API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jan 11th, 2017
690
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.10 KB | None | 0 0
raw download clone embed print report
  1. (0) Received Access-Request Id 0 from CLIENT_IP:48760 to SERVER_IP:1812 length 243
  2. (0) User-Name = "447098"
  3. (0) CHAP-Challenge = 0xa6be12273d22de802e6415be02886915
  4. (0) CHAP-Password = 0x0024b9e044d5df2939297b335ec6ddf28b
  5. (0) NAS-IP-Address = 0.0.0.0
  6. (0) Service-Type = Login-User
  7. (0) Framed-IP-Address = 192.168.182.3
  8. (0) Calling-Station-Id = "CALLING_STATION_ID"
  9. (0) Called-Station-Id = "CALLED_STATION_ID"
  10. (0) NAS-Identifier = "NAS_ID"
  11. (0) Acct-Session-Id = "587564d700000001"
  12. (0) NAS-Port-Type = Wireless-802.11
  13. (0) NAS-Port = 1
  14. (0) Message-Authenticator = 0xdbdfb0c739c228ac7c5cbf3018ae1b7c
  15. (0) WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff"
  16. (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  17. (0) authorize {
  18. (0) policy filter_username {
  19. (0) if (&User-Name) {
  20. (0) if (&User-Name) -> TRUE
  21. (0) if (&User-Name) {
  22. (0) if (&User-Name =~ / /) {
  23. (0) if (&User-Name =~ / /) -> FALSE
  24. (0) if (&User-Name =~ /@[^@]*@/ ) {
  25. (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE
  26. (0) if (&User-Name =~ /\.\./ ) {
  27. (0) if (&User-Name =~ /\.\./ ) -> FALSE
  28. (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
  29. (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
  30. (0) if (&User-Name =~ /\.$/) {
  31. (0) if (&User-Name =~ /\.$/) -> FALSE
  32. (0) if (&User-Name =~ /@\./) {
  33. (0) if (&User-Name =~ /@\./) -> FALSE
  34. (0) } # if (&User-Name) = notfound
  35. (0) } # policy filter_username = notfound
  36. (0) [preprocess] = ok
  37. (0) chap: &control:Auth-Type := CHAP
  38. (0) [chap] = ok
  39. (0) [mschap] = noop
  40. (0) [digest] = noop
  41. (0) suffix: Checking for suffix after "@"
  42. (0) suffix: No '@' in User-Name = "447098", looking up realm NULL
  43. (0) suffix: No such realm "NULL"
  44. (0) [suffix] = noop
  45. (0) eap: No EAP-Message, not doing EAP
  46. (0) [eap] = noop
  47. (0) [files] = noop
  48. (0) sql: EXPAND %{User-Name}
  49. (0) sql: --> 447098
  50. (0) sql: SQL-User-Name set to '447098'
  51. rlm_sql (sql): Reserved connection (1)
  52. (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id
  53. (0) sql: --> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '447098' ORDER BY id
  54. (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '447098' ORDER BY id
  55. (0) sql: User found in radcheck table
  56. (0) sql: Conditional check items matched, merging assignment check items
  57. (0) sql: Cleartext-Password := "7nfSm"
  58. (0) sql: Called-Station-Id := "CALLED_STATION_ID"
  59. (0) sql: EXPAND SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id
  60. (0) sql: --> SELECT id, username, attribute, value, op FROM radreply WHERE username = '447098' ORDER BY id
  61. (0) sql: Executing select query: SELECT id, username, attribute, value, op FROM radreply WHERE username = '447098' ORDER BY id
  62. (0) sql: User found in radreply table, merging reply items
  63. (0) sql: Session-Timeout := 36000
  64. (0) sql: Idle-Timeout := 36000
  65. (0) sql: EXPAND SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority
  66. (0) sql: --> SELECT groupname FROM radusergroup WHERE username = '447098' ORDER BY priority
  67. (0) sql: Executing select query: SELECT groupname FROM radusergroup WHERE username = '447098' ORDER BY priority
  68. (0) sql: User not found in any groups
  69. rlm_sql (sql): Released connection (1)
  70. rlm_sql (sql): Need 4 more connections to reach 10 spares
  71. rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used
  72. rlm_sql_mysql: Starting connect to MySQL server
  73. rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 5.5.44-MariaDB-log, protocol version 10
  74. (0) [sql] = ok
  75. (0) [expiration] = noop
  76. (0) [logintime] = noop
  77. (0) pap: WARNING: Auth-Type already set. Not setting to PAP
  78. (0) [pap] = noop
  79. (0) } # authorize = ok
  80. (0) Found Auth-Type = CHAP
  81. (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  82. (0) Auth-Type CHAP {
  83. (0) chap: Comparing with "known good" Cleartext-Password
  84. (0) chap: CHAP user "447098" authenticated successfully
  85. (0) [chap] = ok
  86. (0) } # Auth-Type CHAP = ok
  87. (0) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  88. (0) post-auth {
  89. (0) update {
  90. (0) No attributes updated
  91. (0) } # update = noop
  92. (0) sql: EXPAND .query
  93. (0) sql: --> .query
  94. (0) sql: Using query template 'query'
  95. rlm_sql (sql): Reserved connection (2)
  96. (0) sql: EXPAND %{User-Name}
  97. (0) sql: --> 447098
  98. (0) sql: SQL-User-Name set to '447098'
  99. (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')
  100. (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '447098', '0x0024b9e044d5df2939297b335ec6ddf28b', 'Access-Accept', '2017-01-11 00:49:30')
  101. (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '447098', '0x0024b9e044d5df2939297b335ec6ddf28b', 'Access-Accept', '2017-01-11 00:49:30')
  102. (0) sql: SQL query returned: success
  103. (0) sql: 1 record(s) updated
  104. rlm_sql (sql): Released connection (2)
  105. (0) [sql] = ok
  106. (0) [exec] = noop
  107. (0) policy remove_reply_message_if_eap {
  108. (0) if (&reply:EAP-Message && &reply:Reply-Message) {
  109. (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
  110. (0) else {
  111. (0) [noop] = noop
  112. (0) } # else = noop
  113. (0) } # policy remove_reply_message_if_eap = noop
  114. (0) } # post-auth = ok
  115. (0) Sent Access-Accept Id 0 from SERVER_IP:1812 to CLIENT_IP:48760 length 0
  116. (0) Session-Timeout = 36000
  117. (0) Idle-Timeout = 36000
  118. (0) Finished request
  119. Waking up in 4.9 seconds.
  120. (1) Received Accounting-Request Id 1 from CLIENT_IP:47109 to SERVER_IP:1813 length 158
  121. (1) Acct-Status-Type = Start
  122. (1) User-Name = "447098"
  123. (1) Calling-Station-Id = "CALLING_STATION_ID"
  124. (1) Called-Station-Id = "CALLED_STATION_ID"
  125. (1) NAS-Port-Type = Wireless-802.11
  126. (1) NAS-Port = 1
  127. (1) NAS-Port-Id = "00000001"
  128. (1) NAS-IP-Address = 0.0.0.0
  129. (1) NAS-Identifier = "NAS_ID"
  130. (1) Framed-IP-Address = 192.168.182.3
  131. (1) Acct-Session-Id = "587564d700000001"
  132. (1) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  133. (1) preacct {
  134. (1) [preprocess] = ok
  135. (1) policy acct_unique {
  136. (1) update request {
  137. (1) Tmp-String-9 := "ai:"
  138. (1) } # update request = noop
  139. (1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  140. (1) EXPAND %{hex:&Class}
  141. (1) -->
  142. (1) EXPAND ^%{hex:&Tmp-String-9}
  143. (1) --> ^61693a
  144. (1) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE
  145. (1) else {
  146. (1) update request {
  147. (1) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  148. (1) --> 64ac5af80f97605fc0620439dc6be9dd
  149. (1) &Acct-Unique-Session-Id := 64ac5af80f97605fc0620439dc6be9dd
  150. (1) } # update request = noop
  151. (1) } # else = noop
  152. (1) } # policy acct_unique = noop
  153. (1) suffix: Checking for suffix after "@"
  154. (1) suffix: No '@' in User-Name = "447098", looking up realm NULL
  155. (1) suffix: No such realm "NULL"
  156. (1) [suffix] = noop
  157. (1) [files] = noop
  158. (1) } # preacct = ok
  159. (1) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  160. (1) accounting {
  161. (1) detail: EXPAND /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  162. (1) detail: --> /usr/local/var/log/radius/radacct/CLIENT_IP/detail-20170111
  163. (1) detail: /usr/local/var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/CLIENT_IP/detail-20170111
  164. (1) detail: EXPAND %t
  165. (1) detail: --> Wed Jan 11 00:49:30 2017
  166. (1) [detail] = ok
  167. (1) [unix] = ok
  168. (1) sql: EXPAND %{tolower:type.%{Acct-Status-Type}.query}
  169. (1) sql: --> type.start.query
  170. (1) sql: Using query template 'query'
  171. rlm_sql (sql): Reserved connection (3)
  172. (1) sql: EXPAND %{User-Name}
  173. (1) sql: --> 447098
  174. (1) sql: SQL-User-Name set to '447098'
  175. (1) sql: EXPAND INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{%{NAS-Port-ID}:-%{NAS-Port}}', '%{NAS-Port-Type}', %{%{integer:Event-Timestamp}:-date('now')}, %{%{integer:Event-Timestamp}:-date('now')}, NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}')
  176. (1) sql: --> INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('587564d700000001', '76ac5af80f97605fc0620439dc6be9dd', '447098', '', '0.0.0.0', '00000001', 'Wireless-802.11', 1484084970, 1484084970, NULL, '0', '', '', '', '0', '0', 'CALLED_STATION_ID', 'CALLING_STATION_ID', '', '', '', '192.168.182.3')
  177. (1) sql: Executing query: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctupdatetime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress) VALUES ('587564d700000001', '76ac5af80f97605fc0620439dc6be9dd', '447098', '', '0.0.0.0', '00000001', 'Wireless-802.11', 1484084970, 1484084970, NULL, '0', '', '', '', '0', '0', 'CALLED_STATION_ID', 'CALLING_STATION_ID', '', '', '', '192.168.182.3')
  178. (1) sql: SQL query returned: success
  179. (1) sql: 1 record(s) updated
  180. rlm_sql (sql): Released connection (3)
  181. (1) [sql] = ok
  182. (1) [exec] = noop
  183. (1) attr_filter.accounting_response: EXPAND %{User-Name}
  184. (1) attr_filter.accounting_response: --> 447098
  185. (1) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  186. (1) [attr_filter.accounting_response] = updated
  187. (1) } # accounting = updated
  188. (1) Sent Accounting-Response Id 1 from SERVER_IP:1813 to CLIENT_IP:47109 length 0
  189. (1) Finished request
  190. (1) Cleaning up request packet ID 1 with timestamp +40
  191. Waking up in 4.9 seconds.
  192. (0) Cleaning up request packet ID 0 with timestamp +40
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!