API tools faq
paste
Advertisement
Guest User

without accounting packet debug

a guest
Aug 1st, 2013
79
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.90 KB | None | 0 0
raw download clone embed print report
  1. rlm_sql (sql): Adding client 10.66.29.0 (SMSF, server=<none>) to clients list
  2. rlm_sql (sql): Read entry nasname=10.88.29.0/24,shortname=SMTL,secret=r@d1u$@smtl88
  3. rlm_sql (sql): Adding client 10.88.29.0 (SMTL, server=<none>) to clients list
  4. rlm_sql (sql): Read entry nasname=10.25.29.0/24,shortname=SMVL,secret=r@d1u$@smvl25
  5. rlm_sql (sql): Adding client 10.25.29.0 (SMVL, server=<none>) to clients list
  6. rlm_sql (sql): Read entry nasname=10.250.254.0/23,shortname=SVAP,secret=r@d1u$@svap250
  7. rlm_sql (sql): Adding client 10.250.254.0 (SVAP, server=<none>) to clients list
  8. rlm_sql (sql): Released sql socket id: 4
  9. Module: Checking preacct {...} for more modules to load
  10. Module: Linked to module rlm_acct_unique
  11. Module: Instantiating module "acct_unique" from file /etc/raddb/modules/acct_unique
  12. acct_unique {
  13. key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"
  14. }
  15. Module: Checking accounting {...} for more modules to load
  16. Module: Instantiating module "detail" from file /etc/raddb/modules/detail
  17. detail {
  18. detailfile = "/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
  19. header = "%t"
  20. detailperm = 384
  21. dirperm = 493
  22. locking = no
  23. log_packet_header = no
  24. }
  25. Module: Linked to module rlm_radutmp
  26. Module: Instantiating module "radutmp" from file /etc/raddb/modules/radutmp
  27. radutmp {
  28. filename = "/var/log/radius/radutmp"
  29. username = "%{User-Name}"
  30. case_sensitive = yes
  31. check_with_nas = yes
  32. perm = 384
  33. callerid = yes
  34. }
  35. Module: Instantiating module "ok" from file /etc/raddb/modules/always
  36. always ok {
  37. rcode = "ok"
  38. simulcount = 0
  39. mpp = no
  40. }
  41. Module: Linked to module rlm_attr_filter
  42. Module: Instantiating module "attr_filter.accounting_response" from file /etc/raddb/modules/attr_filter
  43. attr_filter attr_filter.accounting_response {
  44. attrsfile = "/etc/raddb/attrs.accounting_response"
  45. key = "%{User-Name}"
  46. relaxed = no
  47. }
  48. Module: Checking session {...} for more modules to load
  49. Module: Checking post-proxy {...} for more modules to load
  50. Module: Checking post-auth {...} for more modules to load
  51. Module: Instantiating module "attr_filter.access_reject" from file /etc/raddb/modules/attr_filter
  52. attr_filter attr_filter.access_reject {
  53. attrsfile = "/etc/raddb/attrs.access_reject"
  54. key = "%{User-Name}"
  55. relaxed = no
  56. }
  57. } # modules
  58. } # server
  59. server inner-tunnel { # from file /etc/raddb/sites-enabled/inner-tunnel
  60. modules {
  61. Module: Checking authenticate {...} for more modules to load
  62. Module: Checking authorize {...} for more modules to load
  63. Module: Checking session {...} for more modules to load
  64. Module: Checking post-proxy {...} for more modules to load
  65. Module: Checking post-auth {...} for more modules to load
  66. } # modules
  67. } # server
  68. radiusd: #### Opening IP addresses and Ports ####
  69. listen {
  70. type = "auth"
  71. ipaddr = *
  72. port = 0
  73. }
  74. listen {
  75. type = "acct"
  76. ipaddr = *
  77. port = 0
  78. }
  79. listen {
  80. type = "control"
  81. listen {
  82. socket = "/var/run/radiusd/radiusd.sock"
  83. }
  84. }
  85. listen {
  86. type = "auth"
  87. ipaddr = 127.0.0.1
  88. port = 18120
  89. }
  90. ... adding new socket proxy address * port 39486
  91. Listening on authentication address * port 1812
  92. Listening on accounting address * port 1813
  93. Listening on command file /var/run/radiusd/radiusd.sock
  94. Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel
  95. Listening on proxy address * port 1814
  96. Ready to process requests.
  97. rad_recv: Access-Request packet from host 10.250.254.111 port 49154, id=0, length=94
  98. User-Name = "quidillaatmaax"
  99. User-Password = "xxxxx"
  100. Cisco-AVPair = "shell:priv-lvl=1"
  101. NAS-IP-Address = 10.250.254.111
  102. Acct-Session-Id = "0500000E"
  103. # Executing section authorize from file /etc/raddb/sites-enabled/default
  104. +- entering group authorize {...}
  105. ++- entering policy filter_username {...}
  106. +++? if (User-Name =~ /^ /)
  107. ? Evaluating (User-Name =~ /^ /) -> FALSE
  108. +++? if (User-Name =~ /^ /) -> FALSE
  109. +++? if (User-Name =~ / $$/)
  110. ? Evaluating (User-Name =~ / $$/) -> FALSE
  111. +++? if (User-Name =~ / $$/) -> FALSE
  112. +++? if (User-Name != "%{tolower:%{User-Name}}")
  113. expand: %{User-Name} -> quidillaatmaax
  114. expand: %{tolower:%{User-Name}} -> quidillaatmaax
  115. ? Evaluating (User-Name != "%{tolower:%{User-Name}}") -> FALSE
  116. +++? if (User-Name != "%{tolower:%{User-Name}}") -> FALSE
  117. ++- policy filter_username returns notfound
  118. ++[preprocess] returns ok
  119. [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/radius/radacct/10.250.254.111/auth-detail-20130801
  120. [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/10.250.254.111/auth-detail-20130801
  121. [auth_log] expand: %t -> Thu Aug 1 14:46:23 2013
  122. ++[auth_log] returns ok
  123. ++[chap] returns noop
  124. ++[mschap] returns noop
  125. ++[digest] returns noop
  126. [suffix] No '@' in User-Name = "quidillaatmaax", looking up realm NULL
  127. [suffix] No such realm "NULL"
  128. ++[suffix] returns noop
  129. [eap] No EAP-Message, not doing EAP
  130. ++[eap] returns noop
  131. ++[files] returns noop
  132. [sql] expand: %{User-Name} -> quidillaatmaax
  133. [sql] sql_set_user escaped user --> 'quidillaatmaax'
  134. rlm_sql (sql): Reserving sql socket id: 3
  135. [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'quidillaatmaax' ORDER BY id
  136. rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'quidillaatmaax' ORDER BY id
  137. [sql] User found in radcheck table
  138. [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'quidillaatmaax' ORDER BY id
  139. rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radreply WHERE username = 'quidillaatmaax' ORDER BY id
  140. [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'quidillaatmaax' ORDER BY priority
  141. rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = 'quidillaatmaax' ORDER BY priority
  142. [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'Netops - Exp 29 Nov 2013' ORDER BY id
  143. rlm_sql_mysql: query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'Netops - Exp 29 Nov 2013' ORDER BY id
  144. rlm_sql (sql): Released sql socket id: 3
  145. ++[sql] returns ok
  146. ++[expiration] returns noop
  147. ++[logintime] returns noop
  148. [pap] Normalizing MD5-Password from hex encoding
  149. ++[pap] returns updated
  150. Found Auth-Type = PAP
  151. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  152. !!! Replacing User-Password in config items with Cleartext-Password. !!!
  153. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  154. !!! Please update your configuration so that the "known good" !!!
  155. !!! clear text password is in Cleartext-Password, and not in User-Password. !!!
  156. !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  157. # Executing group from file /etc/raddb/sites-enabled/default
  158. +- entering group PAP {...}
  159. [pap] login attempt with password "xxxxx"
  160. [pap] Using MD5 encryption.
  161. [pap] User authenticated successfully
  162. ++[pap] returns ok
  163. Login OK: [quidillaatmaax] (from client SVAP port 0)
  164. # Executing section post-auth from file /etc/raddb/sites-enabled/default
  165. +- entering group post-auth {...}
  166. [sql] expand: %{User-Name} -> quidillaatmaax
  167. [sql] sql_set_user escaped user --> 'quidillaatmaax'
  168. [sql] expand: %{User-Password} -> xxxxx
  169. [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'quidillaatmaax', 'xxxxx', 'Access-Accept', '2013-08-01 14:46:23')
  170. [sql] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql
  171. rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'quidillaatmaax', 'xxxxx', 'Access-Accept', '2013-08-01 14:46:23')
  172. rlm_sql (sql): Reserving sql socket id: 2
  173. rlm_sql_mysql: query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'quidillaatmaax', 'xxxxx', 'Access-Accept', '2013-08-01 14:46:23')
  174. rlm_sql (sql): Released sql socket id: 2
  175. ++[sql] returns ok
  176. ++[exec] returns noop
  177. Sending Access-Accept of id 0 to 10.250.254.111 port 49154
  178. Service-Type = Administrative-User
  179. Finished request 0.
  180. Going to the next request
  181. Waking up in 4.9 seconds.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!