API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Jan 11th, 2017
184
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 11.47 KB | None | 0 0
raw download clone embed print report
  1. rad_recv: Access-Request packet from host CLIENT_IP port 48219, id=14, length=269
  2. server dynamic_client_server {
  3. rlm_raw: WISPr-Location-Name = CALLED_STATION_ID
  4. rlm_raw: WISPr-Location-Name = CALLED_STATION_ID
  5. rlm_sql (sql): Reserving sql socket id: 31
  6. rlm_sql (sql): Released sql socket id: 31
  7. rlm_raw: WISPr-Location-Name = CALLED_STATION_ID
  8. rlm_sql (sql): Reserving sql socket id: 30
  9. rlm_sql (sql): Released sql socket id: 30
  10. rlm_raw: WISPr-Location-Name = CALLED_STATION_ID
  11. } # server dynamic_client_server
  12. - Added client CLIENT_IP with shared secret 8c4e70fa338ede5c6ef197f003a66aee
  13. rad_recv: Access-Request packet from host CLIENT_IP port 48219, id=14, length=269
  14. NAS-Port-Type = Wireless-802.11
  15. Calling-Station-Id = "CALLING_STATION_ID"
  16. Called-Station-Id = "CALLED_STATION_ID"
  17. NAS-Port-Id = "wlan2-hotspot"
  18. User-Name = "447123"
  19. NAS-Port = 2160066563
  20. Acct-Session-Id = "80c00003"
  21. Framed-IP-Address = 192.168.20.197
  22. Mikrotik-Host-IP = 192.168.20.197
  23. WISPr-Location-Name = "CALLED_STATION_ID"
  24. CHAP-Challenge = 0xacfb2a3b05aa9352faf8518b0c6b4944
  25. CHAP-Password = 0x8afcc119d00beb486878e0d70fe3926259
  26. Service-Type = Login-User
  27. WISPr-Logoff-URL = "http://192.168.20.1/logout"
  28. NAS-Identifier = "MikroTik"
  29. NAS-IP-Address = 192.168.0.123
  30. # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  31. +group authorize {
  32. ++[preprocess] = ok
  33. ++policy rewrite.called_station_id {
  34. +++? if ((Called-Station-Id) && "%{Called-Station-Id}" =~ /^%{config:policy.mac-addr}(:(.+))?$/i)
  35. ?? Evaluating (Called-Station-Id) -> TRUE
  36. expand: %{Called-Station-Id} -> CALLED_STATION_ID
  37. expand: policy.mac-addr -> policy.mac-addr
  38. expand: ^%{config:policy.mac-addr}(:(.+))?$ -> ^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$
  39. ? Evaluating ("%{Called-Station-Id}" =~ /^%{config:policy.mac-addr}(:(.+))?$/i) -> FALSE
  40. +++? if ((Called-Station-Id) && "%{Called-Station-Id}" =~ /^%{config:policy.mac-addr}(:(.+))?$/i) -> FALSE
  41. +++else else {
  42. ++++[noop] = noop
  43. +++} # else else = noop
  44. ++} # policy rewrite.called_station_id = noop
  45. [chap] Setting 'Auth-Type := CHAP'
  46. ++[chap] = ok
  47. ++[files] = noop
  48. [sql] expand: %{User-Name} -> 447123
  49. [sql] sql_set_user escaped user --> '447123'
  50. rlm_sql (sql): Reserving sql socket id: 29
  51. [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = '447123' ORDER BY id
  52. [sql] User found in radcheck table
  53. [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = '447123' ORDER BY id
  54. [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '447123' ORDER BY priority
  55. rlm_sql (sql): Released sql socket id: 29
  56. ++[sql] = ok
  57. ++[expiration] = noop
  58. ++[logintime] = noop
  59. [pap] WARNING: Auth-Type already set. Not setting to PAP
  60. ++[pap] = noop
  61. +} # group authorize = ok
  62. Found Auth-Type = CHAP
  63. # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  64. +group CHAP {
  65. [chap] login attempt by "447123" with CHAP password
  66. [chap] Using clear text password "Le3ry" for user 447123 authentication.
  67. [chap] chap user 447123 authenticated succesfully
  68. ++[chap] = ok
  69. +} # group CHAP = ok
  70. Login OK: [447123/<CHAP-Password>] (from client CALLED_STATION_ID port 2160066563 cli CALLING_STATION_ID)
  71. # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  72. +group post-auth {
  73. [sql] expand: %{User-Name} -> 447123
  74. [sql] sql_set_user escaped user --> '447123'
  75. [sql] expand: %{User-Password} ->
  76. [sql] ... expanding second conditional
  77. [sql] expand: %{Chap-Password} -> 0x8afcc119d00beb486878e0d70fe3926259
  78. [sql] expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '447123', '0x8afcc119d00beb486878e0d70fe3926259', 'Access-Accept', '2017-01-11 02:53:44')
  79. rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '447123', '0x8afcc119d00beb486878e0d70fe3926259', 'Access-Accept', '2017-01-11 02:53:44')
  80. rlm_sql (sql): Reserving sql socket id: 28
  81. rlm_sql (sql): Released sql socket id: 28
  82. ++[sql] = ok
  83. ++[exec] = noop
  84. +} # group post-auth = ok
  85. Sending Access-Accept of id 14 to CLIENT_IP port 48219
  86. Session-Timeout := 43200
  87. Idle-Timeout := 43200
  88. Finished request 0.
  89. Going to the next request
  90. Waking up in 4.9 seconds.
  91. rad_recv: Accounting-Request packet from host CLIENT_IP port 31837, id=15, length=48
  92. Acct-Status-Type = Accounting-On
  93. NAS-Identifier = "MikroTik"
  94. Acct-Delay-Time = 0
  95. NAS-IP-Address = 192.168.0.123
  96. # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  97. +group preacct {
  98. ++[preprocess] = ok
  99. [acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent
  100. [acct_unique] WARNING: Attribute Acct-Session-Id was not found in request, unique ID MAY be inconsistent
  101. [acct_unique] WARNING: Attribute User-Name was not found in request, unique ID MAY be inconsistent
  102. [acct_unique] Hashing ',NAS-Identifier = "MikroTik",NAS-IP-Address = 192.168.0.123,,'
  103. [acct_unique] Acct-Unique-Session-ID = "86cdd5ba27ed23d8".
  104. ++[acct_unique] = ok
  105. [suffix] Proxy reply, or no User-Name. Ignoring.
  106. ++[suffix] = ok
  107. ++[files] = noop
  108. +} # group preacct = ok
  109. # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  110. +group accounting {
  111. [detail] expand: %{Packet-Src-IP-Address} -> CLIENT_IP
  112. [detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/CLIENT_IP/detail-20170111
  113. [detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/CLIENT_IP/detail-20170111
  114. [detail] expand: %t -> Wed Jan 11 02:53:44 2017
  115. ++[detail] = ok
  116. [sql] Received Acct On/Off packet
  117. [sql] expand: %{Acct-Delay-Time} -> 0
  118. [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = unix_timestamp('%S') - unix_timestamp(acctstarttime), acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = %{%{Acct-Delay-Time}:-0} WHERE acctstoptime IS NULL AND nasipaddress = '%{NAS-IP-Address}' AND acctstarttime <= '%S' -> UPDATE radacct SET acctstoptime = '2017-01-11 02:53:44', acctsessiontime = unix_timestamp('2017-01-11 02:53:44') - unix_timestamp(acctstarttime), acctterminatecause = '', acctstopdelay = 0 WHERE acctstoptime IS NULL AND nasipaddress = '192.168.0.123' AND acctstarttime <= '2017-01-11 02:53:44'
  119. rlm_sql (sql): Reserving sql socket id: 27
  120. rlm_sql (sql): Released sql socket id: 27
  121. ++[sql] = ok
  122. ++[exec] = noop
  123. [attr_filter.accounting_response] expand: %{User-Name} ->
  124. ++[attr_filter.accounting_response] = noop
  125. +} # group accounting = ok
  126. Sending Accounting-Response of id 15 to CLIENT_IP port 31837
  127. Finished request 1.
  128. Cleaning up request 1 ID 15 with timestamp +25
  129. Going to the next request
  130. Waking up in 4.6 seconds.
  131. rad_recv: Accounting-Request packet from host CLIENT_IP port 27252, id=16, length=210
  132. Acct-Status-Type = Start
  133. NAS-Port-Type = Wireless-802.11
  134. Calling-Station-Id = "CALLING_STATION_ID"
  135. Called-Station-Id = "CALLED_STATION_ID"
  136. NAS-Port-Id = "wlan2-hotspot"
  137. User-Name = "447123"
  138. NAS-Port = 2160066563
  139. Acct-Session-Id = "80c00003"
  140. Framed-IP-Address = 192.168.20.197
  141. Mikrotik-Host-IP = 192.168.20.197
  142. WISPr-Location-Name = "CALLED_STATION_ID"
  143. Event-Timestamp = "Jan 11 2017 02:53:37 MSK"
  144. NAS-Identifier = "MikroTik"
  145. Acct-Delay-Time = 0
  146. NAS-IP-Address = 192.168.0.123
  147. # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  148. +group preacct {
  149. ++[preprocess] = ok
  150. [acct_unique] Hashing 'NAS-Port = 2160066563,NAS-Identifier = "MikroTik",NAS-IP-Address = 192.168.0.123,Acct-Session-Id = "80c00003",User-Name = "447123"'
  151. [acct_unique] Acct-Unique-Session-ID = "7c8829f85d172d95".
  152. ++[acct_unique] = ok
  153. [suffix] No '@' in User-Name = "447123", looking up realm NULL
  154. [suffix] No such realm "NULL"
  155. ++[suffix] = noop
  156. ++[files] = noop
  157. +} # group preacct = ok
  158. # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  159. +group accounting {
  160. [detail] expand: %{Packet-Src-IP-Address} -> CLIENT_IP
  161. [detail] expand: /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/radius/radacct/CLIENT_IP/detail-20170111
  162. [detail] /var/log/radius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radius/radacct/CLIENT_IP/detail-20170111
  163. [detail] expand: %t -> Wed Jan 11 02:53:44 2017
  164. ++[detail] = ok
  165. [sql] expand: %{User-Name} -> 447123
  166. [sql] sql_set_user escaped user --> '447123'
  167. [sql] expand: %{Acct-Delay-Time} -> 0
  168. [sql] expand: INSERT INTO radacct (acctsessionid, acctuniqueid, username, realm, nasipaddress, nasportid, nasporttype, acctstarttime, acctstoptime, acctsessiontime, acctauthentic, connectinfo_start, connectinfo_stop, acctinputoctets, acctoutputoctets, calledstationid, callingstationid, acctterminatecause, servicetype, framedprotocol, framedipaddress, acctstartdelay, acctstopdelay, xascendsessionsvrkey) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', NULL, '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}',
  169. rlm_sql (sql): Reserving sql socket id: 26
  170. rlm_sql (sql): Released sql socket id: 26
  171. ++[sql] = ok
  172. ++[exec] = noop
  173. [attr_filter.accounting_response] expand: %{User-Name} -> 447123
  174. attr_filter: Matched entry DEFAULT at line 12
  175. ++[attr_filter.accounting_response] = updated
  176. +} # group accounting = updated
  177. Sending Accounting-Response of id 16 to CLIENT_IP port 27252
  178. Finished request 2.
  179. Cleaning up request 2 ID 16 with timestamp +25
  180. Going to the next request
  181. Waking up in 4.6 seconds.
  182. Cleaning up request 0 ID 14 with timestamp +25
  183. Ready to process requests.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!