Advertisement
Guest User

Untitled

a guest
Jul 22nd, 2018
216
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Ready to process requests
  2. (0) Received Access-Request Id 27 from 172.16.3.1:58298 to 172.16.3.165:1812 length 176
  3. (0) Service-Type = Framed-User
  4. (0) Framed-Protocol = PPP
  5. (0) NAS-Port = 15728657
  6. (0) NAS-Port-Type = Virtual
  7. (0) User-Name = "test11"
  8. (0) Calling-Station-Id = "172.16.3.133"
  9. (0) Called-Station-Id = "172.16.3.1"
  10. (0) MS-CHAP-Challenge = 0xd1e5405c13cfd13704c759209c2cbc34
  11. (0) MS-CHAP2-Response = 0x0100e19360fde3c17a1992bd3da92ef519ca00000000000000008cf66918551f8e2388caa512b2827a70895b066f122969da
  12. (0) NAS-Identifier = "MikroTik"
  13. (0) NAS-IP-Address = 172.16.3.1
  14. (0) # Executing section authorize from file /etc/raddb/sites-enabled/default
  15. (0) authorize {
  16. (0) policy filter_username {
  17. (0) if (&User-Name) {
  18. (0) if (&User-Name) -> TRUE
  19. (0) if (&User-Name) {
  20. (0) if (&User-Name =~ / /) {
  21. (0) if (&User-Name =~ / /) -> FALSE
  22. (0) if (&User-Name =~ /@[^@]*@/ ) {
  23. (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE
  24. (0) if (&User-Name =~ /\.\./ ) {
  25. (0) if (&User-Name =~ /\.\./ ) -> FALSE
  26. (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) {
  27. (0) if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/)) -> FALSE
  28. (0) if (&User-Name =~ /\.$/) {
  29. (0) if (&User-Name =~ /\.$/) -> FALSE
  30. (0) if (&User-Name =~ /@\./) {
  31. (0) if (&User-Name =~ /@\./) -> FALSE
  32. (0) } # if (&User-Name) = notfound
  33. (0) } # policy filter_username = notfound
  34. (0) [preprocess] = ok
  35. (0) [chap] = noop
  36. (0) mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'
  37. (0) [mschap] = ok
  38. (0) [digest] = noop
  39. (0) suffix: Checking for suffix after "@"
  40. (0) suffix: No '@' in User-Name = "test11", looking up realm NULL
  41. (0) suffix: No such realm "NULL"
  42. (0) [suffix] = noop
  43. (0) eap: No EAP-Message, not doing EAP
  44. (0) [eap] = noop
  45. (0) files: users: Matched entry DEFAULT at line 181
  46. (0) [files] = ok
  47. (0) [expiration] = noop
  48. (0) [logintime] = noop
  49. (0) multiotp: Executing: /usr/local/bin/multiotp/multiotp.php %{User-Name} %{User-Password} -request-nt-key -src=%{Packet-Src-IP-Address} -chap-challenge=%{CHAP-Challenge} -chap-password=%{CHAP-Password} -ms-chap-challenge=%{MS-CHAP-Challenge} -ms-chap-response=%{MS-CHAP-Response} -ms-chap2-response=%{MS-CHAP2-Response}:
  50. (0) multiotp: EXPAND %{User-Name}
  51. (0) multiotp: --> test11
  52. (0) multiotp: EXPAND %{User-Password}
  53. (0) multiotp: -->
  54. (0) multiotp: EXPAND -src=%{Packet-Src-IP-Address}
  55. (0) multiotp: --> -src=172.16.3.1
  56. (0) multiotp: EXPAND -chap-challenge=%{CHAP-Challenge}
  57. (0) multiotp: --> -chap-challenge=
  58. (0) multiotp: EXPAND -chap-password=%{CHAP-Password}
  59. (0) multiotp: --> -chap-password=
  60. (0) multiotp: EXPAND -ms-chap-challenge=%{MS-CHAP-Challenge}
  61. (0) multiotp: --> -ms-chap-challenge=0xd1e5405c13cfd13704c759209c2cbc34
  62. (0) multiotp: EXPAND -ms-chap-response=%{MS-CHAP-Response}
  63. (0) multiotp: --> -ms-chap-response=
  64. (0) multiotp: EXPAND -ms-chap2-response=%{MS-CHAP2-Response}
  65. (0) multiotp: --> -ms-chap2-response=0x0100e19360fde3c17a1992bd3da92ef519ca00000000000000008cf66918551f8e2388caa512b2827a70895b066f122969da
  66. (0) multiotp: ERROR: Failed parsing output from: /usr/local/bin/multiotp/multiotp.php %{User-Name} %{User-Password} -request-nt-key -src=%{Packet-Src-IP-Address} -chap-challenge=%{CHAP-Challenge} -chap-password=%{CHAP-Password} -ms-chap-challenge=%{MS-CHAP-Challenge} -ms-chap-response=%{MS-CHAP-Response} -ms-chap2-response=%{MS-CHAP2-Response}: Expecting operator
  67. (0) multiotp: ERROR: Program returned code (0) and output 'Filter-Id += "VPN",NT_KEY: ADD2B3F97098F8FFF8C850388902437D '
  68. (0) [multiotp] = fail
  69. (0) } # authorize = fail
  70. (0) Using Post-Auth-Type Reject
  71. (0) # Executing group from file /etc/raddb/sites-enabled/default
  72. (0) Post-Auth-Type REJECT {
  73. (0) attr_filter.access_reject: EXPAND %{User-Name}
  74. (0) attr_filter.access_reject: --> test11
  75. (0) attr_filter.access_reject: Matched entry DEFAULT at line 11
  76. (0) [attr_filter.access_reject] = updated
  77. (0) [eap] = noop
  78. (0) policy remove_reply_message_if_eap {
  79. (0) if (&reply:EAP-Message && &reply:Reply-Message) {
  80. (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
  81. (0) else {
  82. (0) [noop] = noop
  83. (0) } # else = noop
  84. (0) } # policy remove_reply_message_if_eap = noop
  85. (0) } # Post-Auth-Type REJECT = updated
  86. (0) Delaying response for 1.000000 seconds
  87. Waking up in 0.2 seconds.
  88. (0) (0) Discarding duplicate request from client MikroTik port 58298 - ID: 27 due to delayed response
  89. Waking up in 0.7 seconds.
  90. (0) (0) Discarding duplicate request from client MikroTik port 58298 - ID: 27 due to delayed response
  91. Waking up in 0.5 seconds.
  92. (0) Sending delayed response
  93. (0) Sent Access-Reject Id 27 from 172.16.3.165:1812 to 172.16.3.1:58298 length 20
  94. Waking up in 3.9 seconds.
  95. (0) Cleaning up request packet ID 27 with timestamp +21
  96. Ready to process requests
Advertisement
RAW Paste Data Copied
Advertisement