ++[eap] returns handled
  3441. Sending Access-Challenge of id 40 to 127.0.0.1 port 4309
  3442. EAP-Message = 0x0107003b190017030100302d6d9e392f9e140b220d8ca51142c1ec8ce0fcd3c31150677815e112bf5df74500835e188aae5edd430239764c423b66
  3443. Message-Authenticator = 0x00000000000000000000000000000000
  3444. State = 0x2f3007e82a371e3a473568eb1d8bd7c8
  3445. Finished request 23.
  3446. Going to the next request
  3447. Waking up in 9.3 seconds.
  3448. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=41, length=253
  3449. User-Name = "user1"
  3450. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3451. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3452. Symbol-Wlan-Index = "satishtest"
  3453. NAS-Port = 1
  3454. NAS-Port-Type = Wireless-802.11
  3455. Framed-MTU = 1400
  3456. Service-Type = Framed-User
  3457. NAS-IP-Address = 127.0.0.1
  3458. NAS-Identifier = "ap71xx-0F1AE6"
  3459. NAS-Port-Id = "radio1"
  3460. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3461. State = 0x2f3007e82a371e3a473568eb1d8bd7c8
  3462. EAP-Message = 0x0207002b1900170301002098f7e8fb0343914bcff397a8df3aa5f174c4a62ad4e4256b19142a52fb15536d
  3463. Message-Authenticator = 0x03dbb6d37136202c37f95ddf1d45aa38
  3464. +- entering group authorize {...}
  3465. ++[preprocess] returns ok
  3466. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3467. [suffix_oblic] No such realm "NULL"
  3468. ++[suffix_oblic] returns noop
  3469. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3470. [suffix_oblic_fs] No such realm "NULL"
  3471. ++[suffix_oblic_fs] returns noop
  3472. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3473. [prefix_oblic] No such realm "NULL"
  3474. ++[prefix_oblic] returns noop
  3475. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3476. [prefix_oblic_fs] No such realm "NULL"
  3477. ++[prefix_oblic_fs] returns noop
  3478. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3479. [suffix_at] No such realm "NULL"
  3480. ++[suffix_at] returns noop
  3481. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3482. [prefix_at] No such realm "NULL"
  3483. ++[prefix_at] returns noop
  3484. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3485. [suffix_percent] No such realm "NULL"
  3486. ++[suffix_percent] returns noop
  3487. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3488. [prefix_percent] No such realm "NULL"
  3489. ++[prefix_percent] returns noop
  3490. [copy_user_name] expand: %{User-Name} -> user1
  3491. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3492. ++[copy_user_name] returns ok
  3493. [passwd] Added User-Password: 'symbol123' to config_items
  3494. ++[passwd] returns ok
  3495. [ldap] rlm_ldap: performing user authorization for user1
  3496. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3497. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3498. rlm_ldap: ldap_get_conn: Checking Id: 0
  3499. rlm_ldap: ldap_get_conn: Got Id: 0
  3500. [ldap] search failed
  3501. rlm_ldap: ldap_release_conn: Release Id: 0
  3502. ++[ldap] returns fail
  3503. ++? if (fail)
  3504. ? Evaluating (fail) -> TRUE
  3505. ++? if (fail) -> TRUE
  3506. ++- entering if (fail) {...}
  3507. [files] users: Matched entry DEFAULT at line 11
  3508. [files] users: Matched entry DEFAULT at line 14
  3509. +++[files] returns ok
  3510. ++- if (fail) returns ok
  3511. [eap] EAP packet type response id 7 length 43
  3512. [eap] Continuing tunnel setup.
  3513. ++[eap] returns ok
  3514. [pap] Found existing Auth-Type, not changing it.
  3515. ++[pap] returns noop
  3516. ++[logintime] returns noop
  3517. Found Auth-Type = Local
  3518. Found Auth-Type = EAP
  3519. Warning: Found 2 auth-types on request for user 'user1'
  3520. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3521. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3522. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3523. !!! Please update your configuration so that the "known good" !!!
  3524. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3525. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3526. +- entering group authenticate {...}
  3527. [eap] Request found, released from the list
  3528. [eap] EAP/peap
  3529. [eap] processing type peap
  3530. [peap] processing EAP-TLS
  3531. [peap] eaptls_verify returned 7
  3532. [peap] Done initial handshake
  3533. [peap] eaptls_process returned 7
  3534. [peap] EAPTLS_OK
  3535. [peap] Session established. Decoding tunneled attributes.
  3536. [peap] EAP type nak
  3537. [peap] Got tunneled request
  3538. EAP-Message = 0x020700060306
  3539. server {
  3540. PEAP: Setting User-Name to user1
  3541. Sending tunneled request
  3542. EAP-Message = 0x020700060306
  3543. FreeRADIUS-Proxied-To = 127.0.0.1
  3544. User-Name = "user1"
  3545. State = 0x821670508211744d3e01c0990e5e85fc
  3546. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3547. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3548. Symbol-Wlan-Index = "satishtest"
  3549. NAS-Port = 1
  3550. NAS-Port-Type = Wireless-802.11
  3551. Framed-MTU = 1400
  3552. Service-Type = Framed-User
  3553. NAS-IP-Address = 127.0.0.1
  3554. NAS-Identifier = "ap71xx-0F1AE6"
  3555. NAS-Port-Id = "radio1"
  3556. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3557. server {
  3558. +- entering group authorize {...}
  3559. ++[preprocess] returns ok
  3560. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3561. [suffix_oblic] No such realm "NULL"
  3562. ++[suffix_oblic] returns noop
  3563. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3564. [suffix_oblic_fs] No such realm "NULL"
  3565. ++[suffix_oblic_fs] returns noop
  3566. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3567. [prefix_oblic] No such realm "NULL"
  3568. ++[prefix_oblic] returns noop
  3569. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3570. [prefix_oblic_fs] No such realm "NULL"
  3571. ++[prefix_oblic_fs] returns noop
  3572. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3573. [suffix_at] No such realm "NULL"
  3574. ++[suffix_at] returns noop
  3575. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3576. [prefix_at] No such realm "NULL"
  3577. ++[prefix_at] returns noop
  3578. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3579. [suffix_percent] No such realm "NULL"
  3580. ++[suffix_percent] returns noop
  3581. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3582. [prefix_percent] No such realm "NULL"
  3583. ++[prefix_percent] returns noop
  3584. [copy_user_name] expand: %{User-Name} -> user1
  3585. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3586. ++[copy_user_name] returns ok
  3587. [passwd] Added User-Password: 'symbol123' to config_items
  3588. ++[passwd] returns ok
  3589. [ldap] rlm_ldap: performing user authorization for user1
  3590. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3591. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3592. rlm_ldap: ldap_get_conn: Checking Id: 0
  3593. rlm_ldap: ldap_get_conn: Got Id: 0
  3594. [ldap] search failed
  3595. rlm_ldap: ldap_release_conn: Release Id: 0
  3596. ++[ldap] returns fail
  3597. ++? if (fail)
  3598. ? Evaluating (fail) -> TRUE
  3599. ++? if (fail) -> TRUE
  3600. ++- entering if (fail) {...}
  3601. [files] users: Matched entry DEFAULT at line 11
  3602. [files] users: Matched entry DEFAULT at line 14
  3603. +++[files] returns ok
  3604. ++- if (fail) returns ok
  3605. [eap] EAP packet type response id 7 length 6
  3606. [eap] No EAP Start, assuming it's an on-going EAP conversation
  3607. ++[eap] returns updated
  3608. [pap] Found existing Auth-Type, not changing it.
  3609. ++[pap] returns noop
  3610. ++[logintime] returns noop
  3611. Found Auth-Type = Local
  3612. Found Auth-Type = EAP
  3613. Warning: Found 2 auth-types on request for user 'user1'
  3614. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3615. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3616. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3617. !!! Please update your configuration so that the "known good" !!!
  3618. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3619. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3620. +- entering group authenticate {...}
  3621. [eap] Request found, released from the list
  3622. [eap] EAP NAK
  3623. [eap] EAP-NAK asked for EAP-Type/gtc
  3624. [eap] processing type gtc
  3625. ++[eap] returns handled
  3626. } # server
  3627. [peap] Got tunneled reply code 11
  3628. EAP-Message = 0x0108000f0650617373776f72643a20
  3629. Message-Authenticator = 0x00000000000000000000000000000000
  3630. State = 0x82167050831e764d3e01c0990e5e85fc
  3631. [peap] Got tunneled reply RADIUS code 11
  3632. EAP-Message = 0x0108000f0650617373776f72643a20
  3633. Message-Authenticator = 0x00000000000000000000000000000000
  3634. State = 0x82167050831e764d3e01c0990e5e85fc
  3635. [peap] Got tunneled Access-Challenge
  3636. ++[eap] returns handled
  3637. Sending Access-Challenge of id 41 to 127.0.0.1 port 4309
  3638. EAP-Message = 0x0108002b1900170301002044700c7791adf0f01b5a1500416edc0934fe7aa2f2541392ef6a4deef34b86e6
  3639. Message-Authenticator = 0x00000000000000000000000000000000
  3640. State = 0x2f3007e829381e3a473568eb1d8bd7c8
  3641. Finished request 24.
  3642. Going to the next request
  3643. Waking up in 9.3 seconds.
  3644. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=42, length=253
  3645. User-Name = "user1"
  3646. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3647. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3648. Symbol-Wlan-Index = "satishtest"
  3649. NAS-Port = 1
  3650. NAS-Port-Type = Wireless-802.11
  3651. Framed-MTU = 1400
  3652. Service-Type = Framed-User
  3653. NAS-IP-Address = 127.0.0.1
  3654. NAS-Identifier = "ap71xx-0F1AE6"
  3655. NAS-Port-Id = "radio1"
  3656. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3657. State = 0x2f3007e829381e3a473568eb1d8bd7c8
  3658. EAP-Message = 0x0208002b190017030100209db6eb55f2e5f82cfbbfb624e010b6f844cecc280859755505176f309d362f45
  3659. Message-Authenticator = 0x188cc44cbae063cb6ce053661debe982
  3660. +- entering group authorize {...}
  3661. ++[preprocess] returns ok
  3662. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3663. [suffix_oblic] No such realm "NULL"
  3664. ++[suffix_oblic] returns noop
  3665. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3666. [suffix_oblic_fs] No such realm "NULL"
  3667. ++[suffix_oblic_fs] returns noop
  3668. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3669. [prefix_oblic] No such realm "NULL"
  3670. ++[prefix_oblic] returns noop
  3671. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3672. [prefix_oblic_fs] No such realm "NULL"
  3673. ++[prefix_oblic_fs] returns noop
  3674. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3675. [suffix_at] No such realm "NULL"
  3676. ++[suffix_at] returns noop
  3677. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3678. [prefix_at] No such realm "NULL"
  3679. ++[prefix_at] returns noop
  3680. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3681. [suffix_percent] No such realm "NULL"
  3682. ++[suffix_percent] returns noop
  3683. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3684. [prefix_percent] No such realm "NULL"
  3685. ++[prefix_percent] returns noop
  3686. [copy_user_name] expand: %{User-Name} -> user1
  3687. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3688. ++[copy_user_name] returns ok
  3689. [passwd] Added User-Password: 'symbol123' to config_items
  3690. ++[passwd] returns ok
  3691. [ldap] rlm_ldap: performing user authorization for user1
  3692. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3693. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3694. rlm_ldap: ldap_get_conn: Checking Id: 0
  3695. rlm_ldap: ldap_get_conn: Got Id: 0
  3696. [ldap] search failed
  3697. rlm_ldap: ldap_release_conn: Release Id: 0
  3698. ++[ldap] returns fail
  3699. ++? if (fail)
  3700. ? Evaluating (fail) -> TRUE
  3701. ++? if (fail) -> TRUE
  3702. ++- entering if (fail) {...}
  3703. [files] users: Matched entry DEFAULT at line 11
  3704. [files] users: Matched entry DEFAULT at line 14
  3705. +++[files] returns ok
  3706. ++- if (fail) returns ok
  3707. [eap] EAP packet type response id 8 length 43
  3708. [eap] Continuing tunnel setup.
  3709. ++[eap] returns ok
  3710. [pap] Found existing Auth-Type, not changing it.
  3711. ++[pap] returns noop
  3712. ++[logintime] returns noop
  3713. Found Auth-Type = Local
  3714. Found Auth-Type = EAP
  3715. Warning: Found 2 auth-types on request for user 'user1'
  3716. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3717. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3718. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3719. !!! Please update your configuration so that the "known good" !!!
  3720. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3721. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3722. +- entering group authenticate {...}
  3723. [eap] Request found, released from the list
  3724. [eap] EAP/peap
  3725. [eap] processing type peap
  3726. [peap] processing EAP-TLS
  3727. [peap] eaptls_verify returned 7
  3728. [peap] Done initial handshake
  3729. [peap] eaptls_process returned 7
  3730. [peap] EAPTLS_OK
  3731. [peap] Session established. Decoding tunneled attributes.
  3732. [peap] EAP type gtc
  3733. [peap] Got tunneled request
  3734. EAP-Message = 0x0208000e0673796d626f6c313233
  3735. server {
  3736. PEAP: Setting User-Name to user1
  3737. Sending tunneled request
  3738. EAP-Message = 0x0208000e0673796d626f6c313233
  3739. FreeRADIUS-Proxied-To = 127.0.0.1
  3740. User-Name = "user1"
  3741. State = 0x82167050831e764d3e01c0990e5e85fc
  3742. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3743. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3744. Symbol-Wlan-Index = "satishtest"
  3745. NAS-Port = 1
  3746. NAS-Port-Type = Wireless-802.11
  3747. Framed-MTU = 1400
  3748. Service-Type = Framed-User
  3749. NAS-IP-Address = 127.0.0.1
  3750. NAS-Identifier = "ap71xx-0F1AE6"
  3751. NAS-Port-Id = "radio1"
  3752. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3753. server {
  3754. +- entering group authorize {...}
  3755. ++[preprocess] returns ok
  3756. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3757. [suffix_oblic] No such realm "NULL"
  3758. ++[suffix_oblic] returns noop
  3759. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3760. [suffix_oblic_fs] No such realm "NULL"
  3761. ++[suffix_oblic_fs] returns noop
  3762. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3763. [prefix_oblic] No such realm "NULL"
  3764. ++[prefix_oblic] returns noop
  3765. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3766. [prefix_oblic_fs] No such realm "NULL"
  3767. ++[prefix_oblic_fs] returns noop
  3768. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3769. [suffix_at] No such realm "NULL"
  3770. ++[suffix_at] returns noop
  3771. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3772. [prefix_at] No such realm "NULL"
  3773. ++[prefix_at] returns noop
  3774. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3775. [suffix_percent] No such realm "NULL"
  3776. ++[suffix_percent] returns noop
  3777. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3778. [prefix_percent] No such realm "NULL"
  3779. ++[prefix_percent] returns noop
  3780. [copy_user_name] expand: %{User-Name} -> user1
  3781. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3782. ++[copy_user_name] returns ok
  3783. [passwd] Added User-Password: 'symbol123' to config_items
  3784. ++[passwd] returns ok
  3785. [ldap] rlm_ldap: performing user authorization for user1
  3786. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3787. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3788. rlm_ldap: ldap_get_conn: Checking Id: 0
  3789. rlm_ldap: ldap_get_conn: Got Id: 0
  3790. [ldap] search failed
  3791. rlm_ldap: ldap_release_conn: Release Id: 0
  3792. ++[ldap] returns fail
  3793. ++? if (fail)
  3794. ? Evaluating (fail) -> TRUE
  3795. ++? if (fail) -> TRUE
  3796. ++- entering if (fail) {...}
  3797. [files] users: Matched entry DEFAULT at line 11
  3798. [files] users: Matched entry DEFAULT at line 14
  3799. +++[files] returns ok
  3800. ++- if (fail) returns ok
  3801. [eap] EAP packet type response id 8 length 14
  3802. [eap] No EAP Start, assuming it's an on-going EAP conversation
  3803. ++[eap] returns updated
  3804. [pap] Found existing Auth-Type, not changing it.
  3805. ++[pap] returns noop
  3806. ++[logintime] returns noop
  3807. Found Auth-Type = Local
  3808. Found Auth-Type = EAP
  3809. Warning: Found 2 auth-types on request for user 'user1'
  3810. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3811. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3812. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3813. !!! Please update your configuration so that the "known good" !!!
  3814. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3815. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3816. +- entering group authenticate {...}
  3817. [eap] Request found, released from the list
  3818. [eap] EAP/gtc
  3819. [eap] processing type gtc
  3820. [gtc] +- entering group LDAP {...}
  3821. [ldap] login attempt by "user1" with password "symbol123"
  3822. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3823. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3824. rlm_ldap: ldap_get_conn: Checking Id: 0
  3825. rlm_ldap: ldap_get_conn: Got Id: 0
  3826. rlm_ldap: ldap_release_conn: Release Id: 0
  3827. ++[ldap] returns fail
  3828. [eap] Handler failed in EAP/gtc
  3829. [eap] Failed in EAP select
  3830. ++[eap] returns invalid
  3831. Failed to authenticate the user.
  3832. auth: Failed to validate the user.: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32 via TLS tunnel)
  3833. Login incorrect: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32 via TLS tunnel)
  3834. } # server
  3835. [peap] Got tunneled reply code 3
  3836. EAP-Message = 0x04080004
  3837. Message-Authenticator = 0x00000000000000000000000000000000
  3838. [peap] Got tunneled reply RADIUS code 3
  3839. EAP-Message = 0x04080004
  3840. Message-Authenticator = 0x00000000000000000000000000000000
  3841. [peap] Tunneled authentication was rejected.
  3842. [peap] FAILURE
  3843. ++[eap] returns handled
  3844. Sending Access-Challenge of id 42 to 127.0.0.1 port 4309
  3845. EAP-Message = 0x0109002b190017030100206b47275f58c14e827290087eb0fdc91732eb16851900bbde1d1142f38869e22b
  3846. Message-Authenticator = 0x00000000000000000000000000000000
  3847. State = 0x2f3007e828391e3a473568eb1d8bd7c8
  3848. Finished request 25.
  3849. Going to the next request
  3850. Waking up in 9.3 seconds.
  3851. rad_recv: Access-Request packet from host 127.0.0.1 port 4309, id=43, length=253
  3852. User-Name = "user1"
  3853. Calling-Station-Id = "00-13-CE-F0-6E-32"
  3854. Called-Station-Id = "00-23-68-0E-B1-10:satishtest"
  3855. Symbol-Wlan-Index = "satishtest"
  3856. NAS-Port = 1
  3857. NAS-Port-Type = Wireless-802.11
  3858. Framed-MTU = 1400
  3859. Service-Type = Framed-User
  3860. NAS-IP-Address = 127.0.0.1
  3861. NAS-Identifier = "ap71xx-0F1AE6"
  3862. NAS-Port-Id = "radio1"
  3863. Connect-Info = "CONNECT 54Mbps 802.11bg"
  3864. State = 0x2f3007e828391e3a473568eb1d8bd7c8
  3865. EAP-Message = 0x0209002b1900170301002095ae9eea4cf797b74d6ccca0b8af5150c628db88a0bf9a54c0e222997b64ee0e
  3866. Message-Authenticator = 0x4823642880b41d07f712f54a32efc341
  3867. +- entering group authorize {...}
  3868. ++[preprocess] returns ok
  3869. [suffix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3870. [suffix_oblic] No such realm "NULL"
  3871. ++[suffix_oblic] returns noop
  3872. [suffix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3873. [suffix_oblic_fs] No such realm "NULL"
  3874. ++[suffix_oblic_fs] returns noop
  3875. [prefix_oblic] No '/' in User-Name = "user1", looking up realm NULL
  3876. [prefix_oblic] No such realm "NULL"
  3877. ++[prefix_oblic] returns noop
  3878. [prefix_oblic_fs] No '\' in User-Name = "user1", looking up realm NULL
  3879. [prefix_oblic_fs] No such realm "NULL"
  3880. ++[prefix_oblic_fs] returns noop
  3881. [suffix_at] No '@' in User-Name = "user1", looking up realm NULL
  3882. [suffix_at] No such realm "NULL"
  3883. ++[suffix_at] returns noop
  3884. [prefix_at] No '@' in User-Name = "user1", looking up realm NULL
  3885. [prefix_at] No such realm "NULL"
  3886. ++[prefix_at] returns noop
  3887. [suffix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3888. [suffix_percent] No such realm "NULL"
  3889. ++[suffix_percent] returns noop
  3890. [prefix_percent] No '%' in User-Name = "user1", looking up realm NULL
  3891. [prefix_percent] No such realm "NULL"
  3892. ++[prefix_percent] returns noop
  3893. [copy_user_name] expand: %{User-Name} -> user1
  3894. copy_user_name: Added attribute Stripped-User-Name with value 'user1'
  3895. ++[copy_user_name] returns ok
  3896. [passwd] Added User-Password: 'symbol123' to config_items
  3897. ++[passwd] returns ok
  3898. [ldap] rlm_ldap: performing user authorization for user1
  3899. [ldap] expand: (sAMAccountName=%{Stripped-User-Name}) -> (sAMAccountName=user1)
  3900. [ldap] expand: DC=wlan,DC=com -> DC=wlan,DC=com
  3901. rlm_ldap: ldap_get_conn: Checking Id: 0
  3902. rlm_ldap: ldap_get_conn: Got Id: 0
  3903. [ldap] search failed
  3904. rlm_ldap: ldap_release_conn: Release Id: 0
  3905. ++[ldap] returns fail
  3906. ++? if (fail)
  3907. ? Evaluating (fail) -> TRUE
  3908. ++? if (fail) -> TRUE
  3909. ++- entering if (fail) {...}
  3910. [files] users: Matched entry DEFAULT at line 11
  3911. [files] users: Matched entry DEFAULT at line 14
  3912. +++[files] returns ok
  3913. ++- if (fail) returns ok
  3914. [eap] EAP packet type response id 9 length 43
  3915. [eap] Continuing tunnel setup.
  3916. ++[eap] returns ok
  3917. [pap] Found existing Auth-Type, not changing it.
  3918. ++[pap] returns noop
  3919. ++[logintime] returns noop
  3920. Found Auth-Type = Local
  3921. Found Auth-Type = EAP
  3922. Warning: Found 2 auth-types on request for user 'user1'
  3923. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3924. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  3925. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3926. !!! Please update your configuration so that the "known good" !!!
  3927. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  3928. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  3929. +- entering group authenticate {...}
  3930. [eap] Request found, released from the list
  3931. [eap] EAP/peap
  3932. [eap] processing type peap
  3933. [peap] processing EAP-TLS
  3934. [peap] eaptls_verify returned 7
  3935. [peap] Done initial handshake
  3936. [peap] eaptls_process returned 7
  3937. [peap] EAPTLS_OK
  3938. [peap] Session established. Decoding tunneled attributes.
  3939. [peap] Received EAP-TLV response.
  3940. [peap] Had sent TLV failure. User was rejected earlier in this session.
  3941. [eap] Handler failed in EAP/peap
  3942. [eap] Failed in EAP select
  3943. ++[eap] returns invalid
  3944. Failed to authenticate the user.
  3945. auth: Failed to validate the user.: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32)
  3946. Login incorrect: [user1] (from client localhost port 1 cli 00-13-CE-F0-6E-32)
  3947. Sending Access-Reject of id 43 to 127.0.0.1 port 4309
  3948. EAP-Message = 0x04090004
  3949. Message-Authenticator = 0x00000000000000000000000000000000
  3950. Finished request 26.
  3951. Going to the next request
  3952. Waking up in 9.2 seconds.
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!