API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Apr 14th, 2020
131
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 335.78 KB | None | 0 0
raw download clone embed print report
  1. libssl version mismatch.  built: 1000214f linked: 100020ff
  2. FreeRADIUS Version 3.0.20
  3. Copyright (C) 1999-2019 The FreeRADIUS server project and contributors
  4. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
  5. PARTICULAR PURPOSE
  6. You may redistribute copies of FreeRADIUS under the terms of the
  7. GNU General Public License
  8. For more information about these matters, see the file named COPYRIGHT
  9. Starting - reading configuration files ...
  10. including dictionary file /usr/local/share/freeradius/dictionary
  11. including dictionary file /usr/local/share/freeradius/dictionary.dhcp
  12. including dictionary file /usr/local/share/freeradius/dictionary.vqp
  13. including dictionary file /usr/local/etc/raddb/dictionary
  14. including configuration file /usr/local/etc/raddb/radiusd.conf
  15. including configuration file /usr/local/etc/raddb/clients.conf
  16. including files in directory /usr/local/etc/raddb/mods-enabled/
  17. including configuration file /usr/local/etc/raddb/mods-enabled/attr_filter
  18. including configuration file /usr/local/etc/raddb/mods-enabled/cache_eap
  19. including configuration file /usr/local/etc/raddb/mods-enabled/chap
  20. including configuration file /usr/local/etc/raddb/mods-enabled/date
  21. including configuration file /usr/local/etc/raddb/mods-enabled/detail
  22. including configuration file /usr/local/etc/raddb/mods-enabled/detail.log
  23. including configuration file /usr/local/etc/raddb/mods-enabled/digest
  24. including configuration file /usr/local/etc/raddb/mods-enabled/dynamic_clients
  25. including configuration file /usr/local/etc/raddb/mods-enabled/eap
  26. including configuration file /usr/local/etc/raddb/mods-enabled/echo
  27. including configuration file /usr/local/etc/raddb/mods-enabled/exec
  28. including configuration file /usr/local/etc/raddb/mods-enabled/expiration
  29. including configuration file /usr/local/etc/raddb/mods-enabled/expr
  30. including configuration file /usr/local/etc/raddb/mods-enabled/files
  31. including configuration file /usr/local/etc/raddb/mods-enabled/linelog
  32. including configuration file /usr/local/etc/raddb/mods-enabled/logintime
  33. including configuration file /usr/local/etc/raddb/mods-enabled/mschap
  34. including configuration file /usr/local/etc/raddb/mods-enabled/realm
  35. including configuration file /usr/local/etc/raddb/mods-enabled/pap
  36. including configuration file /usr/local/etc/raddb/mods-enabled/passwd
  37. including configuration file /usr/local/etc/raddb/mods-enabled/preprocess
  38. including configuration file /usr/local/etc/raddb/mods-enabled/radutmp
  39. including configuration file /usr/local/etc/raddb/mods-enabled/counter
  40. including configuration file /usr/local/etc/raddb/mods-enabled/replicate
  41. including configuration file /usr/local/etc/raddb/mods-enabled/soh
  42. including configuration file /usr/local/etc/raddb/mods-enabled/sradutmp
  43. including configuration file /usr/local/etc/raddb/mods-enabled/unix
  44. including configuration file /usr/local/etc/raddb/mods-enabled/always
  45. including configuration file /usr/local/etc/raddb/mods-enabled/unpack
  46. including configuration file /usr/local/etc/raddb/mods-enabled/utf8
  47. including configuration file /usr/local/etc/raddb/mods-enabled/motp
  48. including configuration file /usr/local/etc/raddb/mods-enabled/googleauth
  49. including configuration file /usr/local/etc/raddb/mods-enabled/datacounter_acct
  50. including files in directory /usr/local/etc/raddb/policy.d/
  51. including configuration file /usr/local/etc/raddb/policy.d/accounting
  52. including configuration file /usr/local/etc/raddb/policy.d/canonicalization
  53. including configuration file /usr/local/etc/raddb/policy.d/control
  54. including configuration file /usr/local/etc/raddb/policy.d/cui
  55. including configuration file /usr/local/etc/raddb/policy.d/debug
  56. including configuration file /usr/local/etc/raddb/policy.d/dhcp
  57. including configuration file /usr/local/etc/raddb/policy.d/eap
  58. including configuration file /usr/local/etc/raddb/policy.d/filter
  59. including configuration file /usr/local/etc/raddb/policy.d/moonshot-targeted-ids
  60. including configuration file /usr/local/etc/raddb/policy.d/operator-name
  61. including configuration file /usr/local/etc/raddb/policy.d/rfc7542
  62. including configuration file /usr/local/etc/raddb/policy.d/abfab-tr
  63. including configuration file /usr/local/etc/raddb/policy.d/pfs_custom_policies
  64. including files in directory /usr/local/etc/raddb/sites-enabled/
  65. including configuration file /usr/local/etc/raddb/sites-enabled/default
  66. including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel-ttls
  67. including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel-peap
  68. main {
  69.  security {
  70.     allow_core_dumps = no
  71.  }
  72.     name = "radiusd"
  73.     prefix = "/usr/local"
  74.     localstatedir = "/var"
  75.     logdir = "/var/log"
  76.     run_dir = "/var/run"
  77. }
  78. main {
  79.     name = "radiusd"
  80.     prefix = "/usr/local"
  81.     localstatedir = "/var"
  82.     sbindir = "/usr/local/sbin"
  83.     logdir = "/var/log"
  84.     run_dir = "/var/run"
  85.     libdir = "/usr/local/lib/freeradius-3.0.20"
  86.     radacctdir = "/var/log/radacct"
  87.     hostname_lookups = yes
  88.     max_request_time = 30
  89.     cleanup_delay = 5
  90.     max_requests = 1024
  91.     pidfile = "/var/run/radiusd.pid"
  92.     checkrad = "/usr/local/sbin/checkrad"
  93.     debug_level = 0
  94.     proxy_requests = yes
  95.  log {
  96.     stripped_names = yes
  97.     auth = yes
  98.     auth_badpass = yes
  99.     auth_goodpass = yes
  100.     msg_badpass = ""
  101.     msg_goodpass = ""
  102.     colourise = yes
  103.     msg_denied = "You are already logged in - access denied"
  104.  }
  105.  resources {
  106.  }
  107.  security {
  108.     max_attributes = 200
  109.     reject_delay = 1.000000
  110.     status_server = no
  111.  }
  112. }
  113. radiusd: #### Loading Realms and Home Servers ####
  114. radiusd: #### Loading Clients ####
  115.  client captive_portal {
  116.     ipaddr = 192.168.200.1
  117.     require_message_authenticator = no
  118.     secret = <<< secret >>>
  119.     nas_type = "other"
  120.     proto = "udp"
  121.   limit {
  122.     max_connections = 16
  123.     lifetime = 0
  124.     idle_timeout = 30
  125.   }
  126.  }
  127. Debugger not attached
  128.  # Creating Auth-Type = mschap
  129.  # Creating Auth-Type = digest
  130.  # Creating Auth-Type = eap
  131.  # Creating Auth-Type = PAP
  132.  # Creating Auth-Type = CHAP
  133.  # Creating Auth-Type = MS-CHAP
  134.  # Creating Auth-Type = MOTP
  135.  # Creating Auth-Type = GOOGLEAUTH
  136.  # Creating Autz-Type = Status-Server
  137.  # Creating Acct-Type = Status-Server
  138. radiusd: #### Instantiating modules ####
  139.  modules {
  140.   # Loaded module rlm_attr_filter
  141.   # Loading module "attr_filter.post-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  142.   attr_filter attr_filter.post-proxy {
  143.     filename = "/usr/local/etc/raddb/mods-config/attr_filter/post-proxy"
  144.     key = "%{Realm}"
  145.     relaxed = no
  146.   }
  147.   # Loading module "attr_filter.pre-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  148.   attr_filter attr_filter.pre-proxy {
  149.     filename = "/usr/local/etc/raddb/mods-config/attr_filter/pre-proxy"
  150.     key = "%{Realm}"
  151.     relaxed = no
  152.   }
  153.   # Loading module "attr_filter.access_reject" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  154.   attr_filter attr_filter.access_reject {
  155.     filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_reject"
  156.     key = "%{User-Name}"
  157.     relaxed = no
  158.   }
  159.   # Loading module "attr_filter.access_challenge" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  160.   attr_filter attr_filter.access_challenge {
  161.     filename = "/usr/local/etc/raddb/mods-config/attr_filter/access_challenge"
  162.     key = "%{User-Name}"
  163.     relaxed = no
  164.   }
  165.   # Loading module "attr_filter.accounting_response" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  166.   attr_filter attr_filter.accounting_response {
  167.     filename = "/usr/local/etc/raddb/mods-config/attr_filter/accounting_response"
  168.     key = "%{User-Name}"
  169.     relaxed = no
  170.   }
  171.   # Loaded module rlm_cache
  172.   # Loading module "cache_eap" from file /usr/local/etc/raddb/mods-enabled/cache_eap
  173.   cache cache_eap {
  174.     driver = "rlm_cache_rbtree"
  175.     key = "%{%{control:State}:-%{%{reply:State}:-%{State}}}"
  176.     ttl = 15
  177.     max_entries = 0
  178.     epoch = 0
  179.     add_stats = no
  180.   }
  181.   # Loaded module rlm_chap
  182.   # Loading module "chap" from file /usr/local/etc/raddb/mods-enabled/chap
  183.   # Loaded module rlm_date
  184.   # Loading module "date" from file /usr/local/etc/raddb/mods-enabled/date
  185.   date {
  186.     format = "%b %e %Y %H:%M:%S %Z"
  187.     utc = no
  188.   }
  189.   # Loading module "wispr2date" from file /usr/local/etc/raddb/mods-enabled/date
  190.   date wispr2date {
  191.     format = "%Y-%m-%dT%H:%M:%S"
  192.     utc = no
  193.   }
  194.   # Loaded module rlm_detail
  195.   # Loading module "detail" from file /usr/local/etc/raddb/mods-enabled/detail
  196.   detail {
  197.     filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d"
  198.     header = "%t"
  199.     permissions = 384
  200.     locking = no
  201.     escape_filenames = no
  202.     log_packet_header = no
  203.   }
  204.   # Loading module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  205.   detail auth_log {
  206.     filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/auth-detail-%Y%m%d"
  207.     header = "%t"
  208.     permissions = 384
  209.     locking = no
  210.     escape_filenames = no
  211.     log_packet_header = no
  212.   }
  213.   # Loading module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  214.   detail reply_log {
  215.     filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d"
  216.     header = "%t"
  217.     permissions = 384
  218.     locking = no
  219.     escape_filenames = no
  220.     log_packet_header = no
  221.   }
  222.   # Loading module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  223.   detail pre_proxy_log {
  224.     filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/pre-proxy-detail-%Y%m%d"
  225.     header = "%t"
  226.     permissions = 384
  227.     locking = no
  228.     escape_filenames = no
  229.     log_packet_header = no
  230.   }
  231.   # Loading module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  232.   detail post_proxy_log {
  233.     filename = "/var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/post-proxy-detail-%Y%m%d"
  234.     header = "%t"
  235.     permissions = 384
  236.     locking = no
  237.     escape_filenames = no
  238.     log_packet_header = no
  239.   }
  240.   # Loaded module rlm_digest
  241.   # Loading module "digest" from file /usr/local/etc/raddb/mods-enabled/digest
  242.   # Loaded module rlm_dynamic_clients
  243.   # Loading module "dynamic_clients" from file /usr/local/etc/raddb/mods-enabled/dynamic_clients
  244.   # Loaded module rlm_eap
  245.   # Loading module "eap" from file /usr/local/etc/raddb/mods-enabled/eap
  246.   eap {
  247.     default_eap_type = "md5"
  248.     timer_expire = 60
  249.     ignore_unknown_eap_types = no
  250.     cisco_accounting_username_bug = no
  251.     max_sessions = 4096
  252.   }
  253.   # Loaded module rlm_exec
  254.   # Loading module "echo" from file /usr/local/etc/raddb/mods-enabled/echo
  255.   exec echo {
  256.     wait = yes
  257.     program = "/bin/echo %{User-Name}"
  258.     input_pairs = "request"
  259.     output_pairs = "reply"
  260.     shell_escape = yes
  261.   }
  262.   # Loading module "exec" from file /usr/local/etc/raddb/mods-enabled/exec
  263.   exec {
  264.     wait = no
  265.     input_pairs = "request"
  266.     shell_escape = yes
  267.     timeout = 10
  268.   }
  269.   # Loaded module rlm_expiration
  270.   # Loading module "expiration" from file /usr/local/etc/raddb/mods-enabled/expiration
  271.   # Loaded module rlm_expr
  272.   # Loading module "expr" from file /usr/local/etc/raddb/mods-enabled/expr
  273.   expr {
  274.     safe_characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /äéöüàâæçèéêëîïôœùûüaÿÄÉÖÜßÀÂÆÇÈÉÊËÎÏÔŒÙÛÜŸ"
  275.   }
  276.   # Loaded module rlm_files
  277.   # Loading module "files" from file /usr/local/etc/raddb/mods-enabled/files
  278.   files {
  279.     filename = "/usr/local/etc/raddb/mods-config/files/authorize"
  280.     acctusersfile = "/usr/local/etc/raddb/mods-config/files/accounting"
  281.     preproxy_usersfile = "/usr/local/etc/raddb/mods-config/files/pre-proxy"
  282.   }
  283.   # Loaded module rlm_linelog
  284.   # Loading module "linelog" from file /usr/local/etc/raddb/mods-enabled/linelog
  285.   linelog {
  286.     filename = "/var/log/linelog"
  287.     escape_filenames = no
  288.     syslog_severity = "info"
  289.     permissions = 384
  290.     format = "This is a log message for %{User-Name}"
  291.     reference = "messages.%{%{reply:Packet-Type}:-default}"
  292.   }
  293.   # Loading module "log_accounting" from file /usr/local/etc/raddb/mods-enabled/linelog
  294.   linelog log_accounting {
  295.     filename = "/var/log/linelog-accounting"
  296.     escape_filenames = no
  297.     syslog_severity = "info"
  298.     permissions = 384
  299.     format = ""
  300.     reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}"
  301.   }
  302.   # Loaded module rlm_logintime
  303.   # Loading module "logintime" from file /usr/local/etc/raddb/mods-enabled/logintime
  304.   logintime {
  305.     minimum_timeout = 60
  306.   }
  307.   # Loaded module rlm_mschap
  308.   # Loading module "mschap" from file /usr/local/etc/raddb/mods-enabled/mschap
  309.   mschap {
  310.     use_mppe = yes
  311.     require_encryption = no
  312.     require_strong = no
  313.     with_ntdomain_hack = yes
  314.    passchange {
  315.    }
  316.     allow_retry = yes
  317.     winbind_retry_with_normalised_username = no
  318.   }
  319.   # Loaded module rlm_realm
  320.   # Loading module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm
  321.   realm IPASS {
  322.     format = "prefix"
  323.     delimiter = "/"
  324.     ignore_default = no
  325.     ignore_null = yes
  326.   }
  327.   # Loading module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm
  328.   realm suffix {
  329.     format = "suffix"
  330.     delimiter = "@"
  331.     ignore_default = no
  332.     ignore_null = yes
  333.   }
  334.   # Loading module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm
  335.   realm realmpercent {
  336.     format = "suffix"
  337.     delimiter = "%"
  338.     ignore_default = no
  339.     ignore_null = yes
  340.   }
  341.   # Loading module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm
  342.   realm ntdomain {
  343.     format = "prefix"
  344.     delimiter = "\"
  345.     ignore_default = no
  346.     ignore_null = yes
  347.  }
  348.  # Loaded module rlm_pap
  349.  # Loading module "pap" from file /usr/local/etc/raddb/mods-enabled/pap
  350.  pap {
  351.     normalise = yes
  352.  }
  353.  # Loaded module rlm_passwd
  354.  # Loading module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwd
  355.  passwd etc_passwd {
  356.     filename = "/etc/passwd"
  357.     format = "*User-Name:Crypt-Password:"
  358.     delimiter = ":"
  359.     ignore_nislike = no
  360.     ignore_empty = yes
  361.     allow_multiple_keys = no
  362.     hash_size = 100
  363.  }
  364.  # Loaded module rlm_preprocess
  365.  # Loading module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess
  366.  preprocess {
  367.     huntgroups = "/usr/local/etc/raddb/mods-config/preprocess/huntgroups"
  368.     hints = "/usr/local/etc/raddb/mods-config/preprocess/hints"
  369.     with_ascend_hack = no
  370.     ascend_channels_per_line = 23
  371.     with_ntdomain_hack = no
  372.     with_specialix_jetstream_hack = no
  373.     with_cisco_vsa_hack = no
  374.     with_alvarion_vsa_hack = no
  375.  }
  376.  # Loaded module rlm_radutmp
  377.  # Loading module "radutmp" from file /usr/local/etc/raddb/mods-enabled/radutmp
  378.  radutmp {
  379.     filename = "/var/log/radutmp"
  380.     username = "%{User-Name}"
  381.     case_sensitive = yes
  382.     check_with_nas = yes
  383.     permissions = 384
  384.     caller_id = yes
  385.  }
  386.  # Loaded module rlm_counter
  387.  # Loading module "daily" from file /usr/local/etc/raddb/mods-enabled/counter
  388.  counter daily {
  389.     filename = "/var/log/radacct/timecounter/db.daily"
  390.     key = "User-Name"
  391.     reset = "daily"
  392.     count_attribute = "Acct-Session-Time"
  393.     counter_name = "Daily-Session-Time"
  394.     check_name = "Max-Daily-Session"
  395.     reply_name = "Session-Timeout"
  396.     cache_size = 5000
  397.  }
  398.  # Loading module "weekly" from file /usr/local/etc/raddb/mods-enabled/counter
  399.  counter weekly {
  400.     filename = "/var/log/radacct/timecounter/db.weekly"
  401.     key = "User-Name"
  402.     reset = "weekly"
  403.     count_attribute = "Acct-Session-Time"
  404.     counter_name = "Weekly-Session-Time"
  405.     check_name = "Max-Weekly-Session"
  406.     reply_name = "Session-Timeout"
  407.     cache_size = 5000
  408.  }
  409.  # Loading module "monthly" from file /usr/local/etc/raddb/mods-enabled/counter
  410.  counter monthly {
  411.     filename = "/var/log/radacct/timecounter/db.monthly"
  412.     key = "User-Name"
  413.     reset = "monthly"
  414.     count_attribute = "Acct-Session-Time"
  415.     counter_name = "Monthly-Session-Time"
  416.     check_name = "Max-Monthly-Session"
  417.     reply_name = "Session-Timeout"
  418.     cache_size = 5000
  419.  }
  420.  # Loading module "forever" from file /usr/local/etc/raddb/mods-enabled/counter
  421.  counter forever {
  422.     filename = "/var/log/radacct/timecounter/db.forever"
  423.     key = "User-Name"
  424.     reset = "never"
  425.     count_attribute = "Acct-Session-Time"
  426.     counter_name = "Forever-Session-Time"
  427.     check_name = "Max-Forever-Session"
  428.     reply_name = "Session-Timeout"
  429.     cache_size = 5000
  430.  }
  431.  # Loaded module rlm_replicate
  432.  # Loading module "replicate" from file /usr/local/etc/raddb/mods-enabled/replicate
  433.  # Loaded module rlm_soh
  434.  # Loading module "soh" from file /usr/local/etc/raddb/mods-enabled/soh
  435.  soh {
  436.     dhcp = yes
  437.  }
  438.  # Loading module "sradutmp" from file /usr/local/etc/raddb/mods-enabled/sradutmp
  439.  radutmp sradutmp {
  440.     filename = "/var/log/sradutmp"
  441.     username = "%{User-Name}"
  442.     case_sensitive = yes
  443.     check_with_nas = yes
  444.     permissions = 420
  445.     caller_id = no
  446.  }
  447.  # Loaded module rlm_unix
  448.  # Loading module "unix" from file /usr/local/etc/raddb/mods-enabled/unix
  449.  unix {
  450.     radwtmp = "/var/log/radwtmp"
  451.  }
  452. Creating attribute Unix-Group
  453.  # Loaded module rlm_always
  454.  # Loading module "reject" from file /usr/local/etc/raddb/mods-enabled/always
  455.  always reject {
  456.     rcode = "reject"
  457.     simulcount = 0
  458.     mpp = no
  459.  }
  460.  # Loading module "fail" from file /usr/local/etc/raddb/mods-enabled/always
  461.  always fail {
  462.     rcode = "fail"
  463.     simulcount = 0
  464.     mpp = no
  465.  }
  466.  # Loading module "ok" from file /usr/local/etc/raddb/mods-enabled/always
  467.  always ok {
  468.     rcode = "ok"
  469.     simulcount = 0
  470.     mpp = no
  471.  }
  472.  # Loading module "handled" from file /usr/local/etc/raddb/mods-enabled/always
  473.  always handled {
  474.     rcode = "handled"
  475.     simulcount = 0
  476.     mpp = no
  477.  }
  478.  # Loading module "invalid" from file /usr/local/etc/raddb/mods-enabled/always
  479.  always invalid {
  480.     rcode = "invalid"
  481.     simulcount = 0
  482.     mpp = no
  483.  }
  484.  # Loading module "userlock" from file /usr/local/etc/raddb/mods-enabled/always
  485.  always userlock {
  486.     rcode = "userlock"
  487.     simulcount = 0
  488.     mpp = no
  489.  }
  490.  # Loading module "notfound" from file /usr/local/etc/raddb/mods-enabled/always
  491.  always notfound {
  492.     rcode = "notfound"
  493.     simulcount = 0
  494.     mpp = no
  495.  }
  496.  # Loading module "noop" from file /usr/local/etc/raddb/mods-enabled/always
  497.  always noop {
  498.     rcode = "noop"
  499.     simulcount = 0
  500.     mpp = no
  501.  }
  502.  # Loading module "updated" from file /usr/local/etc/raddb/mods-enabled/always
  503.  always updated {
  504.     rcode = "updated"
  505.     simulcount = 0
  506.     mpp = no
  507.  }
  508.  # Loaded module rlm_unpack
  509.  # Loading module "unpack" from file /usr/local/etc/raddb/mods-enabled/unpack
  510.  # Loaded module rlm_utf8
  511.  # Loading module "utf8" from file /usr/local/etc/raddb/mods-enabled/utf8
  512.  # Loading module "motp" from file /usr/local/etc/raddb/mods-enabled/motp
  513.  exec motp {
  514.     wait = yes
  515.     program = "/usr/local/bin/bash /usr/local/etc/raddb/scripts/otpverify.sh %{request:User-Name} %{request:User-Password} %{reply:MOTP-Init-Secret} %{reply:MOTP-PIN} %{reply:MOTP-Offset}"
  516.     shell_escape = yes
  517.  }
  518.  # Loading module "googleauth" from file /usr/local/etc/raddb/mods-enabled/googleauth
  519.  exec googleauth {
  520.     wait = yes
  521.     program = "/usr/local/etc/raddb/scripts/googleauth.py %{request:User-Name} %{reply:MOTP-Init-Secret} %{reply:MOTP-PIN} %{request:User-Password}"
  522.     shell_escape = yes
  523.  }
  524.  # Loading module "datacounterdaily" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
  525.  exec datacounterdaily {
  526.     wait = yes
  527.     program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
  528.     shell_escape = yes
  529.  }
  530.  # Loading module "datacounterweekly" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
  531.  exec datacounterweekly {
  532.     wait = yes
  533.     program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
  534.     shell_escape = yes
  535.  }
  536.  # Loading module "datacountermonthly" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
  537.  exec datacountermonthly {
  538.     wait = yes
  539.     program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
  540.     shell_escape = yes
  541.  }
  542.  # Loading module "datacounterforever" from file /usr/local/etc/raddb/mods-enabled/datacounter_acct
  543.  exec datacounterforever {
  544.     wait = yes
  545.     program = "/bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}"
  546.     shell_escape = yes
  547.  }
  548.  instantiate {
  549.  # Instantiating module "expiration" from file /usr/local/etc/raddb/mods-enabled/expiration
  550.  # Instantiating module "logintime" from file /usr/local/etc/raddb/mods-enabled/logintime
  551.  # Instantiating module "daily" from file /usr/local/etc/raddb/mods-enabled/counter
  552. rlm_counter: Current Time: 1586901140 [2020-04-15 03:22:20], Next reset 1586975400 [2020-04-16 00:00:00]
  553. rlm_counter: add_defaults: Start
  554. rlm_counter: DEFAULT1 set to 1586975400
  555. rlm_counter: DEFAULT2 set to 1586901140
  556. rlm_counter: add_defaults: End
  557.  # Instantiating module "weekly" from file /usr/local/etc/raddb/mods-enabled/counter
  558. rlm_counter: Current Time: 1586901140 [2020-04-15 03:22:20], Next reset 1587234600 [2020-04-19 00:00:00]
  559. rlm_counter: add_defaults: Start
  560. rlm_counter: DEFAULT1 set to 1587234600
  561. rlm_counter: DEFAULT2 set to 1586901140
  562. rlm_counter: add_defaults: End
  563.  # Instantiating module "monthly" from file /usr/local/etc/raddb/mods-enabled/counter
  564. rlm_counter: Current Time: 1586901140 [2020-04-15 03:22:20], Next reset 1588271400 [2020-05-01 00:00:00]
  565. rlm_counter: add_defaults: Start
  566. rlm_counter: DEFAULT1 set to 1588271400
  567. rlm_counter: DEFAULT2 set to 1586901140
  568. rlm_counter: add_defaults: End
  569.  # Instantiating module "forever" from file /usr/local/etc/raddb/mods-enabled/counter
  570. rlm_counter: Current Time: 1586901140 [2020-04-15 03:22:20], Next reset 0 [2020-04-15 03:00:00]
  571. rlm_counter: add_defaults: Start
  572. rlm_counter: DEFAULT1 set to 0
  573. rlm_counter: DEFAULT2 set to 1586901140
  574. rlm_counter: add_defaults: End
  575.  }
  576.  # Instantiating module "attr_filter.post-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  577. reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/post-proxy
  578.  # Instantiating module "attr_filter.pre-proxy" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  579. reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/pre-proxy
  580.  # Instantiating module "attr_filter.access_reject" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  581. reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/access_reject
  582.  # Instantiating module "attr_filter.access_challenge" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  583. reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/access_challenge
  584.  # Instantiating module "attr_filter.accounting_response" from file /usr/local/etc/raddb/mods-enabled/attr_filter
  585. reading pairlist file /usr/local/etc/raddb/mods-config/attr_filter/accounting_response
  586.  # Instantiating module "cache_eap" from file /usr/local/etc/raddb/mods-enabled/cache_eap
  587. rlm_cache (cache_eap): Driver rlm_cache_rbtree (module rlm_cache_rbtree) loaded and linked
  588.  # Instantiating module "detail" from file /usr/local/etc/raddb/mods-enabled/detail
  589.  # Instantiating module "auth_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  590. rlm_detail (auth_log): 'User-Password' suppressed, will not appear in detail output
  591.  # Instantiating module "reply_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  592.  # Instantiating module "pre_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  593.  # Instantiating module "post_proxy_log" from file /usr/local/etc/raddb/mods-enabled/detail.log
  594.  # Instantiating module "eap" from file /usr/local/etc/raddb/mods-enabled/eap
  595.   # Linked to sub-module rlm_eap_md5
  596.   # Linked to sub-module rlm_eap_leap
  597.   # Linked to sub-module rlm_eap_gtc
  598.   gtc {
  599.     challenge = "Password: "
  600.     auth_type = "PAP"
  601.   }
  602.   # Linked to sub-module rlm_eap_tls
  603.   tls {
  604.     tls = "tls-common"
  605.   }
  606.   tls-config tls-common {
  607.     verify_depth = 0
  608.     ca_path = "/usr/local/etc/raddb/certs"
  609.     pem_file_type = yes
  610.     private_key_file = "/usr/local/etc/raddb/certs/server_key.pem"
  611.     certificate_file = "/usr/local/etc/raddb/certs/server_cert.pem"
  612.     ca_file = "/usr/local/etc/raddb/certs/ca_cert.pem"
  613.     dh_file = "/usr/local/etc/raddb/certs/dh"
  614.     random_file = "/dev/urandom"
  615.     fragment_size = 1024
  616.     include_length = yes
  617.     auto_chain = yes
  618.     check_crl = no
  619.     check_all_crl = no
  620.     cipher_list = "DEFAULT"
  621.     cipher_server_preference = no
  622.     ecdh_curve = "prime256v1"
  623.     tls_max_version = ""
  624.     tls_min_version = "1.0"
  625.    cache {
  626.         enable = no
  627.         lifetime = 24
  628.         max_entries = 255
  629.    }
  630.    verify {
  631.         skip_if_ocsp_ok = no
  632.    }
  633.    ocsp {
  634.         enable = no
  635.         override_cert_url = no
  636.         url = "http://127.0.0.1/ocsp/"
  637.         use_nonce = yes
  638.         timeout = 0
  639.         softfail = no
  640.    }
  641.   }
  642. The configuration allows TLS 1.0 and/or TLS 1.1.  We STRONGLY recommned using only TLS 1.2 for security
  643. Please set: min_tls_version = "1.2"
  644.   # Linked to sub-module rlm_eap_ttls
  645.   ttls {
  646.     tls = "tls-common"
  647.     default_eap_type = "md5"
  648.     copy_request_to_tunnel = no
  649.     use_tunneled_reply = no
  650.     virtual_server = "inner-tunnel-ttls"
  651.     include_length = yes
  652.     require_client_cert = no
  653.   }
  654. tls: Using cached TLS configuration from previous invocation
  655.   # Linked to sub-module rlm_eap_peap
  656.   peap {
  657.     tls = "tls-common"
  658.     default_eap_type = "mschapv2"
  659.     copy_request_to_tunnel = no
  660.     use_tunneled_reply = no
  661.     proxy_tunneled_request_as_eap = yes
  662.     virtual_server = "inner-tunnel-peap"
  663.     soh = no
  664.     require_client_cert = no
  665.   }
  666. tls: Using cached TLS configuration from previous invocation
  667.   # Linked to sub-module rlm_eap_mschapv2
  668.   mschapv2 {
  669.     with_ntdomain_hack = no
  670.     send_error = no
  671.   }
  672.  # Instantiating module "files" from file /usr/local/etc/raddb/mods-enabled/files
  673. reading pairlist file /usr/local/etc/raddb/mods-config/files/authorize
  674. reading pairlist file /usr/local/etc/raddb/mods-config/files/accounting
  675. reading pairlist file /usr/local/etc/raddb/mods-config/files/pre-proxy
  676.  # Instantiating module "linelog" from file /usr/local/etc/raddb/mods-enabled/linelog
  677.  # Instantiating module "log_accounting" from file /usr/local/etc/raddb/mods-enabled/linelog
  678.  # Instantiating module "mschap" from file /usr/local/etc/raddb/mods-enabled/mschap
  679. rlm_mschap (mschap): using internal authentication
  680.  # Instantiating module "IPASS" from file /usr/local/etc/raddb/mods-enabled/realm
  681.  # Instantiating module "suffix" from file /usr/local/etc/raddb/mods-enabled/realm
  682.  # Instantiating module "realmpercent" from file /usr/local/etc/raddb/mods-enabled/realm
  683.  # Instantiating module "ntdomain" from file /usr/local/etc/raddb/mods-enabled/realm
  684.  # Instantiating module "pap" from file /usr/local/etc/raddb/mods-enabled/pap
  685.  # Instantiating module "etc_passwd" from file /usr/local/etc/raddb/mods-enabled/passwd
  686. rlm_passwd: nfields: 3 keyfield 0(User-Name) listable: no
  687.  # Instantiating module "preprocess" from file /usr/local/etc/raddb/mods-enabled/preprocess
  688. reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/huntgroups
  689. reading pairlist file /usr/local/etc/raddb/mods-config/preprocess/hints
  690.  # Instantiating module "reject" from file /usr/local/etc/raddb/mods-enabled/always
  691.  # Instantiating module "fail" from file /usr/local/etc/raddb/mods-enabled/always
  692.  # Instantiating module "ok" from file /usr/local/etc/raddb/mods-enabled/always
  693.  # Instantiating module "handled" from file /usr/local/etc/raddb/mods-enabled/always
  694.  # Instantiating module "invalid" from file /usr/local/etc/raddb/mods-enabled/always
  695.  # Instantiating module "userlock" from file /usr/local/etc/raddb/mods-enabled/always
  696.  # Instantiating module "notfound" from file /usr/local/etc/raddb/mods-enabled/always
  697.  # Instantiating module "noop" from file /usr/local/etc/raddb/mods-enabled/always
  698.  # Instantiating module "updated" from file /usr/local/etc/raddb/mods-enabled/always
  699. } # modules
  700. radiusd: #### Loading Virtual Servers ####
  701. server { # from file /usr/local/etc/raddb/radiusd.conf
  702. } # server
  703. server default { # from file /usr/local/etc/raddb/sites-enabled/default
  704. # Loading authenticate {...}
  705. # Loading authorize {...}
  706. # Loading preacct {...}
  707. # Loading accounting {...}
  708. # Loading session {...}
  709. # Loading pre-proxy {...}
  710. # Loading post-proxy {...}
  711. # Loading post-auth {...}
  712. } # server default
  713. server inner-tunnel-ttls { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel-ttls
  714. # Loading authenticate {...}
  715. # Loading authorize {...}
  716. Ignoring "sql" (see raddb/mods-available/README.rst)
  717. Ignoring "ldap" (see raddb/mods-available/README.rst)
  718. # Loading session {...}
  719. # Loading post-proxy {...}
  720. # Loading post-auth {...}
  721. # Skipping contents of 'if' as it is always 'false' -- /usr/local/etc/raddb/sites-enabled/inner-tunnel-ttls:63
  722. } # server inner-tunnel-ttls
  723. server inner-tunnel-peap { # from file /usr/local/etc/raddb/sites-enabled/inner-tunnel-peap
  724. # Loading authenticate {...}
  725. # Loading authorize {...}
  726. # Loading session {...}
  727. # Loading post-proxy {...}
  728. # Loading post-auth {...}
  729. # Skipping contents of 'if' as it is always 'false' -- /usr/local/etc/raddb/sites-enabled/inner-tunnel-peap:63
  730. } # server inner-tunnel-peap
  731. radiusd: #### Opening IP addresses and Ports ####
  732. listen {
  733.     type = "auth"
  734.     ipaddr = *
  735.     port = 1812
  736. }
  737. listen {
  738.     type = "acct"
  739.     ipaddr = *
  740.     port = 1813
  741. }
  742. listen {
  743.     type = "auth"
  744.     ipaddr = 127.0.0.1
  745.     port = 18127
  746. }
  747. listen {
  748.     type = "auth"
  749.     ipaddr = 127.0.0.1
  750.     port = 18128
  751. }
  752. Listening on auth address * port 1812 bound to server default
  753. Listening on acct address * port 1813 bound to server default
  754. Listening on auth address 127.0.0.1 port 18127 bound to server inner-tunnel-ttls
  755. Listening on auth address 127.0.0.1 port 18128 bound to server inner-tunnel-peap
  756. Ready to process requests
  757. (0) Received Access-Request Id 181 from 192.168.200.1:53970 to 192.168.200.1:1812 length 160
  758. (0)   Service-Type = Login-User
  759. (0)   User-Name = "anand"
  760. (0)   User-Password = "9829012834"
  761. (0)   NAS-IP-Address = 192.168.200.1
  762. (0)   NAS-Identifier = "CaptivePortal-office_zone"
  763. (0)   Calling-Station-Id = "e6:8f:99:48:85:89"
  764. (0)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  765. (0)   NAS-Port-Type = Ethernet
  766. (0)   NAS-Port = 2000
  767. (0)   Framed-IP-Address = 192.168.200.201
  768. (0) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  769. (0)   authorize {
  770. (0)     [preprocess] = ok
  771. (0)     [chap] = noop
  772. (0)     [mschap] = noop
  773. (0)     [digest] = noop
  774. (0) suffix: Checking for suffix after "@"
  775. (0) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  776. (0)     [suffix] = noop
  777. (0) ntdomain: Checking for prefix before "\"
  778. (0) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  779. (0)     [ntdomain] = noop
  780. (0) eap: No EAP-Message, not doing EAP
  781. (0)     [eap] = noop
  782. (0) files: users: Matched entry DEFAULT at line 1
  783. (0) files: users: Matched entry anand at line 4
  784. (0)     [files] = ok
  785. rlm_counter: Entering module authorize code
  786. rlm_counter: Could not find Check item value pair
  787. (0)     [daily] = noop
  788. rlm_counter: Entering module authorize code
  789. rlm_counter: Could not find Check item value pair
  790. (0)     [weekly] = noop
  791. rlm_counter: Entering module authorize code
  792. rlm_counter: Could not find Check item value pair
  793. (0)     [monthly] = noop
  794. rlm_counter: Entering module authorize code
  795. rlm_counter: Could not find Check item value pair
  796. (0)     [forever] = noop
  797. (0)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  798. (0)     ERROR: Failed retrieving values required to evaluate condition
  799. (0)     [expiration] = noop
  800. (0)     [logintime] = noop
  801. (0)     [pap] = updated
  802. (0)   } # authorize = updated
  803. (0) Found Auth-Type = PAP
  804. (0) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  805. (0)   Auth-Type PAP {
  806. (0) pap: Login attempt with password
  807. (0) pap: Comparing with "known good" Cleartext-Password
  808. (0) pap: User authenticated successfully
  809. (0)     [pap] = ok
  810. (0)   } # Auth-Type PAP = ok
  811. (0) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  812. (0)   session {
  813. (0) radutmp: EXPAND /var/log/radutmp
  814. (0) radutmp:    --> /var/log/radutmp
  815. (0) radutmp: EXPAND %{User-Name}
  816. (0) radutmp:    --> anand
  817. (0)     [radutmp] = ok
  818. (0)   } # session = ok
  819. (0) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  820. (0)   post-auth {
  821. (0)     update {
  822. (0)       No attributes updated for RHS &session-state:
  823. (0)     } # update = noop
  824. (0)     [exec] = noop
  825. (0)     policy remove_reply_message_if_eap {
  826. (0)       if (&reply:EAP-Message && &reply:Reply-Message) {
  827. (0)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  828. (0)       else {
  829. (0)         [noop] = noop
  830. (0)       } # else = noop
  831. (0)     } # policy remove_reply_message_if_eap = noop
  832. (0)   } # post-auth = noop
  833. (0) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  834. (0) Sent Access-Accept Id 181 from 192.168.200.1:1812 to 192.168.200.1:53970 length 0
  835. (0) Finished request
  836. Waking up in 4.9 seconds.
  837. (1) Received Accounting-Request Id 93 from 192.168.200.1:55794 to 192.168.200.1:1813 length 172
  838. (1)   Service-Type = Login-User
  839. (1)   User-Name = "anand"
  840. (1)   Acct-Status-Type = Start
  841. (1)   Acct-Authentic = RADIUS
  842. (1)   NAS-IP-Address = 192.168.200.1
  843. (1)   NAS-Identifier = "CaptivePortal-office_zone"
  844. (1)   NAS-Port-Type = Ethernet
  845. (1)   NAS-Port = 2000
  846. (1)   Acct-Session-Id = "874681d3614b1b36"
  847. (1)   Framed-IP-Address = 192.168.200.201
  848. (1)   Calling-Station-Id = "e6:8f:99:48:85:89"
  849. (1)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  850. (1) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  851. (1)   preacct {
  852. (1)     [preprocess] = ok
  853. (1)     update request {
  854. (1)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  855. (1)          --> 1586901159
  856. (1)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  857. (1)     } # update request = noop
  858. (1)     policy acct_unique {
  859. (1)       update request {
  860. (1)         &Tmp-String-9 := "ai:"
  861. (1)       } # update request = noop
  862. (1)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  863. (1)       EXPAND %{hex:&Class}
  864. (1)          -->
  865. (1)       EXPAND ^%{hex:&Tmp-String-9}
  866. (1)          --> ^61693a
  867. (1)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  868. (1)       else {
  869. (1)         update request {
  870. (1)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  871. (1)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  872. (1)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  873. (1)         } # update request = noop
  874. (1)       } # else = noop
  875. (1)     } # policy acct_unique = noop
  876. (1) suffix: Checking for suffix after "@"
  877. (1) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  878. (1)     [suffix] = noop
  879. (1) ntdomain: Checking for prefix before "\"
  880. (1) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  881. (1)     [ntdomain] = noop
  882. (1)     [files] = noop
  883. (1)   } # preacct = ok
  884. (1) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  885. (1)   accounting {
  886. (1) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  887. (1) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  888. (1) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  889. (1) detail: EXPAND %t
  890. (1) detail:    --> Wed Apr 15 03:22:39 2020
  891. (1)     [detail] = ok
  892. (1)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  893. (1)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> FALSE
  894. (1) radutmp: EXPAND /var/log/radutmp
  895. (1) radutmp:    --> /var/log/radutmp
  896. (1) radutmp: EXPAND %{User-Name}
  897. (1) radutmp:    --> anand
  898. (1)     [radutmp] = ok
  899. rlm_counter: We only run on Accounting-Stop packets
  900. (1)     [daily] = noop
  901. rlm_counter: We only run on Accounting-Stop packets
  902. (1)     [weekly] = noop
  903. rlm_counter: We only run on Accounting-Stop packets
  904. (1)     [monthly] = noop
  905. rlm_counter: We only run on Accounting-Stop packets
  906. (1)     [forever] = noop
  907. (1)     [exec] = noop
  908. (1) attr_filter.accounting_response: EXPAND %{User-Name}
  909. (1) attr_filter.accounting_response:    --> anand
  910. (1) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  911. (1)     [attr_filter.accounting_response] = updated
  912. (1)   } # accounting = updated
  913. (1) Sent Accounting-Response Id 93 from 192.168.200.1:1813 to 192.168.200.1:55794 length 0
  914. (1) Finished request
  915. (1) Cleaning up request packet ID 93 with timestamp +19
  916. Waking up in 4.9 seconds.
  917. (0) Cleaning up request packet ID 181 with timestamp +19
  918. Ready to process requests
  919. (2) Received Accounting-Request Id 237 from 192.168.200.1:20016 to 192.168.200.1:1813 length 214
  920. (2)   Service-Type = Login-User
  921. (2)   User-Name = "anand"
  922. (2)   Acct-Status-Type = Interim-Update
  923. (2)   Acct-Authentic = RADIUS
  924. (2)   NAS-IP-Address = 192.168.200.1
  925. (2)   NAS-Identifier = "CaptivePortal-office_zone"
  926. (2)   NAS-Port-Type = Ethernet
  927. (2)   NAS-Port = 2000
  928. (2)   Acct-Session-Id = "874681d3614b1b36"
  929. (2)   Framed-IP-Address = 192.168.200.201
  930. (2)   Calling-Station-Id = "e6:8f:99:48:85:89"
  931. (2)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  932. (2)   Acct-Input-Packets = 98
  933. (2)   Acct-Input-Octets = 15336
  934. (2)   Acct-Output-Packets = 115
  935. (2)   Acct-Output-Octets = 55158
  936. (2)   Acct-Session-Time = 8
  937. (2)   Acct-Output-Gigawords = 0
  938. (2)   Acct-Input-Gigawords = 0
  939. (2) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  940. (2)   preacct {
  941. (2)     [preprocess] = ok
  942. (2)     update request {
  943. (2)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  944. (2)          --> 1586901159
  945. (2)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  946. (2)     } # update request = noop
  947. (2)     policy acct_unique {
  948. (2)       update request {
  949. (2)         &Tmp-String-9 := "ai:"
  950. (2)       } # update request = noop
  951. (2)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  952. (2)       EXPAND %{hex:&Class}
  953. (2)          -->
  954. (2)       EXPAND ^%{hex:&Tmp-String-9}
  955. (2)          --> ^61693a
  956. (2)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  957. (2)       else {
  958. (2)         update request {
  959. (2)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  960. (2)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  961. (2)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  962. (2)         } # update request = noop
  963. (2)       } # else = noop
  964. (2)     } # policy acct_unique = noop
  965. (2) suffix: Checking for suffix after "@"
  966. (2) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  967. (2)     [suffix] = noop
  968. (2) ntdomain: Checking for prefix before "\"
  969. (2) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  970. (2)     [ntdomain] = noop
  971. (2)     [files] = noop
  972. (2)   } # preacct = ok
  973. (2) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  974. (2)   accounting {
  975. (2) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  976. (2) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  977. (2) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  978. (2) detail: EXPAND %t
  979. (2) detail:    --> Wed Apr 15 03:22:47 2020
  980. (2)     [detail] = ok
  981. (2)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  982. (2)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  983. (2)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  984. (2) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  985. (2) datacounterdaily: EXPAND %{request:User-Name}
  986. (2) datacounterdaily:    --> anand
  987. (2) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  988. (2) datacounterdaily:    --> 15336
  989. (2) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  990. (2) datacounterdaily:    --> 55158
  991. (2) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  992. (2) datacounterdaily:    --> Interim-Update
  993. (2) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  994. (2) datacounterdaily:    --> 874681d3614b1b36
  995. (2) datacounterdaily: Program returned code (0) and output ''
  996. (2) datacounterdaily: Program executed successfully
  997. (2)       [datacounterdaily] = ok
  998. (2) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  999. (2) datacounterweekly: EXPAND %{request:User-Name}
  1000. (2) datacounterweekly:    --> anand
  1001. (2) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  1002. (2) datacounterweekly:    --> 15336
  1003. (2) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  1004. (2) datacounterweekly:    --> 55158
  1005. (2) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  1006. (2) datacounterweekly:    --> Interim-Update
  1007. (2) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  1008. (2) datacounterweekly:    --> 874681d3614b1b36
  1009. (2) datacounterweekly: Program returned code (0) and output ''
  1010. (2) datacounterweekly: Program executed successfully
  1011. (2)       [datacounterweekly] = ok
  1012. (2) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1013. (2) datacountermonthly: EXPAND %{request:User-Name}
  1014. (2) datacountermonthly:    --> anand
  1015. (2) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  1016. (2) datacountermonthly:    --> 15336
  1017. (2) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  1018. (2) datacountermonthly:    --> 55158
  1019. (2) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  1020. (2) datacountermonthly:    --> Interim-Update
  1021. (2) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  1022. (2) datacountermonthly:    --> 874681d3614b1b36
  1023. (2) datacountermonthly: Program returned code (0) and output ''
  1024. (2) datacountermonthly: Program executed successfully
  1025. (2)       [datacountermonthly] = ok
  1026. (2) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1027. (2) datacounterforever: EXPAND %{request:User-Name}
  1028. (2) datacounterforever:    --> anand
  1029. (2) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  1030. (2) datacounterforever:    --> 15336
  1031. (2) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  1032. (2) datacounterforever:    --> 55158
  1033. (2) datacounterforever: EXPAND %{request:Acct-Status-Type}
  1034. (2) datacounterforever:    --> Interim-Update
  1035. (2) datacounterforever: EXPAND %{request:Acct-Session-Id}
  1036. (2) datacounterforever:    --> 874681d3614b1b36
  1037. (2) datacounterforever: Program returned code (0) and output ''
  1038. (2) datacounterforever: Program executed successfully
  1039. (2)       [datacounterforever] = ok
  1040. (2)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  1041. (2) radutmp: EXPAND /var/log/radutmp
  1042. (2) radutmp:    --> /var/log/radutmp
  1043. (2) radutmp: EXPAND %{User-Name}
  1044. (2) radutmp:    --> anand
  1045. (2)     [radutmp] = ok
  1046. rlm_counter: We only run on Accounting-Stop packets
  1047. (2)     [daily] = noop
  1048. rlm_counter: We only run on Accounting-Stop packets
  1049. (2)     [weekly] = noop
  1050. rlm_counter: We only run on Accounting-Stop packets
  1051. (2)     [monthly] = noop
  1052. rlm_counter: We only run on Accounting-Stop packets
  1053. (2)     [forever] = noop
  1054. (2)     [exec] = noop
  1055. (2) attr_filter.accounting_response: EXPAND %{User-Name}
  1056. (2) attr_filter.accounting_response:    --> anand
  1057. (2) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  1058. (2)     [attr_filter.accounting_response] = updated
  1059. (2)   } # accounting = updated
  1060. (2) Sent Accounting-Response Id 237 from 192.168.200.1:1813 to 192.168.200.1:20016 length 0
  1061. (2) Finished request
  1062. (2) Cleaning up request packet ID 237 with timestamp +27
  1063. Ready to process requests
  1064. (3) Received Access-Request Id 207 from 192.168.200.1:44523 to 192.168.200.1:1812 length 160
  1065. (3)   Service-Type = Login-User
  1066. (3)   User-Name = "anand"
  1067. (3)   User-Password = "9829012834"
  1068. (3)   NAS-IP-Address = 192.168.200.1
  1069. (3)   NAS-Identifier = "CaptivePortal-office_zone"
  1070. (3)   Calling-Station-Id = "e6:8f:99:48:85:89"
  1071. (3)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1072. (3)   NAS-Port-Type = Ethernet
  1073. (3)   NAS-Port = 2000
  1074. (3)   Framed-IP-Address = 192.168.200.201
  1075. (3) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  1076. (3)   authorize {
  1077. (3)     [preprocess] = ok
  1078. (3)     [chap] = noop
  1079. (3)     [mschap] = noop
  1080. (3)     [digest] = noop
  1081. (3) suffix: Checking for suffix after "@"
  1082. (3) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1083. (3)     [suffix] = noop
  1084. (3) ntdomain: Checking for prefix before "\"
  1085. (3) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1086. (3)     [ntdomain] = noop
  1087. (3) eap: No EAP-Message, not doing EAP
  1088. (3)     [eap] = noop
  1089. (3) files: users: Matched entry DEFAULT at line 1
  1090. (3) files: users: Matched entry anand at line 4
  1091. (3)     [files] = ok
  1092. rlm_counter: Entering module authorize code
  1093. rlm_counter: Could not find Check item value pair
  1094. (3)     [daily] = noop
  1095. rlm_counter: Entering module authorize code
  1096. rlm_counter: Could not find Check item value pair
  1097. (3)     [weekly] = noop
  1098. rlm_counter: Entering module authorize code
  1099. rlm_counter: Could not find Check item value pair
  1100. (3)     [monthly] = noop
  1101. rlm_counter: Entering module authorize code
  1102. rlm_counter: Could not find Check item value pair
  1103. (3)     [forever] = noop
  1104. (3)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  1105. (3)     ERROR: Failed retrieving values required to evaluate condition
  1106. (3)     [expiration] = noop
  1107. (3)     [logintime] = noop
  1108. (3)     [pap] = updated
  1109. (3)   } # authorize = updated
  1110. (3) Found Auth-Type = PAP
  1111. (3) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  1112. (3)   Auth-Type PAP {
  1113. (3) pap: Login attempt with password
  1114. (3) pap: Comparing with "known good" Cleartext-Password
  1115. (3) pap: User authenticated successfully
  1116. (3)     [pap] = ok
  1117. (3)   } # Auth-Type PAP = ok
  1118. (3) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  1119. (3)   session {
  1120. (3) radutmp: EXPAND /var/log/radutmp
  1121. (3) radutmp:    --> /var/log/radutmp
  1122. (3) radutmp: EXPAND %{User-Name}
  1123. (3) radutmp:    --> anand
  1124. (3)     [radutmp] = ok
  1125. (3)   } # session = ok
  1126. (3) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  1127. (3)   post-auth {
  1128. (3)     update {
  1129. (3)       No attributes updated for RHS &session-state:
  1130. (3)     } # update = noop
  1131. (3)     [exec] = noop
  1132. (3)     policy remove_reply_message_if_eap {
  1133. (3)       if (&reply:EAP-Message && &reply:Reply-Message) {
  1134. (3)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  1135. (3)       else {
  1136. (3)         [noop] = noop
  1137. (3)       } # else = noop
  1138. (3)     } # policy remove_reply_message_if_eap = noop
  1139. (3)   } # post-auth = noop
  1140. (3) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  1141. (3) Sent Access-Accept Id 207 from 192.168.200.1:1812 to 192.168.200.1:44523 length 0
  1142. (3) Finished request
  1143. Waking up in 4.9 seconds.
  1144. (3) Cleaning up request packet ID 207 with timestamp +27
  1145. Ready to process requests
  1146. (4) Received Access-Request Id 157 from 192.168.200.1:29067 to 192.168.200.1:1812 length 160
  1147. (4)   Service-Type = Login-User
  1148. (4)   User-Name = "anand"
  1149. (4)   User-Password = "9829012834"
  1150. (4)   NAS-IP-Address = 192.168.200.1
  1151. (4)   NAS-Identifier = "CaptivePortal-office_zone"
  1152. (4)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  1153. (4)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1154. (4)   NAS-Port-Type = Ethernet
  1155. (4)   NAS-Port = 2002
  1156. (4)   Framed-IP-Address = 192.168.200.202
  1157. (4) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  1158. (4)   authorize {
  1159. (4)     [preprocess] = ok
  1160. (4)     [chap] = noop
  1161. (4)     [mschap] = noop
  1162. (4)     [digest] = noop
  1163. (4) suffix: Checking for suffix after "@"
  1164. (4) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1165. (4)     [suffix] = noop
  1166. (4) ntdomain: Checking for prefix before "\"
  1167. (4) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1168. (4)     [ntdomain] = noop
  1169. (4) eap: No EAP-Message, not doing EAP
  1170. (4)     [eap] = noop
  1171. (4) files: users: Matched entry DEFAULT at line 1
  1172. (4) files: users: Matched entry anand at line 4
  1173. (4)     [files] = ok
  1174. rlm_counter: Entering module authorize code
  1175. rlm_counter: Could not find Check item value pair
  1176. (4)     [daily] = noop
  1177. rlm_counter: Entering module authorize code
  1178. rlm_counter: Could not find Check item value pair
  1179. (4)     [weekly] = noop
  1180. rlm_counter: Entering module authorize code
  1181. rlm_counter: Could not find Check item value pair
  1182. (4)     [monthly] = noop
  1183. rlm_counter: Entering module authorize code
  1184. rlm_counter: Could not find Check item value pair
  1185. (4)     [forever] = noop
  1186. (4)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  1187. (4)     ERROR: Failed retrieving values required to evaluate condition
  1188. (4)     [expiration] = noop
  1189. (4)     [logintime] = noop
  1190. (4)     [pap] = updated
  1191. (4)   } # authorize = updated
  1192. (4) Found Auth-Type = PAP
  1193. (4) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  1194. (4)   Auth-Type PAP {
  1195. (4) pap: Login attempt with password
  1196. (4) pap: Comparing with "known good" Cleartext-Password
  1197. (4) pap: User authenticated successfully
  1198. (4)     [pap] = ok
  1199. (4)   } # Auth-Type PAP = ok
  1200. (4) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  1201. (4)   session {
  1202. (4) radutmp: EXPAND /var/log/radutmp
  1203. (4) radutmp:    --> /var/log/radutmp
  1204. (4) radutmp: EXPAND %{User-Name}
  1205. (4) radutmp:    --> anand
  1206. (4)     [radutmp] = ok
  1207. (4)   } # session = ok
  1208. (4) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  1209. (4)   post-auth {
  1210. (4)     update {
  1211. (4)       No attributes updated for RHS &session-state:
  1212. (4)     } # update = noop
  1213. (4)     [exec] = noop
  1214. (4)     policy remove_reply_message_if_eap {
  1215. (4)       if (&reply:EAP-Message && &reply:Reply-Message) {
  1216. (4)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  1217. (4)       else {
  1218. (4)         [noop] = noop
  1219. (4)       } # else = noop
  1220. (4)     } # policy remove_reply_message_if_eap = noop
  1221. (4)   } # post-auth = noop
  1222. (4) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  1223. (4) Sent Access-Accept Id 157 from 192.168.200.1:1812 to 192.168.200.1:29067 length 0
  1224. (4) Finished request
  1225. Waking up in 4.9 seconds.
  1226. (5) Received Accounting-Request Id 23 from 192.168.200.1:42894 to 192.168.200.1:1813 length 172
  1227. (5)   Service-Type = Login-User
  1228. (5)   User-Name = "anand"
  1229. (5)   Acct-Status-Type = Start
  1230. (5)   Acct-Authentic = RADIUS
  1231. (5)   NAS-IP-Address = 192.168.200.1
  1232. (5)   NAS-Identifier = "CaptivePortal-office_zone"
  1233. (5)   NAS-Port-Type = Ethernet
  1234. (5)   NAS-Port = 2002
  1235. (5)   Acct-Session-Id = "6974b7d556ed613e"
  1236. (5)   Framed-IP-Address = 192.168.200.202
  1237. (5)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  1238. (5)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1239. (5) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  1240. (5)   preacct {
  1241. (5)     [preprocess] = ok
  1242. (5)     update request {
  1243. (5)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  1244. (5)          --> 1586901190
  1245. (5)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  1246. (5)     } # update request = noop
  1247. (5)     policy acct_unique {
  1248. (5)       update request {
  1249. (5)         &Tmp-String-9 := "ai:"
  1250. (5)       } # update request = noop
  1251. (5)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  1252. (5)       EXPAND %{hex:&Class}
  1253. (5)          -->
  1254. (5)       EXPAND ^%{hex:&Tmp-String-9}
  1255. (5)          --> ^61693a
  1256. (5)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  1257. (5)       else {
  1258. (5)         update request {
  1259. (5)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  1260. (5)              --> 9a9488f2d0124a4aa7feb209bced26bb
  1261. (5)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  1262. (5)         } # update request = noop
  1263. (5)       } # else = noop
  1264. (5)     } # policy acct_unique = noop
  1265. (5) suffix: Checking for suffix after "@"
  1266. (5) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1267. (5)     [suffix] = noop
  1268. (5) ntdomain: Checking for prefix before "\"
  1269. (5) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1270. (5)     [ntdomain] = noop
  1271. (5)     [files] = noop
  1272. (5)   } # preacct = ok
  1273. (5) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  1274. (5)   accounting {
  1275. (5) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  1276. (5) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  1277. (5) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  1278. (5) detail: EXPAND %t
  1279. (5) detail:    --> Wed Apr 15 03:23:10 2020
  1280. (5)     [detail] = ok
  1281. (5)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  1282. (5)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> FALSE
  1283. (5) radutmp: EXPAND /var/log/radutmp
  1284. (5) radutmp:    --> /var/log/radutmp
  1285. (5) radutmp: EXPAND %{User-Name}
  1286. (5) radutmp:    --> anand
  1287. (5)     [radutmp] = ok
  1288. rlm_counter: We only run on Accounting-Stop packets
  1289. (5)     [daily] = noop
  1290. rlm_counter: We only run on Accounting-Stop packets
  1291. (5)     [weekly] = noop
  1292. rlm_counter: We only run on Accounting-Stop packets
  1293. (5)     [monthly] = noop
  1294. rlm_counter: We only run on Accounting-Stop packets
  1295. (5)     [forever] = noop
  1296. (5)     [exec] = noop
  1297. (5) attr_filter.accounting_response: EXPAND %{User-Name}
  1298. (5) attr_filter.accounting_response:    --> anand
  1299. (5) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  1300. (5)     [attr_filter.accounting_response] = updated
  1301. (5)   } # accounting = updated
  1302. (5) Sent Accounting-Response Id 23 from 192.168.200.1:1813 to 192.168.200.1:42894 length 0
  1303. (5) Finished request
  1304. (5) Cleaning up request packet ID 23 with timestamp +50
  1305. Waking up in 4.9 seconds.
  1306. (4) Cleaning up request packet ID 157 with timestamp +50
  1307. Ready to process requests
  1308. (6) Received Access-Request Id 145 from 192.168.200.1:33414 to 192.168.200.1:1812 length 160
  1309. (6)   Service-Type = Login-User
  1310. (6)   User-Name = "anand"
  1311. (6)   User-Password = "9829012834"
  1312. (6)   NAS-IP-Address = 192.168.200.1
  1313. (6)   NAS-Identifier = "CaptivePortal-office_zone"
  1314. (6)   Calling-Station-Id = "da:54:db:27:ae:2b"
  1315. (6)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1316. (6)   NAS-Port-Type = Ethernet
  1317. (6)   NAS-Port = 2004
  1318. (6)   Framed-IP-Address = 192.168.200.203
  1319. (6) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  1320. (6)   authorize {
  1321. (6)     [preprocess] = ok
  1322. (6)     [chap] = noop
  1323. (6)     [mschap] = noop
  1324. (6)     [digest] = noop
  1325. (6) suffix: Checking for suffix after "@"
  1326. (6) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1327. (6)     [suffix] = noop
  1328. (6) ntdomain: Checking for prefix before "\"
  1329. (6) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1330. (6)     [ntdomain] = noop
  1331. (6) eap: No EAP-Message, not doing EAP
  1332. (6)     [eap] = noop
  1333. (6) files: users: Matched entry DEFAULT at line 1
  1334. (6) files: users: Matched entry anand at line 4
  1335. (6)     [files] = ok
  1336. rlm_counter: Entering module authorize code
  1337. rlm_counter: Could not find Check item value pair
  1338. (6)     [daily] = noop
  1339. rlm_counter: Entering module authorize code
  1340. rlm_counter: Could not find Check item value pair
  1341. (6)     [weekly] = noop
  1342. rlm_counter: Entering module authorize code
  1343. rlm_counter: Could not find Check item value pair
  1344. (6)     [monthly] = noop
  1345. rlm_counter: Entering module authorize code
  1346. rlm_counter: Could not find Check item value pair
  1347. (6)     [forever] = noop
  1348. (6)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  1349. (6)     ERROR: Failed retrieving values required to evaluate condition
  1350. (6)     [expiration] = noop
  1351. (6)     [logintime] = noop
  1352. (6)     [pap] = updated
  1353. (6)   } # authorize = updated
  1354. (6) Found Auth-Type = PAP
  1355. (6) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  1356. (6)   Auth-Type PAP {
  1357. (6) pap: Login attempt with password
  1358. (6) pap: Comparing with "known good" Cleartext-Password
  1359. (6) pap: User authenticated successfully
  1360. (6)     [pap] = ok
  1361. (6)   } # Auth-Type PAP = ok
  1362. (6) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  1363. (6)   session {
  1364. (6) radutmp: EXPAND /var/log/radutmp
  1365. (6) radutmp:    --> /var/log/radutmp
  1366. (6) radutmp: EXPAND %{User-Name}
  1367. (6) radutmp:    --> anand
  1368. checkrad: No NAS type, or type "other" not checking
  1369. checkrad: No NAS type, or type "other" not checking
  1370. (6)     [radutmp] = fail
  1371. (6)   } # session = fail
  1372. (6) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  1373. (6)   post-auth {
  1374. (6)     update {
  1375. (6)       No attributes updated for RHS &session-state:
  1376. (6)     } # update = noop
  1377. (6)     [exec] = noop
  1378. (6)     policy remove_reply_message_if_eap {
  1379. (6)       if (&reply:EAP-Message && &reply:Reply-Message) {
  1380. (6)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  1381. (6)       else {
  1382. (6)         [noop] = noop
  1383. (6)       } # else = noop
  1384. (6)     } # policy remove_reply_message_if_eap = noop
  1385. (6)   } # post-auth = noop
  1386. (6) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  1387. (6) Sent Access-Accept Id 145 from 192.168.200.1:1812 to 192.168.200.1:33414 length 0
  1388. (6) Finished request
  1389. Waking up in 4.9 seconds.
  1390. (7) Received Accounting-Request Id 97 from 192.168.200.1:62807 to 192.168.200.1:1813 length 172
  1391. (7)   Service-Type = Login-User
  1392. (7)   User-Name = "anand"
  1393. (7)   Acct-Status-Type = Start
  1394. (7)   Acct-Authentic = RADIUS
  1395. (7)   NAS-IP-Address = 192.168.200.1
  1396. (7)   NAS-Identifier = "CaptivePortal-office_zone"
  1397. (7)   NAS-Port-Type = Ethernet
  1398. (7)   NAS-Port = 2004
  1399. (7)   Acct-Session-Id = "d4f8574cf15bdf9b"
  1400. (7)   Framed-IP-Address = 192.168.200.203
  1401. (7)   Calling-Station-Id = "da:54:db:27:ae:2b"
  1402. (7)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1403. (7) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  1404. (7)   preacct {
  1405. (7)     [preprocess] = ok
  1406. (7)     update request {
  1407. (7)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  1408. (7)          --> 1586901203
  1409. (7)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  1410. (7)     } # update request = noop
  1411. (7)     policy acct_unique {
  1412. (7)       update request {
  1413. (7)         &Tmp-String-9 := "ai:"
  1414. (7)       } # update request = noop
  1415. (7)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  1416. (7)       EXPAND %{hex:&Class}
  1417. (7)          -->
  1418. (7)       EXPAND ^%{hex:&Tmp-String-9}
  1419. (7)          --> ^61693a
  1420. (7)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  1421. (7)       else {
  1422. (7)         update request {
  1423. (7)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  1424. (7)              --> 8540a37c864a86b96f7917819f3d70c9
  1425. (7)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  1426. (7)         } # update request = noop
  1427. (7)       } # else = noop
  1428. (7)     } # policy acct_unique = noop
  1429. (7) suffix: Checking for suffix after "@"
  1430. (7) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1431. (7)     [suffix] = noop
  1432. (7) ntdomain: Checking for prefix before "\"
  1433. (7) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1434. (7)     [ntdomain] = noop
  1435. (7)     [files] = noop
  1436. (7)   } # preacct = ok
  1437. (7) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  1438. (7)   accounting {
  1439. (7) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  1440. (7) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  1441. (7) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  1442. (7) detail: EXPAND %t
  1443. (7) detail:    --> Wed Apr 15 03:23:23 2020
  1444. (7)     [detail] = ok
  1445. (7)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  1446. (7)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> FALSE
  1447. (7) radutmp: EXPAND /var/log/radutmp
  1448. (7) radutmp:    --> /var/log/radutmp
  1449. (7) radutmp: EXPAND %{User-Name}
  1450. (7) radutmp:    --> anand
  1451. (7)     [radutmp] = ok
  1452. rlm_counter: We only run on Accounting-Stop packets
  1453. (7)     [daily] = noop
  1454. rlm_counter: We only run on Accounting-Stop packets
  1455. (7)     [weekly] = noop
  1456. rlm_counter: We only run on Accounting-Stop packets
  1457. (7)     [monthly] = noop
  1458. rlm_counter: We only run on Accounting-Stop packets
  1459. (7)     [forever] = noop
  1460. (7)     [exec] = noop
  1461. (7) attr_filter.accounting_response: EXPAND %{User-Name}
  1462. (7) attr_filter.accounting_response:    --> anand
  1463. (7) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  1464. (7)     [attr_filter.accounting_response] = updated
  1465. (7)   } # accounting = updated
  1466. (7) Sent Accounting-Response Id 97 from 192.168.200.1:1813 to 192.168.200.1:62807 length 0
  1467. (7) Finished request
  1468. (7) Cleaning up request packet ID 97 with timestamp +63
  1469. Waking up in 4.9 seconds.
  1470. (6) Cleaning up request packet ID 145 with timestamp +63
  1471. Ready to process requests
  1472. (8) Received Accounting-Request Id 57 from 192.168.200.1:10100 to 192.168.200.1:1813 length 214
  1473. (8)   Service-Type = Login-User
  1474. (8)   User-Name = "anand"
  1475. (8)   Acct-Status-Type = Interim-Update
  1476. (8)   Acct-Authentic = RADIUS
  1477. (8)   NAS-IP-Address = 192.168.200.1
  1478. (8)   NAS-Identifier = "CaptivePortal-office_zone"
  1479. (8)   NAS-Port-Type = Ethernet
  1480. (8)   NAS-Port = 2000
  1481. (8)   Acct-Session-Id = "874681d3614b1b36"
  1482. (8)   Framed-IP-Address = 192.168.200.201
  1483. (8)   Calling-Station-Id = "e6:8f:99:48:85:89"
  1484. (8)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1485. (8)   Acct-Input-Packets = 418
  1486. (8)   Acct-Input-Octets = 74035
  1487. (8)   Acct-Output-Packets = 525
  1488. (8)   Acct-Output-Octets = 357634
  1489. (8)   Acct-Session-Time = 69
  1490. (8)   Acct-Output-Gigawords = 0
  1491. (8)   Acct-Input-Gigawords = 0
  1492. (8) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  1493. (8)   preacct {
  1494. (8)     [preprocess] = ok
  1495. (8)     update request {
  1496. (8)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  1497. (8)          --> 1586901159
  1498. (8)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  1499. (8)     } # update request = noop
  1500. (8)     policy acct_unique {
  1501. (8)       update request {
  1502. (8)         &Tmp-String-9 := "ai:"
  1503. (8)       } # update request = noop
  1504. (8)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  1505. (8)       EXPAND %{hex:&Class}
  1506. (8)          -->
  1507. (8)       EXPAND ^%{hex:&Tmp-String-9}
  1508. (8)          --> ^61693a
  1509. (8)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&       ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  1510. (8)       else {
  1511. (8)         update request {
  1512. (8)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  1513. (8)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  1514. (8)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  1515. (8)         } # update request = noop
  1516. (8)       } # else = noop
  1517. (8)     } # policy acct_unique = noop
  1518. (8) suffix: Checking for suffix after "@"
  1519. (8) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1520. (8)     [suffix] = noop
  1521. (8) ntdomain: Checking for prefix before "\"
  1522. (8) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1523. (8)     [ntdomain] = noop
  1524. (8)     [files] = noop
  1525. (8)   } # preacct = ok
  1526. (8) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  1527. (8)   accounting {
  1528. (8) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  1529. (8) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  1530. (8) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  1531. (8) detail: EXPAND %t
  1532. (8) detail:    --> Wed Apr 15 03:23:48 2020
  1533. (8)     [detail] = ok
  1534. (8)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  1535. (8)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  1536. (8)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  1537. (8) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1538. (8) datacounterdaily: EXPAND %{request:User-Name}
  1539. (8) datacounterdaily:    --> anand
  1540. (8) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  1541. (8) datacounterdaily:    --> 74035
  1542. (8) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  1543. (8) datacounterdaily:    --> 357634
  1544. (8) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  1545. (8) datacounterdaily:    --> Interim-Update
  1546. (8) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  1547. (8) datacounterdaily:    --> 874681d3614b1b36
  1548. (8) datacounterdaily: Program returned code (0) and output ''
  1549. (8) datacounterdaily: Program executed successfully
  1550. (8)       [datacounterdaily] = ok
  1551. (8) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1552. (8) datacounterweekly: EXPAND %{request:User-Name}
  1553. (8) datacounterweekly:    --> anand
  1554. (8) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  1555. (8) datacounterweekly:    --> 74035
  1556. (8) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  1557. (8) datacounterweekly:    --> 357634
  1558. (8) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  1559. (8) datacounterweekly:    --> Interim-Update
  1560. (8) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  1561. (8) datacounterweekly:    --> 874681d3614b1b36
  1562. (8) datacounterweekly: Program returned code (0) and output ''
  1563. (8) datacounterweekly: Program executed successfully
  1564. (8)       [datacounterweekly] = ok
  1565. (8) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1566. (8) datacountermonthly: EXPAND %{request:User-Name}
  1567. (8) datacountermonthly:    --> anand
  1568. (8) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  1569. (8) datacountermonthly:    --> 74035
  1570. (8) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  1571. (8) datacountermonthly:    --> 357634
  1572. (8) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  1573. (8) datacountermonthly:    --> Interim-Update
  1574. (8) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  1575. (8) datacountermonthly:    --> 874681d3614b1b36
  1576. (8) datacountermonthly: Program returned code (0) and output ''
  1577. (8) datacountermonthly: Program executed successfully
  1578. (8)       [datacountermonthly] = ok
  1579. (8) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1580. (8) datacounterforever: EXPAND %{request:User-Name}
  1581. (8) datacounterforever:    --> anand
  1582. (8) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  1583. (8) datacounterforever:    --> 74035
  1584. (8) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  1585. (8) datacounterforever:    --> 357634
  1586. (8) datacounterforever: EXPAND %{request:Acct-Status-Type}
  1587. (8) datacounterforever:    --> Interim-Update
  1588. (8) datacounterforever: EXPAND %{request:Acct-Session-Id}
  1589. (8) datacounterforever:    --> 874681d3614b1b36
  1590. (8) datacounterforever: Program returned code (0) and output ''
  1591. (8) datacounterforever: Program executed successfully
  1592. (8)       [datacounterforever] = ok
  1593. (8)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  1594. (8) radutmp: EXPAND /var/log/radutmp
  1595. (8) radutmp:    --> /var/log/radutmp
  1596. (8) radutmp: EXPAND %{User-Name}
  1597. (8) radutmp:    --> anand
  1598. (8)     [radutmp] = ok
  1599. rlm_counter: We only run on Accounting-Stop packets
  1600. (8)     [daily] = noop
  1601. rlm_counter: We only run on Accounting-Stop packets
  1602. (8)     [weekly] = noop
  1603. rlm_counter: We only run on Accounting-Stop packets
  1604. (8)     [monthly] = noop
  1605. rlm_counter: We only run on Accounting-Stop packets
  1606. (8)     [forever] = noop
  1607. (8)     [exec] = noop
  1608. (8) attr_filter.accounting_response: EXPAND %{User-Name}
  1609. (8) attr_filter.accounting_response:    --> anand
  1610. (8) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  1611. (8)     [attr_filter.accounting_response] = updated
  1612. (8)   } # accounting = updated
  1613. (8) Sent Accounting-Response Id 57 from 192.168.200.1:1813 to 192.168.200.1:10100 length 0
  1614. (8) Finished request
  1615. (8) Cleaning up request packet ID 57 with timestamp +88
  1616. Ready to process requests
  1617. (9) Received Access-Request Id 28 from 192.168.200.1:14004 to 192.168.200.1:1812 length 160
  1618. (9)   Service-Type = Login-User
  1619. (9)   User-Name = "anand"
  1620. (9)   User-Password = "9829012834"
  1621. (9)   NAS-IP-Address = 192.168.200.1
  1622. (9)   NAS-Identifier = "CaptivePortal-office_zone"
  1623. (9)   Calling-Station-Id = "e6:8f:99:48:85:89"
  1624. (9)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1625. (9)   NAS-Port-Type = Ethernet
  1626. (9)   NAS-Port = 2000
  1627. (9)   Framed-IP-Address = 192.168.200.201
  1628. (9) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  1629. (9)   authorize {
  1630. (9)     [preprocess] = ok
  1631. (9)     [chap] = noop
  1632. (9)     [mschap] = noop
  1633. (9)     [digest] = noop
  1634. (9) suffix: Checking for suffix after "@"
  1635. (9) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1636. (9)     [suffix] = noop
  1637. (9) ntdomain: Checking for prefix before "\"
  1638. (9) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1639. (9)     [ntdomain] = noop
  1640. (9) eap: No EAP-Message, not doing EAP
  1641. (9)     [eap] = noop
  1642. (9) files: users: Matched entry DEFAULT at line 1
  1643. (9) files: users: Matched entry anand at line 4
  1644. (9)     [files] = ok
  1645. rlm_counter: Entering module authorize code
  1646. rlm_counter: Could not find Check item value pair
  1647. (9)     [daily] = noop
  1648. rlm_counter: Entering module authorize code
  1649. rlm_counter: Could not find Check item value pair
  1650. (9)     [weekly] = noop
  1651. rlm_counter: Entering module authorize code
  1652. rlm_counter: Could not find Check item value pair
  1653. (9)     [monthly] = noop
  1654. rlm_counter: Entering module authorize code
  1655. rlm_counter: Could not find Check item value pair
  1656. (9)     [forever] = noop
  1657. (9)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  1658. (9)     ERROR: Failed retrieving values required to evaluate condition
  1659. (9)     [expiration] = noop
  1660. (9)     [logintime] = noop
  1661. (9)     [pap] = updated
  1662. (9)   } # authorize = updated
  1663. (9) Found Auth-Type = PAP
  1664. (9) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  1665. (9)   Auth-Type PAP {
  1666. (9) pap: Login attempt with password
  1667. (9) pap: Comparing with "known good" Cleartext-Password
  1668. (9) pap: User authenticated successfully
  1669. (9)     [pap] = ok
  1670. (9)   } # Auth-Type PAP = ok
  1671. (9) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  1672. (9)   session {
  1673. (9) radutmp: EXPAND /var/log/radutmp
  1674. (9) radutmp:    --> /var/log/radutmp
  1675. (9) radutmp: EXPAND %{User-Name}
  1676. (9) radutmp:    --> anand
  1677. checkrad: No NAS type, or type "other" not checking
  1678. checkrad: No NAS type, or type "other" not checking
  1679. checkrad: No NAS type, or type "other" not checking
  1680. (9)     [radutmp] = fail
  1681. (9)   } # session = fail
  1682. (9) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  1683. (9)   post-auth {
  1684. (9)     update {
  1685. (9)       No attributes updated for RHS &session-state:
  1686. (9)     } # update = noop
  1687. (9)     [exec] = noop
  1688. (9)     policy remove_reply_message_if_eap {
  1689. (9)       if (&reply:EAP-Message && &reply:Reply-Message) {
  1690. (9)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  1691. (9)       else {
  1692. (9)         [noop] = noop
  1693. (9)       } # else = noop
  1694. (9)     } # policy remove_reply_message_if_eap = noop
  1695. (9)   } # post-auth = noop
  1696. (9) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  1697. (9) Sent Access-Accept Id 28 from 192.168.200.1:1812 to 192.168.200.1:14004 length 0
  1698. (9) Finished request
  1699. Waking up in 4.9 seconds.
  1700. (10) Received Accounting-Request Id 4 from 192.168.200.1:1860 to 192.168.200.1:1813 length 214
  1701. (10)   Service-Type = Login-User
  1702. (10)   User-Name = "anand"
  1703. (10)   Acct-Status-Type = Interim-Update
  1704. (10)   Acct-Authentic = RADIUS
  1705. (10)   NAS-IP-Address = 192.168.200.1
  1706. (10)   NAS-Identifier = "CaptivePortal-office_zone"
  1707. (10)   NAS-Port-Type = Ethernet
  1708. (10)   NAS-Port = 2002
  1709. (10)   Acct-Session-Id = "6974b7d556ed613e"
  1710. (10)   Framed-IP-Address = 192.168.200.202
  1711. (10)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  1712. (10)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1713. (10)   Acct-Input-Packets = 136
  1714. (10)   Acct-Input-Octets = 11656
  1715. (10)   Acct-Output-Packets = 117
  1716. (10)   Acct-Output-Octets = 35330
  1717. (10)   Acct-Session-Time = 38
  1718. (10)   Acct-Output-Gigawords = 0
  1719. (10)   Acct-Input-Gigawords = 0
  1720. (10) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  1721. (10)   preacct {
  1722. (10)     [preprocess] = ok
  1723. (10)     update request {
  1724. (10)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  1725. (10)          --> 1586901190
  1726. (10)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  1727. (10)     } # update request = noop
  1728. (10)     policy acct_unique {
  1729. (10)       update request {
  1730. (10)         &Tmp-String-9 := "ai:"
  1731. (10)       } # update request = noop
  1732. (10)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  1733. (10)       EXPAND %{hex:&Class}
  1734. (10)          -->
  1735. (10)       EXPAND ^%{hex:&Tmp-String-9}
  1736. (10)          --> ^61693a
  1737. (10)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  1738. (10)       else {
  1739. (10)         update request {
  1740. (10)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  1741. (10)              --> 9a9488f2d0124a4aa7feb209bced26bb
  1742. (10)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  1743. (10)         } # update request = noop
  1744. (10)       } # else = noop
  1745. (10)     } # policy acct_unique = noop
  1746. (10) suffix: Checking for suffix after "@"
  1747. (10) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1748. (10)     [suffix] = noop
  1749. (10) ntdomain: Checking for prefix before "\"
  1750. (10) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1751. (10)     [ntdomain] = noop
  1752. (10)     [files] = noop
  1753. (10)   } # preacct = ok
  1754. (10) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  1755. (10)   accounting {
  1756. (10) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  1757. (10) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  1758. (10) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  1759. (10) detail: EXPAND %t
  1760. (10) detail:    --> Wed Apr 15 03:23:48 2020
  1761. (10)     [detail] = ok
  1762. (10)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  1763. (10)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  1764. (10)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  1765. (10) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1766. (10) datacounterdaily: EXPAND %{request:User-Name}
  1767. (10) datacounterdaily:    --> anand
  1768. (10) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  1769. (10) datacounterdaily:    --> 11656
  1770. (10) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  1771. (10) datacounterdaily:    --> 35330
  1772. (10) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  1773. (10) datacounterdaily:    --> Interim-Update
  1774. (10) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  1775. (10) datacounterdaily:    --> 6974b7d556ed613e
  1776. (10) datacounterdaily: Program returned code (0) and output ''
  1777. (10) datacounterdaily: Program executed successfully
  1778. (10)       [datacounterdaily] = ok
  1779. (10) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1780. (10) datacounterweekly: EXPAND %{request:User-Name}
  1781. (10) datacounterweekly:    --> anand
  1782. (10) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  1783. (10) datacounterweekly:    --> 11656
  1784. (10) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  1785. (10) datacounterweekly:    --> 35330
  1786. (10) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  1787. (10) datacounterweekly:    --> Interim-Update
  1788. (10) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  1789. (10) datacounterweekly:    --> 6974b7d556ed613e
  1790. (10) datacounterweekly: Program returned code (0) and output ''
  1791. (10) datacounterweekly: Program executed successfully
  1792. (10)       [datacounterweekly] = ok
  1793. (10) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1794. (10) datacountermonthly: EXPAND %{request:User-Name}
  1795. (10) datacountermonthly:    --> anand
  1796. (10) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  1797. (10) datacountermonthly:    --> 11656
  1798. (10) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  1799. (10) datacountermonthly:    --> 35330
  1800. (10) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  1801. (10) datacountermonthly:    --> Interim-Update
  1802. (10) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  1803. (10) datacountermonthly:    --> 6974b7d556ed613e
  1804. (10) datacountermonthly: Program returned code (0) and output ''
  1805. (10) datacountermonthly: Program executed successfully
  1806. (10)       [datacountermonthly] = ok
  1807. (10) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1808. (10) datacounterforever: EXPAND %{request:User-Name}
  1809. (10) datacounterforever:    --> anand
  1810. (10) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  1811. (10) datacounterforever:    --> 11656
  1812. (10) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  1813. (10) datacounterforever:    --> 35330
  1814. (10) datacounterforever: EXPAND %{request:Acct-Status-Type}
  1815. (10) datacounterforever:    --> Interim-Update
  1816. (10) datacounterforever: EXPAND %{request:Acct-Session-Id}
  1817. (10) datacounterforever:    --> 6974b7d556ed613e
  1818. (10) datacounterforever: Program returned code (0) and output ''
  1819. (10) datacounterforever: Program executed successfully
  1820. (10)       [datacounterforever] = ok
  1821. (10)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  1822. (10) radutmp: EXPAND /var/log/radutmp
  1823. (10) radutmp:    --> /var/log/radutmp
  1824. (10) radutmp: EXPAND %{User-Name}
  1825. (10) radutmp:    --> anand
  1826. (10)     [radutmp] = ok
  1827. rlm_counter: We only run on Accounting-Stop packets
  1828. (10)     [daily] = noop
  1829. rlm_counter: We only run on Accounting-Stop packets
  1830. (10)     [weekly] = noop
  1831. rlm_counter: We only run on Accounting-Stop packets
  1832. (10)     [monthly] = noop
  1833. rlm_counter: We only run on Accounting-Stop packets
  1834. (10)     [forever] = noop
  1835. (10)     [exec] = noop
  1836. (10) attr_filter.accounting_response: EXPAND %{User-Name}
  1837. (10) attr_filter.accounting_response:    --> anand
  1838. (10) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  1839. (10)     [attr_filter.accounting_response] = updated
  1840. (10)   } # accounting = updated
  1841. (10) Sent Accounting-Response Id 4 from 192.168.200.1:1813 to 192.168.200.1:1860 length 0
  1842. (10) Finished request
  1843. (10) Cleaning up request packet ID 4 with timestamp +88
  1844. Waking up in 4.9 seconds.
  1845. (11) Received Access-Request Id 184 from 192.168.200.1:5989 to 192.168.200.1:1812 length 160
  1846. (11)   Service-Type = Login-User
  1847. (11)   User-Name = "anand"
  1848. (11)   User-Password = "9829012834"
  1849. (11)   NAS-IP-Address = 192.168.200.1
  1850. (11)   NAS-Identifier = "CaptivePortal-office_zone"
  1851. (11)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  1852. (11)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1853. (11)   NAS-Port-Type = Ethernet
  1854. (11)   NAS-Port = 2002
  1855. (11)   Framed-IP-Address = 192.168.200.202
  1856. (11) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  1857. (11)   authorize {
  1858. (11)     [preprocess] = ok
  1859. (11)     [chap] = noop
  1860. (11)     [mschap] = noop
  1861. (11)     [digest] = noop
  1862. (11) suffix: Checking for suffix after "@"
  1863. (11) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1864. (11)     [suffix] = noop
  1865. (11) ntdomain: Checking for prefix before "\"
  1866. (11) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1867. (11)     [ntdomain] = noop
  1868. (11) eap: No EAP-Message, not doing EAP
  1869. (11)     [eap] = noop
  1870. (11) files: users: Matched entry DEFAULT at line 1
  1871. (11) files: users: Matched entry anand at line 4
  1872. (11)     [files] = ok
  1873. rlm_counter: Entering module authorize code
  1874. rlm_counter: Could not find Check item value pair
  1875. (11)     [daily] = noop
  1876. rlm_counter: Entering module authorize code
  1877. rlm_counter: Could not find Check item value pair
  1878. (11)     [weekly] = noop
  1879. rlm_counter: Entering module authorize code
  1880. rlm_counter: Could not find Check item value pair
  1881. (11)     [monthly] = noop
  1882. rlm_counter: Entering module authorize code
  1883. rlm_counter: Could not find Check item value pair
  1884. (11)     [forever] = noop
  1885. (11)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  1886. (11)     ERROR: Failed retrieving values required to evaluate condition
  1887. (11)     [expiration] = noop
  1888. (11)     [logintime] = noop
  1889. (11)     [pap] = updated
  1890. (11)   } # authorize = updated
  1891. (11) Found Auth-Type = PAP
  1892. (11) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  1893. (11)   Auth-Type PAP {
  1894. (11) pap: Login attempt with password
  1895. (11) pap: Comparing with "known good" Cleartext-Password
  1896. (11) pap: User authenticated successfully
  1897. (11)     [pap] = ok
  1898. (11)   } # Auth-Type PAP = ok
  1899. (11) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  1900. (11)   session {
  1901. (11) radutmp: EXPAND /var/log/radutmp
  1902. (11) radutmp:    --> /var/log/radutmp
  1903. (11) radutmp: EXPAND %{User-Name}
  1904. (11) radutmp:    --> anand
  1905. checkrad: No NAS type, or type "other" not checking
  1906. checkrad: No NAS type, or type "other" not checking
  1907. checkrad: No NAS type, or type "other" not checking
  1908. (11)     [radutmp] = fail
  1909. (11)   } # session = fail
  1910. (11) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  1911. (11)   post-auth {
  1912. (11)     update {
  1913. (11)       No attributes updated for RHS &session-state:
  1914. (11)     } # update = noop
  1915. (11)     [exec] = noop
  1916. (11)     policy remove_reply_message_if_eap {
  1917. (11)       if (&reply:EAP-Message && &reply:Reply-Message) {
  1918. (11)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  1919. (11)       else {
  1920. (11)         [noop] = noop
  1921. (11)       } # else = noop
  1922. (11)     } # policy remove_reply_message_if_eap = noop
  1923. (11)   } # post-auth = noop
  1924. (11) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  1925. (11) Sent Access-Accept Id 184 from 192.168.200.1:1812 to 192.168.200.1:5989 length 0
  1926. (11) Finished request
  1927. Waking up in 4.9 seconds.
  1928. (12) Received Accounting-Request Id 144 from 192.168.200.1:41832 to 192.168.200.1:1813 length 214
  1929. (12)   Service-Type = Login-User
  1930. (12)   User-Name = "anand"
  1931. (12)   Acct-Status-Type = Interim-Update
  1932. (12)   Acct-Authentic = RADIUS
  1933. (12)   NAS-IP-Address = 192.168.200.1
  1934. (12)   NAS-Identifier = "CaptivePortal-office_zone"
  1935. (12)   NAS-Port-Type = Ethernet
  1936. (12)   NAS-Port = 2004
  1937. (12)   Acct-Session-Id = "d4f8574cf15bdf9b"
  1938. (12)   Framed-IP-Address = 192.168.200.203
  1939. (12)   Calling-Station-Id = "da:54:db:27:ae:2b"
  1940. (12)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  1941. (12)   Acct-Input-Packets = 43
  1942. (12)   Acct-Input-Octets = 14206
  1943. (12)   Acct-Output-Packets = 27
  1944. (12)   Acct-Output-Octets = 6393
  1945. (12)   Acct-Session-Time = 25
  1946. (12)   Acct-Output-Gigawords = 0
  1947. (12)   Acct-Input-Gigawords = 0
  1948. (12) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  1949. (12)   preacct {
  1950. (12)     [preprocess] = ok
  1951. (12)     update request {
  1952. (12)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  1953. (12)          --> 1586901203
  1954. (12)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  1955. (12)     } # update request = noop
  1956. (12)     policy acct_unique {
  1957. (12)       update request {
  1958. (12)         &Tmp-String-9 := "ai:"
  1959. (12)       } # update request = noop
  1960. (12)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  1961. (12)       EXPAND %{hex:&Class}
  1962. (12)          -->
  1963. (12)       EXPAND ^%{hex:&Tmp-String-9}
  1964. (12)          --> ^61693a
  1965. (12)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  1966. (12)       else {
  1967. (12)         update request {
  1968. (12)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  1969. (12)              --> 8540a37c864a86b96f7917819f3d70c9
  1970. (12)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  1971. (12)         } # update request = noop
  1972. (12)       } # else = noop
  1973. (12)     } # policy acct_unique = noop
  1974. (12) suffix: Checking for suffix after "@"
  1975. (12) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  1976. (12)     [suffix] = noop
  1977. (12) ntdomain: Checking for prefix before "\"
  1978. (12) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  1979. (12)     [ntdomain] = noop
  1980. (12)     [files] = noop
  1981. (12)   } # preacct = ok
  1982. (12) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  1983. (12)   accounting {
  1984. (12) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  1985. (12) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  1986. (12) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  1987. (12) detail: EXPAND %t
  1988. (12) detail:    --> Wed Apr 15 03:23:48 2020
  1989. (12)     [detail] = ok
  1990. (12)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  1991. (12)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  1992. (12)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  1993. (12) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  1994. (12) datacounterdaily: EXPAND %{request:User-Name}
  1995. (12) datacounterdaily:    --> anand
  1996. (12) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  1997. (12) datacounterdaily:    --> 14206
  1998. (12) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  1999. (12) datacounterdaily:    --> 6393
  2000. (12) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  2001. (12) datacounterdaily:    --> Interim-Update
  2002. (12) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  2003. (12) datacounterdaily:    --> d4f8574cf15bdf9b
  2004. (12) datacounterdaily: Program returned code (0) and output ''
  2005. (12) datacounterdaily: Program executed successfully
  2006. (12)       [datacounterdaily] = ok
  2007. (12) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2008. (12) datacounterweekly: EXPAND %{request:User-Name}
  2009. (12) datacounterweekly:    --> anand
  2010. (12) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  2011. (12) datacounterweekly:    --> 14206
  2012. (12) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  2013. (12) datacounterweekly:    --> 6393
  2014. (12) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  2015. (12) datacounterweekly:    --> Interim-Update
  2016. (12) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  2017. (12) datacounterweekly:    --> d4f8574cf15bdf9b
  2018. (12) datacounterweekly: Program returned code (0) and output ''
  2019. (12) datacounterweekly: Program executed successfully
  2020. (12)       [datacounterweekly] = ok
  2021. (12) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2022. (12) datacountermonthly: EXPAND %{request:User-Name}
  2023. (12) datacountermonthly:    --> anand
  2024. (12) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  2025. (12) datacountermonthly:    --> 14206
  2026. (12) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  2027. (12) datacountermonthly:    --> 6393
  2028. (12) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  2029. (12) datacountermonthly:    --> Interim-Update
  2030. (12) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  2031. (12) datacountermonthly:    --> d4f8574cf15bdf9b
  2032. (12) datacountermonthly: Program returned code (0) and output ''
  2033. (12) datacountermonthly: Program executed successfully
  2034. (12)       [datacountermonthly] = ok
  2035. (12) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2036. (12) datacounterforever: EXPAND %{request:User-Name}
  2037. (12) datacounterforever:    --> anand
  2038. (12) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  2039. (12) datacounterforever:    --> 14206
  2040. (12) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  2041. (12) datacounterforever:    --> 6393
  2042. (12) datacounterforever: EXPAND %{request:Acct-Status-Type}
  2043. (12) datacounterforever:    --> Interim-Update
  2044. (12) datacounterforever: EXPAND %{request:Acct-Session-Id}
  2045. (12) datacounterforever:    --> d4f8574cf15bdf9b
  2046. (12) datacounterforever: Program returned code (0) and output ''
  2047. (12) datacounterforever: Program executed successfully
  2048. (12)       [datacounterforever] = ok
  2049. (12)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  2050. (12) radutmp: EXPAND /var/log/radutmp
  2051. (12) radutmp:    --> /var/log/radutmp
  2052. (12) radutmp: EXPAND %{User-Name}
  2053. (12) radutmp:    --> anand
  2054. (12)     [radutmp] = ok
  2055. rlm_counter: We only run on Accounting-Stop packets
  2056. (12)     [daily] = noop
  2057. rlm_counter: We only run on Accounting-Stop packets
  2058. (12)     [weekly] = noop
  2059. rlm_counter: We only run on Accounting-Stop packets
  2060. (12)     [monthly] = noop
  2061. rlm_counter: We only run on Accounting-Stop packets
  2062. (12)     [forever] = noop
  2063. (12)     [exec] = noop
  2064. (12) attr_filter.accounting_response: EXPAND %{User-Name}
  2065. (12) attr_filter.accounting_response:    --> anand
  2066. (12) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  2067. (12)     [attr_filter.accounting_response] = updated
  2068. (12)   } # accounting = updated
  2069. (12) Sent Accounting-Response Id 144 from 192.168.200.1:1813 to 192.168.200.1:41832 length 0
  2070. (12) Finished request
  2071. (12) Cleaning up request packet ID 144 with timestamp +88
  2072. Waking up in 4.8 seconds.
  2073. (13) Received Access-Request Id 199 from 192.168.200.1:42037 to 192.168.200.1:1812 length 160
  2074. (13)   Service-Type = Login-User
  2075. (13)   User-Name = "anand"
  2076. (13)   User-Password = "9829012834"
  2077. (13)   NAS-IP-Address = 192.168.200.1
  2078. (13)   NAS-Identifier = "CaptivePortal-office_zone"
  2079. (13)   Calling-Station-Id = "da:54:db:27:ae:2b"
  2080. (13)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2081. (13)   NAS-Port-Type = Ethernet
  2082. (13)   NAS-Port = 2004
  2083. (13)   Framed-IP-Address = 192.168.200.203
  2084. (13) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  2085. (13)   authorize {
  2086. (13)     [preprocess] = ok
  2087. (13)     [chap] = noop
  2088. (13)     [mschap] = noop
  2089. (13)     [digest] = noop
  2090. (13) suffix: Checking for suffix after "@"
  2091. (13) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2092. (13)     [suffix] = noop
  2093. (13) ntdomain: Checking for prefix before "\"
  2094. (13) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2095. (13)     [ntdomain] = noop
  2096. (13) eap: No EAP-Message, not doing EAP
  2097. (13)     [eap] = noop
  2098. (13) files: users: Matched entry DEFAULT at line 1
  2099. (13) files: users: Matched entry anand at line 4
  2100. (13)     [files] = ok
  2101. rlm_counter: Entering module authorize code
  2102. rlm_counter: Could not find Check item value pair
  2103. (13)     [daily] = noop
  2104. rlm_counter: Entering module authorize code
  2105. rlm_counter: Could not find Check item value pair
  2106. (13)     [weekly] = noop
  2107. rlm_counter: Entering module authorize code
  2108. rlm_counter: Could not find Check item value pair
  2109. (13)     [monthly] = noop
  2110. rlm_counter: Entering module authorize code
  2111. rlm_counter: Could not find Check item value pair
  2112. (13)     [forever] = noop
  2113. (13)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  2114. (13)     ERROR: Failed retrieving values required to evaluate condition
  2115. (13)     [expiration] = noop
  2116. (13)     [logintime] = noop
  2117. (13)     [pap] = updated
  2118. (13)   } # authorize = updated
  2119. (13) Found Auth-Type = PAP
  2120. (13) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  2121. (13)   Auth-Type PAP {
  2122. (13) pap: Login attempt with password
  2123. (13) pap: Comparing with "known good" Cleartext-Password
  2124. (13) pap: User authenticated successfully
  2125. (13)     [pap] = ok
  2126. (13)   } # Auth-Type PAP = ok
  2127. (13) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  2128. (13)   session {
  2129. (13) radutmp: EXPAND /var/log/radutmp
  2130. (13) radutmp:    --> /var/log/radutmp
  2131. (13) radutmp: EXPAND %{User-Name}
  2132. (13) radutmp:    --> anand
  2133. checkrad: No NAS type, or type "other" not checking
  2134. checkrad: No NAS type, or type "other" not checking
  2135. checkrad: No NAS type, or type "other" not checking
  2136. (13)     [radutmp] = fail
  2137. (13)   } # session = fail
  2138. (13) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  2139. (13)   post-auth {
  2140. (13)     update {
  2141. (13)       No attributes updated for RHS &session-state:
  2142. (13)     } # update = noop
  2143. (13)     [exec] = noop
  2144. (13)     policy remove_reply_message_if_eap {
  2145. (13)       if (&reply:EAP-Message && &reply:Reply-Message) {
  2146. (13)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  2147. (13)       else {
  2148. (13)         [noop] = noop
  2149. (13)       } # else = noop
  2150. (13)     } # policy remove_reply_message_if_eap = noop
  2151. (13)   } # post-auth = noop
  2152. (13) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  2153. (13) Sent Access-Accept Id 199 from 192.168.200.1:1812 to 192.168.200.1:42037 length 0
  2154. (13) Finished request
  2155. Waking up in 4.8 seconds.
  2156. (9) Cleaning up request packet ID 28 with timestamp +88
  2157. (11) Cleaning up request packet ID 184 with timestamp +88
  2158. Waking up in 0.1 seconds.
  2159. (13) Cleaning up request packet ID 199 with timestamp +88
  2160. Ready to process requests
  2161. (14) Received Accounting-Request Id 193 from 192.168.200.1:64422 to 192.168.200.1:1813 length 214
  2162. (14)   Service-Type = Login-User
  2163. (14)   User-Name = "anand"
  2164. (14)   Acct-Status-Type = Interim-Update
  2165. (14)   Acct-Authentic = RADIUS
  2166. (14)   NAS-IP-Address = 192.168.200.1
  2167. (14)   NAS-Identifier = "CaptivePortal-office_zone"
  2168. (14)   NAS-Port-Type = Ethernet
  2169. (14)   NAS-Port = 2000
  2170. (14)   Acct-Session-Id = "874681d3614b1b36"
  2171. (14)   Framed-IP-Address = 192.168.200.201
  2172. (14)   Calling-Station-Id = "e6:8f:99:48:85:89"
  2173. (14)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2174. (14)   Acct-Input-Packets = 521
  2175. (14)   Acct-Input-Octets = 78963
  2176. (14)   Acct-Output-Packets = 630
  2177. (14)   Acct-Output-Octets = 363622
  2178. (14)   Acct-Session-Time = 130
  2179. (14)   Acct-Output-Gigawords = 0
  2180. (14)   Acct-Input-Gigawords = 0
  2181. (14) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  2182. (14)   preacct {
  2183. (14)     [preprocess] = ok
  2184. (14)     update request {
  2185. (14)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  2186. (14)          --> 1586901159
  2187. (14)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  2188. (14)     } # update request = noop
  2189. (14)     policy acct_unique {
  2190. (14)       update request {
  2191. (14)         &Tmp-String-9 := "ai:"
  2192. (14)       } # update request = noop
  2193. (14)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  2194. (14)       EXPAND %{hex:&Class}
  2195. (14)          -->
  2196. (14)       EXPAND ^%{hex:&Tmp-String-9}
  2197. (14)          --> ^61693a
  2198. (14)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  2199. (14)       else {
  2200. (14)         update request {
  2201. (14)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  2202. (14)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  2203. (14)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  2204. (14)         } # update request = noop
  2205. (14)       } # else = noop
  2206. (14)     } # policy acct_unique = noop
  2207. (14) suffix: Checking for suffix after "@"
  2208. (14) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2209. (14)     [suffix] = noop
  2210. (14) ntdomain: Checking for prefix before "\"
  2211. (14) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2212. (14)     [ntdomain] = noop
  2213. (14)     [files] = noop
  2214. (14)   } # preacct = ok
  2215. (14) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  2216. (14)   accounting {
  2217. (14) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  2218. (14) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  2219. (14) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  2220. (14) detail: EXPAND %t
  2221. (14) detail:    --> Wed Apr 15 03:24:49 2020
  2222. (14)     [detail] = ok
  2223. (14)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  2224. (14)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  2225. (14)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  2226. (14) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2227. (14) datacounterdaily: EXPAND %{request:User-Name}
  2228. (14) datacounterdaily:    --> anand
  2229. (14) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  2230. (14) datacounterdaily:    --> 78963
  2231. (14) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  2232. (14) datacounterdaily:    --> 363622
  2233. (14) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  2234. (14) datacounterdaily:    --> Interim-Update
  2235. (14) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  2236. (14) datacounterdaily:    --> 874681d3614b1b36
  2237. (14) datacounterdaily: Program returned code (0) and output ''
  2238. (14) datacounterdaily: Program executed successfully
  2239. (14)       [datacounterdaily] = ok
  2240. (14) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2241. (14) datacounterweekly: EXPAND %{request:User-Name}
  2242. (14) datacounterweekly:    --> anand
  2243. (14) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  2244. (14) datacounterweekly:    --> 78963
  2245. (14) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  2246. (14) datacounterweekly:    --> 363622
  2247. (14) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  2248. (14) datacounterweekly:    --> Interim-Update
  2249. (14) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  2250. (14) datacounterweekly:    --> 874681d3614b1b36
  2251. (14) datacounterweekly: Program returned code (0) and output ''
  2252. (14) datacounterweekly: Program executed successfully
  2253. (14)       [datacounterweekly] = ok
  2254. (14) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2255. (14) datacountermonthly: EXPAND %{request:User-Name}
  2256. (14) datacountermonthly:    --> anand
  2257. (14) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  2258. (14) datacountermonthly:    --> 78963
  2259. (14) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  2260. (14) datacountermonthly:    --> 363622
  2261. (14) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  2262. (14) datacountermonthly:    --> Interim-Update
  2263. (14) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  2264. (14) datacountermonthly:    --> 874681d3614b1b36
  2265. (14) datacountermonthly: Program returned code (0) and output ''
  2266. (14) datacountermonthly: Program executed successfully
  2267. (14)       [datacountermonthly] = ok
  2268. (14) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2269. (14) datacounterforever: EXPAND %{request:User-Name}
  2270. (14) datacounterforever:    --> anand
  2271. (14) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  2272. (14) datacounterforever:    --> 78963
  2273. (14) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  2274. (14) datacounterforever:    --> 363622
  2275. (14) datacounterforever: EXPAND %{request:Acct-Status-Type}
  2276. (14) datacounterforever:    --> Interim-Update
  2277. (14) datacounterforever: EXPAND %{request:Acct-Session-Id}
  2278. (14) datacounterforever:    --> 874681d3614b1b36
  2279. (14) datacounterforever: Program returned code (0) and output ''
  2280. (14) datacounterforever: Program executed successfully
  2281. (14)       [datacounterforever] = ok
  2282. (14)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  2283. (14) radutmp: EXPAND /var/log/radutmp
  2284. (14) radutmp:    --> /var/log/radutmp
  2285. (14) radutmp: EXPAND %{User-Name}
  2286. (14) radutmp:    --> anand
  2287. (14)     [radutmp] = ok
  2288. rlm_counter: We only run on Accounting-Stop packets
  2289. (14)     [daily] = noop
  2290. rlm_counter: We only run on Accounting-Stop packets
  2291. (14)     [weekly] = noop
  2292. rlm_counter: We only run on Accounting-Stop packets
  2293. (14)     [monthly] = noop
  2294. rlm_counter: We only run on Accounting-Stop packets
  2295. (14)     [forever] = noop
  2296. (14)     [exec] = noop
  2297. (14) attr_filter.accounting_response: EXPAND %{User-Name}
  2298. (14) attr_filter.accounting_response:    --> anand
  2299. (14) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  2300. (14)     [attr_filter.accounting_response] = updated
  2301. (14)   } # accounting = updated
  2302. (14) Sent Accounting-Response Id 193 from 192.168.200.1:1813 to 192.168.200.1:64422 length 0
  2303. (14) Finished request
  2304. (14) Cleaning up request packet ID 193 with timestamp +149
  2305. Ready to process requests
  2306. (15) Received Access-Request Id 91 from 192.168.200.1:5429 to 192.168.200.1:1812 length 160
  2307. (15)   Service-Type = Login-User
  2308. (15)   User-Name = "anand"
  2309. (15)   User-Password = "9829012834"
  2310. (15)   NAS-IP-Address = 192.168.200.1
  2311. (15)   NAS-Identifier = "CaptivePortal-office_zone"
  2312. (15)   Calling-Station-Id = "e6:8f:99:48:85:89"
  2313. (15)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2314. (15)   NAS-Port-Type = Ethernet
  2315. (15)   NAS-Port = 2000
  2316. (15)   Framed-IP-Address = 192.168.200.201
  2317. (15) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  2318. (15)   authorize {
  2319. (15)     [preprocess] = ok
  2320. (15)     [chap] = noop
  2321. (15)     [mschap] = noop
  2322. (15)     [digest] = noop
  2323. (15) suffix: Checking for suffix after "@"
  2324. (15) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2325. (15)     [suffix] = noop
  2326. (15) ntdomain: Checking for prefix before "\"
  2327. (15) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2328. (15)     [ntdomain] = noop
  2329. (15) eap: No EAP-Message, not doing EAP
  2330. (15)     [eap] = noop
  2331. (15) files: users: Matched entry DEFAULT at line 1
  2332. (15) files: users: Matched entry anand at line 4
  2333. (15)     [files] = ok
  2334. rlm_counter: Entering module authorize code
  2335. rlm_counter: Could not find Check item value pair
  2336. (15)     [daily] = noop
  2337. rlm_counter: Entering module authorize code
  2338. rlm_counter: Could not find Check item value pair
  2339. (15)     [weekly] = noop
  2340. rlm_counter: Entering module authorize code
  2341. rlm_counter: Could not find Check item value pair
  2342. (15)     [monthly] = noop
  2343. rlm_counter: Entering module authorize code
  2344. rlm_counter: Could not find Check item value pair
  2345. (15)     [forever] = noop
  2346. (15)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  2347. (15)     ERROR: Failed retrieving values required to evaluate condition
  2348. (15)     [expiration] = noop
  2349. (15)     [logintime] = noop
  2350. (15)     [pap] = updated
  2351. (15)   } # authorize = updated
  2352. (15) Found Auth-Type = PAP
  2353. (15) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  2354. (15)   Auth-Type PAP {
  2355. (15) pap: Login attempt with password
  2356. (15) pap: Comparing with "known good" Cleartext-Password
  2357. (15) pap: User authenticated successfully
  2358. (15)     [pap] = ok
  2359. (15)   } # Auth-Type PAP = ok
  2360. (15) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  2361. (15)   session {
  2362. (15) radutmp: EXPAND /var/log/radutmp
  2363. (15) radutmp:    --> /var/log/radutmp
  2364. (15) radutmp: EXPAND %{User-Name}
  2365. (15) radutmp:    --> anand
  2366. checkrad: No NAS type, or type "other" not checking
  2367. checkrad: No NAS type, or type "other" not checking
  2368. checkrad: No NAS type, or type "other" not checking
  2369. (15)     [radutmp] = fail
  2370. (15)   } # session = fail
  2371. (15) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  2372. (15)   post-auth {
  2373. (15)     update {
  2374. (15)       No attributes updated for RHS &session-state:
  2375. (15)     } # update = noop
  2376. (15)     [exec] = noop
  2377. (15)     policy remove_reply_message_if_eap {
  2378. (15)       if (&reply:EAP-Message && &reply:Reply-Message) {
  2379. (15)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  2380. (15)       else {
  2381. (15)         [noop] = noop
  2382. (15)       } # else = noop
  2383. (15)     } # policy remove_reply_message_if_eap = noop
  2384. (15)   } # post-auth = noop
  2385. (15) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  2386. (15) Sent Access-Accept Id 91 from 192.168.200.1:1812 to 192.168.200.1:5429 length 0
  2387. (15) Finished request
  2388. Waking up in 4.9 seconds.
  2389. (16) Received Accounting-Request Id 69 from 192.168.200.1:10987 to 192.168.200.1:1813 length 214
  2390. (16)   Service-Type = Login-User
  2391. (16)   User-Name = "anand"
  2392. (16)   Acct-Status-Type = Interim-Update
  2393. (16)   Acct-Authentic = RADIUS
  2394. (16)   NAS-IP-Address = 192.168.200.1
  2395. (16)   NAS-Identifier = "CaptivePortal-office_zone"
  2396. (16)   NAS-Port-Type = Ethernet
  2397. (16)   NAS-Port = 2002
  2398. (16)   Acct-Session-Id = "6974b7d556ed613e"
  2399. (16)   Framed-IP-Address = 192.168.200.202
  2400. (16)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  2401. (16)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2402. (16)   Acct-Input-Packets = 744
  2403. (16)   Acct-Input-Octets = 346255
  2404. (16)   Acct-Output-Packets = 784
  2405. (16)   Acct-Output-Octets = 399253
  2406. (16)   Acct-Session-Time = 99
  2407. (16)   Acct-Output-Gigawords = 0
  2408. (16)   Acct-Input-Gigawords = 0
  2409. (16) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  2410. (16)   preacct {
  2411. (16)     [preprocess] = ok
  2412. (16)     update request {
  2413. (16)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  2414. (16)          --> 1586901190
  2415. (16)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  2416. (16)     } # update request = noop
  2417. (16)     policy acct_unique {
  2418. (16)       update request {
  2419. (16)         &Tmp-String-9 := "ai:"
  2420. (16)       } # update request = noop
  2421. (16)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  2422. (16)       EXPAND %{hex:&Class}
  2423. (16)          -->
  2424. (16)       EXPAND ^%{hex:&Tmp-String-9}
  2425. (16)          --> ^61693a
  2426. (16)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  2427. (16)       else {
  2428. (16)         update request {
  2429. (16)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  2430. (16)              --> 9a9488f2d0124a4aa7feb209bced26bb
  2431. (16)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  2432. (16)         } # update request = noop
  2433. (16)       } # else = noop
  2434. (16)     } # policy acct_unique = noop
  2435. (16) suffix: Checking for suffix after "@"
  2436. (16) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2437. (16)     [suffix] = noop
  2438. (16) ntdomain: Checking for prefix before "\"
  2439. (16) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2440. (16)     [ntdomain] = noop
  2441. (16)     [files] = noop
  2442. (16)   } # preacct = ok
  2443. (16) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  2444. (16)   accounting {
  2445. (16) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  2446. (16) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  2447. (16) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  2448. (16) detail: EXPAND %t
  2449. (16) detail:    --> Wed Apr 15 03:24:49 2020
  2450. (16)     [detail] = ok
  2451. (16)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  2452. (16)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  2453. (16)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  2454. (16) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2455. (16) datacounterdaily: EXPAND %{request:User-Name}
  2456. (16) datacounterdaily:    --> anand
  2457. (16) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  2458. (16) datacounterdaily:    --> 346255
  2459. (16) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  2460. (16) datacounterdaily:    --> 399253
  2461. (16) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  2462. (16) datacounterdaily:    --> Interim-Update
  2463. (16) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  2464. (16) datacounterdaily:    --> 6974b7d556ed613e
  2465. (16) datacounterdaily: Program returned code (0) and output ''
  2466. (16) datacounterdaily: Program executed successfully
  2467. (16)       [datacounterdaily] = ok
  2468. (16) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2469. (16) datacounterweekly: EXPAND %{request:User-Name}
  2470. (16) datacounterweekly:    --> anand
  2471. (16) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  2472. (16) datacounterweekly:    --> 346255
  2473. (16) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  2474. (16) datacounterweekly:    --> 399253
  2475. (16) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  2476. (16) datacounterweekly:    --> Interim-Update
  2477. (16) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  2478. (16) datacounterweekly:    --> 6974b7d556ed613e
  2479. (16) datacounterweekly: Program returned code (0) and output ''
  2480. (16) datacounterweekly: Program executed successfully
  2481. (16)       [datacounterweekly] = ok
  2482. (16) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2483. (16) datacountermonthly: EXPAND %{request:User-Name}
  2484. (16) datacountermonthly:    --> anand
  2485. (16) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  2486. (16) datacountermonthly:    --> 346255
  2487. (16) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  2488. (16) datacountermonthly:    --> 399253
  2489. (16) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  2490. (16) datacountermonthly:    --> Interim-Update
  2491. (16) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  2492. (16) datacountermonthly:    --> 6974b7d556ed613e
  2493. (16) datacountermonthly: Program returned code (0) and output ''
  2494. (16) datacountermonthly: Program executed successfully
  2495. (16)       [datacountermonthly] = ok
  2496. (16) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2497. (16) datacounterforever: EXPAND %{request:User-Name}
  2498. (16) datacounterforever:    --> anand
  2499. (16) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  2500. (16) datacounterforever:    --> 346255
  2501. (16) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  2502. (16) datacounterforever:    --> 399253
  2503. (16) datacounterforever: EXPAND %{request:Acct-Status-Type}
  2504. (16) datacounterforever:    --> Interim-Update
  2505. (16) datacounterforever: EXPAND %{request:Acct-Session-Id}
  2506. (16) datacounterforever:    --> 6974b7d556ed613e
  2507. (16) datacounterforever: Program returned code (0) and output ''
  2508. (16) datacounterforever: Program executed successfully
  2509. (16)       [datacounterforever] = ok
  2510. (16)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  2511. (16) radutmp: EXPAND /var/log/radutmp
  2512. (16) radutmp:    --> /var/log/radutmp
  2513. (16) radutmp: EXPAND %{User-Name}
  2514. (16) radutmp:    --> anand
  2515. (16)     [radutmp] = ok
  2516. rlm_counter: We only run on Accounting-Stop packets
  2517. (16)     [daily] = noop
  2518. rlm_counter: We only run on Accounting-Stop packets
  2519. (16)     [weekly] = noop
  2520. rlm_counter: We only run on Accounting-Stop packets
  2521. (16)     [monthly] = noop
  2522. rlm_counter: We only run on Accounting-Stop packets
  2523. (16)     [forever] = noop
  2524. (16)     [exec] = noop
  2525. (16) attr_filter.accounting_response: EXPAND %{User-Name}
  2526. (16) attr_filter.accounting_response:    --> anand
  2527. (16) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  2528. (16)     [attr_filter.accounting_response] = updated
  2529. (16)   } # accounting = updated
  2530. (16) Sent Accounting-Response Id 69 from 192.168.200.1:1813 to 192.168.200.1:10987 length 0
  2531. (16) Finished request
  2532. (16) Cleaning up request packet ID 69 with timestamp +149
  2533. Waking up in 4.8 seconds.
  2534. (17) Received Access-Request Id 185 from 192.168.200.1:5623 to 192.168.200.1:1812 length 160
  2535. (17)   Service-Type = Login-User
  2536. (17)   User-Name = "anand"
  2537. (17)   User-Password = "9829012834"
  2538. (17)   NAS-IP-Address = 192.168.200.1
  2539. (17)   NAS-Identifier = "CaptivePortal-office_zone"
  2540. (17)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  2541. (17)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2542. (17)   NAS-Port-Type = Ethernet
  2543. (17)   NAS-Port = 2002
  2544. (17)   Framed-IP-Address = 192.168.200.202
  2545. (17) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  2546. (17)   authorize {
  2547. (17)     [preprocess] = ok
  2548. (17)     [chap] = noop
  2549. (17)     [mschap] = noop
  2550. (17)     [digest] = noop
  2551. (17) suffix: Checking for suffix after "@"
  2552. (17) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2553. (17)     [suffix] = noop
  2554. (17) ntdomain: Checking for prefix before "\"
  2555. (17) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2556. (17)     [ntdomain] = noop
  2557. (17) eap: No EAP-Message, not doing EAP
  2558. (17)     [eap] = noop
  2559. (17) files: users: Matched entry DEFAULT at line 1
  2560. (17) files: users: Matched entry anand at line 4
  2561. (17)     [files] = ok
  2562. rlm_counter: Entering module authorize code
  2563. rlm_counter: Could not find Check item value pair
  2564. (17)     [daily] = noop
  2565. rlm_counter: Entering module authorize code
  2566. rlm_counter: Could not find Check item value pair
  2567. (17)     [weekly] = noop
  2568. rlm_counter: Entering module authorize code
  2569. rlm_counter: Could not find Check item value pair
  2570. (17)     [monthly] = noop
  2571. rlm_counter: Entering module authorize code
  2572. rlm_counter: Could not find Check item value pair
  2573. (17)     [forever] = noop
  2574. (17)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  2575. (17)     ERROR: Failed retrieving values required to evaluate condition
  2576. (17)     [expiration] = noop
  2577. (17)     [logintime] = noop
  2578. (17)     [pap] = updated
  2579. (17)   } # authorize = updated
  2580. (17) Found Auth-Type = PAP
  2581. (17) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  2582. (17)   Auth-Type PAP {
  2583. (17) pap: Login attempt with password
  2584. (17) pap: Comparing with "known good" Cleartext-Password
  2585. (17) pap: User authenticated successfully
  2586. (17)     [pap] = ok
  2587. (17)   } # Auth-Type PAP = ok
  2588. (17) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  2589. (17)   session {
  2590. (17) radutmp: EXPAND /var/log/radutmp
  2591. (17) radutmp:    --> /var/log/radutmp
  2592. (17) radutmp: EXPAND %{User-Name}
  2593. (17) radutmp:    --> anand
  2594. checkrad: No NAS type, or type "other" not checking
  2595. checkrad: No NAS type, or type "other" not checking
  2596. checkrad: No NAS type, or type "other" not checking
  2597. (17)     [radutmp] = fail
  2598. (17)   } # session = fail
  2599. (17) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  2600. (17)   post-auth {
  2601. (17)     update {
  2602. (17)       No attributes updated for RHS &session-state:
  2603. (17)     } # update = noop
  2604. (17)     [exec] = noop
  2605. (17)     policy remove_reply_message_if_eap {
  2606. (17)       if (&reply:EAP-Message && &reply:Reply-Message) {
  2607. (17)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  2608. (17)       else {
  2609. (17)         [noop] = noop
  2610. (17)       } # else = noop
  2611. (17)     } # policy remove_reply_message_if_eap = noop
  2612. (17)   } # post-auth = noop
  2613. (17) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  2614. (17) Sent Access-Accept Id 185 from 192.168.200.1:1812 to 192.168.200.1:5623 length 0
  2615. (17) Finished request
  2616. Waking up in 4.8 seconds.
  2617. (18) Received Accounting-Request Id 213 from 192.168.200.1:22052 to 192.168.200.1:1813 length 214
  2618. (18)   Service-Type = Login-User
  2619. (18)   User-Name = "anand"
  2620. (18)   Acct-Status-Type = Interim-Update
  2621. (18)   Acct-Authentic = RADIUS
  2622. (18)   NAS-IP-Address = 192.168.200.1
  2623. (18)   NAS-Identifier = "CaptivePortal-office_zone"
  2624. (18)   NAS-Port-Type = Ethernet
  2625. (18)   NAS-Port = 2004
  2626. (18)   Acct-Session-Id = "d4f8574cf15bdf9b"
  2627. (18)   Framed-IP-Address = 192.168.200.203
  2628. (18)   Calling-Station-Id = "da:54:db:27:ae:2b"
  2629. (18)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2630. (18)   Acct-Input-Packets = 43
  2631. (18)   Acct-Input-Octets = 14206
  2632. (18)   Acct-Output-Packets = 31
  2633. (18)   Acct-Output-Octets = 6553
  2634. (18)   Acct-Session-Time = 86
  2635. (18)   Acct-Output-Gigawords = 0
  2636. (18)   Acct-Input-Gigawords = 0
  2637. (18) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  2638. (18)   preacct {
  2639. (18)     [preprocess] = ok
  2640. (18)     update request {
  2641. (18)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  2642. (18)          --> 1586901203
  2643. (18)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  2644. (18)     } # update request = noop
  2645. (18)     policy acct_unique {
  2646. (18)       update request {
  2647. (18)         &Tmp-String-9 := "ai:"
  2648. (18)       } # update request = noop
  2649. (18)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  2650. (18)       EXPAND %{hex:&Class}
  2651. (18)          -->
  2652. (18)       EXPAND ^%{hex:&Tmp-String-9}
  2653. (18)          --> ^61693a
  2654. (18)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  2655. (18)       else {
  2656. (18)         update request {
  2657. (18)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  2658. (18)              --> 8540a37c864a86b96f7917819f3d70c9
  2659. (18)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  2660. (18)         } # update request = noop
  2661. (18)       } # else = noop
  2662. (18)     } # policy acct_unique = noop
  2663. (18) suffix: Checking for suffix after "@"
  2664. (18) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2665. (18)     [suffix] = noop
  2666. (18) ntdomain: Checking for prefix before "\"
  2667. (18) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2668. (18)     [ntdomain] = noop
  2669. (18)     [files] = noop
  2670. (18)   } # preacct = ok
  2671. (18) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  2672. (18)   accounting {
  2673. (18) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  2674. (18) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  2675. (18) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  2676. (18) detail: EXPAND %t
  2677. (18) detail:    --> Wed Apr 15 03:24:49 2020
  2678. (18)     [detail] = ok
  2679. (18)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  2680. (18)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  2681. (18)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  2682. (18) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2683. (18) datacounterdaily: EXPAND %{request:User-Name}
  2684. (18) datacounterdaily:    --> anand
  2685. (18) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  2686. (18) datacounterdaily:    --> 14206
  2687. (18) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  2688. (18) datacounterdaily:    --> 6553
  2689. (18) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  2690. (18) datacounterdaily:    --> Interim-Update
  2691. (18) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  2692. (18) datacounterdaily:    --> d4f8574cf15bdf9b
  2693. (18) datacounterdaily: Program returned code (0) and output ''
  2694. (18) datacounterdaily: Program executed successfully
  2695. (18)       [datacounterdaily] = ok
  2696. (18) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2697. (18) datacounterweekly: EXPAND %{request:User-Name}
  2698. (18) datacounterweekly:    --> anand
  2699. (18) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  2700. (18) datacounterweekly:    --> 14206
  2701. (18) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  2702. (18) datacounterweekly:    --> 6553
  2703. (18) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  2704. (18) datacounterweekly:    --> Interim-Update
  2705. (18) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  2706. (18) datacounterweekly:    --> d4f8574cf15bdf9b
  2707. (18) datacounterweekly: Program returned code (0) and output ''
  2708. (18) datacounterweekly: Program executed successfully
  2709. (18)       [datacounterweekly] = ok
  2710. (18) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2711. (18) datacountermonthly: EXPAND %{request:User-Name}
  2712. (18) datacountermonthly:    --> anand
  2713. (18) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  2714. (18) datacountermonthly:    --> 14206
  2715. (18) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  2716. (18) datacountermonthly:    --> 6553
  2717. (18) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  2718. (18) datacountermonthly:    --> Interim-Update
  2719. (18) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  2720. (18) datacountermonthly:    --> d4f8574cf15bdf9b
  2721. (18) datacountermonthly: Program returned code (0) and output ''
  2722. (18) datacountermonthly: Program executed successfully
  2723. (18)       [datacountermonthly] = ok
  2724. (18) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2725. (18) datacounterforever: EXPAND %{request:User-Name}
  2726. (18) datacounterforever:    --> anand
  2727. (18) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  2728. (18) datacounterforever:    --> 14206
  2729. (18) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  2730. (18) datacounterforever:    --> 6553
  2731. (18) datacounterforever: EXPAND %{request:Acct-Status-Type}
  2732. (18) datacounterforever:    --> Interim-Update
  2733. (18) datacounterforever: EXPAND %{request:Acct-Session-Id}
  2734. (18) datacounterforever:    --> d4f8574cf15bdf9b
  2735. (18) datacounterforever: Program returned code (0) and output ''
  2736. (18) datacounterforever: Program executed successfully
  2737. (18)       [datacounterforever] = ok
  2738. (18)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  2739. (18) radutmp: EXPAND /var/log/radutmp
  2740. (18) radutmp:    --> /var/log/radutmp
  2741. (18) radutmp: EXPAND %{User-Name}
  2742. (18) radutmp:    --> anand
  2743. (18)     [radutmp] = ok
  2744. rlm_counter: We only run on Accounting-Stop packets
  2745. (18)     [daily] = noop
  2746. rlm_counter: We only run on Accounting-Stop packets
  2747. (18)     [weekly] = noop
  2748. rlm_counter: We only run on Accounting-Stop packets
  2749. (18)     [monthly] = noop
  2750. rlm_counter: We only run on Accounting-Stop packets
  2751. (18)     [forever] = noop
  2752. (18)     [exec] = noop
  2753. (18) attr_filter.accounting_response: EXPAND %{User-Name}
  2754. (18) attr_filter.accounting_response:    --> anand
  2755. (18) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  2756. (18)     [attr_filter.accounting_response] = updated
  2757. (18)   } # accounting = updated
  2758. (18) Sent Accounting-Response Id 213 from 192.168.200.1:1813 to 192.168.200.1:22052 length 0
  2759. (18) Finished request
  2760. (18) Cleaning up request packet ID 213 with timestamp +149
  2761. Waking up in 4.7 seconds.
  2762. (19) Received Access-Request Id 34 from 192.168.200.1:52471 to 192.168.200.1:1812 length 160
  2763. (19)   Service-Type = Login-User
  2764. (19)   User-Name = "anand"
  2765. (19)   User-Password = "9829012834"
  2766. (19)   NAS-IP-Address = 192.168.200.1
  2767. (19)   NAS-Identifier = "CaptivePortal-office_zone"
  2768. (19)   Calling-Station-Id = "da:54:db:27:ae:2b"
  2769. (19)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2770. (19)   NAS-Port-Type = Ethernet
  2771. (19)   NAS-Port = 2004
  2772. (19)   Framed-IP-Address = 192.168.200.203
  2773. (19) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  2774. (19)   authorize {
  2775. (19)     [preprocess] = ok
  2776. (19)     [chap] = noop
  2777. (19)     [mschap] = noop
  2778. (19)     [digest] = noop
  2779. (19) suffix: Checking for suffix after "@"
  2780. (19) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2781. (19)     [suffix] = noop
  2782. (19) ntdomain: Checking for prefix before "\"
  2783. (19) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2784. (19)     [ntdomain] = noop
  2785. (19) eap: No EAP-Message, not doing EAP
  2786. (19)     [eap] = noop
  2787. (19) files: users: Matched entry DEFAULT at line 1
  2788. (19) files: users: Matched entry anand at line 4
  2789. (19)     [files] = ok
  2790. rlm_counter: Entering module authorize code
  2791. rlm_counter: Could not find Check item value pair
  2792. (19)     [daily] = noop
  2793. rlm_counter: Entering module authorize code
  2794. rlm_counter: Could not find Check item value pair
  2795. (19)     [weekly] = noop
  2796. rlm_counter: Entering module authorize code
  2797. rlm_counter: Could not find Check item value pair
  2798. (19)     [monthly] = noop
  2799. rlm_counter: Entering module authorize code
  2800. rlm_counter: Could not find Check item value pair
  2801. (19)     [forever] = noop
  2802. (19)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  2803. (19)     ERROR: Failed retrieving values required to evaluate condition
  2804. (19)     [expiration] = noop
  2805. (19)     [logintime] = noop
  2806. (19)     [pap] = updated
  2807. (19)   } # authorize = updated
  2808. (19) Found Auth-Type = PAP
  2809. (19) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  2810. (19)   Auth-Type PAP {
  2811. (19) pap: Login attempt with password
  2812. (19) pap: Comparing with "known good" Cleartext-Password
  2813. (19) pap: User authenticated successfully
  2814. (19)     [pap] = ok
  2815. (19)   } # Auth-Type PAP = ok
  2816. (19) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  2817. (19)   session {
  2818. (19) radutmp: EXPAND /var/log/radutmp
  2819. (19) radutmp:    --> /var/log/radutmp
  2820. (19) radutmp: EXPAND %{User-Name}
  2821. (19) radutmp:    --> anand
  2822. checkrad: No NAS type, or type "other" not checking
  2823. checkrad: No NAS type, or type "other" not checking
  2824. checkrad: No NAS type, or type "other" not checking
  2825. (19)     [radutmp] = fail
  2826. (19)   } # session = fail
  2827. (19) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  2828. (19)   post-auth {
  2829. (19)     update {
  2830. (19)       No attributes updated for RHS &session-state:
  2831. (19)     } # update = noop
  2832. (19)     [exec] = noop
  2833. (19)     policy remove_reply_message_if_eap {
  2834. (19)       if (&reply:EAP-Message && &reply:Reply-Message) {
  2835. (19)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  2836. (19)       else {
  2837. (19)         [noop] = noop
  2838. (19)       } # else = noop
  2839. (19)     } # policy remove_reply_message_if_eap = noop
  2840. (19)   } # post-auth = noop
  2841. (19) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  2842. (19) Sent Access-Accept Id 34 from 192.168.200.1:1812 to 192.168.200.1:52471 length 0
  2843. (19) Finished request
  2844. Waking up in 4.7 seconds.
  2845. (15) Cleaning up request packet ID 91 with timestamp +149
  2846. (17) Cleaning up request packet ID 185 with timestamp +149
  2847. Waking up in 0.1 seconds.
  2848. (19) Cleaning up request packet ID 34 with timestamp +149
  2849. Ready to process requests
  2850. (20) Received Accounting-Request Id 126 from 192.168.200.1:32691 to 192.168.200.1:1813 length 214
  2851. (20)   Service-Type = Login-User
  2852. (20)   User-Name = "anand"
  2853. (20)   Acct-Status-Type = Interim-Update
  2854. (20)   Acct-Authentic = RADIUS
  2855. (20)   NAS-IP-Address = 192.168.200.1
  2856. (20)   NAS-Identifier = "CaptivePortal-office_zone"
  2857. (20)   NAS-Port-Type = Ethernet
  2858. (20)   NAS-Port = 2000
  2859. (20)   Acct-Session-Id = "874681d3614b1b36"
  2860. (20)   Framed-IP-Address = 192.168.200.201
  2861. (20)   Calling-Station-Id = "e6:8f:99:48:85:89"
  2862. (20)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  2863. (20)   Acct-Input-Packets = 598
  2864. (20)   Acct-Input-Octets = 82909
  2865. (20)   Acct-Output-Packets = 705
  2866. (20)   Acct-Output-Octets = 367990
  2867. (20)   Acct-Session-Time = 190
  2868. (20)   Acct-Output-Gigawords = 0
  2869. (20)   Acct-Input-Gigawords = 0
  2870. (20) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  2871. (20)   preacct {
  2872. (20)     [preprocess] = ok
  2873. (20)     update request {
  2874. (20)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  2875. (20)          --> 1586901159
  2876. (20)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  2877. (20)     } # update request = noop
  2878. (20)     policy acct_unique {
  2879. (20)       update request {
  2880. (20)         &Tmp-String-9 := "ai:"
  2881. (20)       } # update request = noop
  2882. (20)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  2883. (20)       EXPAND %{hex:&Class}
  2884. (20)          -->
  2885. (20)       EXPAND ^%{hex:&Tmp-String-9}
  2886. (20)          --> ^61693a
  2887. (20)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  2888. (20)       else {
  2889. (20)         update request {
  2890. (20)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  2891. (20)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  2892. (20)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  2893. (20)         } # update request = noop
  2894. (20)       } # else = noop
  2895. (20)     } # policy acct_unique = noop
  2896. (20) suffix: Checking for suffix after "@"
  2897. (20) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  2898. (20)     [suffix] = noop
  2899. (20) ntdomain: Checking for prefix before "\"
  2900. (20) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  2901. (20)     [ntdomain] = noop
  2902. (20)     [files] = noop
  2903. (20)   } # preacct = ok
  2904. (20) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  2905. (20)   accounting {
  2906. (20) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  2907. (20) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  2908. (20) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  2909. (20) detail: EXPAND %t
  2910. (20) detail:    --> Wed Apr 15 03:25:49 2020
  2911. (20)     [detail] = ok
  2912. (20)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  2913. (20)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  2914. (20)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  2915. (20) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2916. (20) datacounterdaily: EXPAND %{request:User-Name}
  2917. (20) datacounterdaily:    --> anand
  2918. (20) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  2919. (20) datacounterdaily:    --> 82909
  2920. (20) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  2921. (20) datacounterdaily:    --> 367990
  2922. (20) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  2923. (20) datacounterdaily:    --> Interim-Update
  2924. (20) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  2925. (20) datacounterdaily:    --> 874681d3614b1b36
  2926. (20) datacounterdaily: Program returned code (0) and output ''
  2927. (20) datacounterdaily: Program executed successfully
  2928. (20)       [datacounterdaily] = ok
  2929. (20) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2930. (20) datacounterweekly: EXPAND %{request:User-Name}
  2931. (20) datacounterweekly:    --> anand
  2932. (20) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  2933. (20) datacounterweekly:    --> 82909
  2934. (20) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  2935. (20) datacounterweekly:    --> 367990
  2936. (20) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  2937. (20) datacounterweekly:    --> Interim-Update
  2938. (20) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  2939. (20) datacounterweekly:    --> 874681d3614b1b36
  2940. (20) datacounterweekly: Program returned code (0) and output ''
  2941. (20) datacounterweekly: Program executed successfully
  2942. (20)       [datacounterweekly] = ok
  2943. (20) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2944. (20) datacountermonthly: EXPAND %{request:User-Name}
  2945. (20) datacountermonthly:    --> anand
  2946. (20) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  2947. (20) datacountermonthly:    --> 82909
  2948. (20) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  2949. (20) datacountermonthly:    --> 367990
  2950. (20) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  2951. (20) datacountermonthly:    --> Interim-Update
  2952. (20) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  2953. (20) datacountermonthly:    --> 874681d3614b1b36
  2954. (20) datacountermonthly: Program returned code (0) and output ''
  2955. (20) datacountermonthly: Program executed successfully
  2956. (20)       [datacountermonthly] = ok
  2957. (20) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  2958. (20) datacounterforever: EXPAND %{request:User-Name}
  2959. (20) datacounterforever:    --> anand
  2960. (20) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  2961. (20) datacounterforever:    --> 82909
  2962. (20) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  2963. (20) datacounterforever:    --> 367990
  2964. (20) datacounterforever: EXPAND %{request:Acct-Status-Type}
  2965. (20) datacounterforever:    --> Interim-Update
  2966. (20) datacounterforever: EXPAND %{request:Acct-Session-Id}
  2967. (20) datacounterforever:    --> 874681d3614b1b36
  2968. (20) datacounterforever: Program returned code (0) and output ''
  2969. (20) datacounterforever: Program executed successfully
  2970. (20)       [datacounterforever] = ok
  2971. (20)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  2972. (20) radutmp: EXPAND /var/log/radutmp
  2973. (20) radutmp:    --> /var/log/radutmp
  2974. (20) radutmp: EXPAND %{User-Name}
  2975. (20) radutmp:    --> anand
  2976. (20)     [radutmp] = ok
  2977. rlm_counter: We only run on Accounting-Stop packets
  2978. (20)     [daily] = noop
  2979. rlm_counter: We only run on Accounting-Stop packets
  2980. (20)     [weekly] = noop
  2981. rlm_counter: We only run on Accounting-Stop packets
  2982. (20)     [monthly] = noop
  2983. rlm_counter: We only run on Accounting-Stop packets
  2984. (20)     [forever] = noop
  2985. (20)     [exec] = noop
  2986. (20) attr_filter.accounting_response: EXPAND %{User-Name}
  2987. (20) attr_filter.accounting_response:    --> anand
  2988. (20) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  2989. (20)     [attr_filter.accounting_response] = updated
  2990. (20)   } # accounting = updated
  2991. (20) Sent Accounting-Response Id 126 from 192.168.200.1:1813 to 192.168.200.1:32691 length 0
  2992. (20) Finished request
  2993. (20) Cleaning up request packet ID 126 with timestamp +209
  2994. Ready to process requests
  2995. (21) Received Access-Request Id 166 from 192.168.200.1:59728 to 192.168.200.1:1812 length 160
  2996. (21)   Service-Type = Login-User
  2997. (21)   User-Name = "anand"
  2998. (21)   User-Password = "9829012834"
  2999. (21)   NAS-IP-Address = 192.168.200.1
  3000. (21)   NAS-Identifier = "CaptivePortal-office_zone"
  3001. (21)   Calling-Station-Id = "e6:8f:99:48:85:89"
  3002. (21)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3003. (21)   NAS-Port-Type = Ethernet
  3004. (21)   NAS-Port = 2000
  3005. (21)   Framed-IP-Address = 192.168.200.201
  3006. (21) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  3007. (21)   authorize {
  3008. (21)     [preprocess] = ok
  3009. (21)     [chap] = noop
  3010. (21)     [mschap] = noop
  3011. (21)     [digest] = noop
  3012. (21) suffix: Checking for suffix after "@"
  3013. (21) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3014. (21)     [suffix] = noop
  3015. (21) ntdomain: Checking for prefix before "\"
  3016. (21) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3017. (21)     [ntdomain] = noop
  3018. (21) eap: No EAP-Message, not doing EAP
  3019. (21)     [eap] = noop
  3020. (21) files: users: Matched entry DEFAULT at line 1
  3021. (21) files: users: Matched entry anand at line 4
  3022. (21)     [files] = ok
  3023. rlm_counter: Entering module authorize code
  3024. rlm_counter: Could not find Check item value pair
  3025. (21)     [daily] = noop
  3026. rlm_counter: Entering module authorize code
  3027. rlm_counter: Could not find Check item value pair
  3028. (21)     [weekly] = noop
  3029. rlm_counter: Entering module authorize code
  3030. rlm_counter: Could not find Check item value pair
  3031. (21)     [monthly] = noop
  3032. rlm_counter: Entering module authorize code
  3033. rlm_counter: Could not find Check item value pair
  3034. (21)     [forever] = noop
  3035. (21)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  3036. (21)     ERROR: Failed retrieving values required to evaluate condition
  3037. (21)     [expiration] = noop
  3038. (21)     [logintime] = noop
  3039. (21)     [pap] = updated
  3040. (21)   } # authorize = updated
  3041. (21) Found Auth-Type = PAP
  3042. (21) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  3043. (21)   Auth-Type PAP {
  3044. (21) pap: Login attempt with password
  3045. (21) pap: Comparing with "known good" Cleartext-Password
  3046. (21) pap: User authenticated successfully
  3047. (21)     [pap] = ok
  3048. (21)   } # Auth-Type PAP = ok
  3049. (21) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  3050. (21)   session {
  3051. (21) radutmp: EXPAND /var/log/radutmp
  3052. (21) radutmp:    --> /var/log/radutmp
  3053. (21) radutmp: EXPAND %{User-Name}
  3054. (21) radutmp:    --> anand
  3055. checkrad: No NAS type, or type "other" not checking
  3056. checkrad: No NAS type, or type "other" not checking
  3057. checkrad: No NAS type, or type "other" not checking
  3058. (21)     [radutmp] = fail
  3059. (21)   } # session = fail
  3060. (21) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  3061. (21)   post-auth {
  3062. (21)     update {
  3063. (21)       No attributes updated for RHS &session-state:
  3064. (21)     } # update = noop
  3065. (21)     [exec] = noop
  3066. (21)     policy remove_reply_message_if_eap {
  3067. (21)       if (&reply:EAP-Message && &reply:Reply-Message) {
  3068. (21)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  3069. (21)       else {
  3070. (21)         [noop] = noop
  3071. (21)       } # else = noop
  3072. (21)     } # policy remove_reply_message_if_eap = noop
  3073. (21)   } # post-auth = noop
  3074. (21) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  3075. (21) Sent Access-Accept Id 166 from 192.168.200.1:1812 to 192.168.200.1:59728 length 0
  3076. (21) Finished request
  3077. Waking up in 4.9 seconds.
  3078. (22) Received Accounting-Request Id 110 from 192.168.200.1:34618 to 192.168.200.1:1813 length 214
  3079. (22)   Service-Type = Login-User
  3080. (22)   User-Name = "anand"
  3081. (22)   Acct-Status-Type = Interim-Update
  3082. (22)   Acct-Authentic = RADIUS
  3083. (22)   NAS-IP-Address = 192.168.200.1
  3084. (22)   NAS-Identifier = "CaptivePortal-office_zone"
  3085. (22)   NAS-Port-Type = Ethernet
  3086. (22)   NAS-Port = 2002
  3087. (22)   Acct-Session-Id = "6974b7d556ed613e"
  3088. (22)   Framed-IP-Address = 192.168.200.202
  3089. (22)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  3090. (22)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3091. (22)   Acct-Input-Packets = 1479
  3092. (22)   Acct-Input-Octets = 644395
  3093. (22)   Acct-Output-Packets = 1644
  3094. (22)   Acct-Output-Octets = 978832
  3095. (22)   Acct-Session-Time = 160
  3096. (22)   Acct-Output-Gigawords = 0
  3097. (22)   Acct-Input-Gigawords = 0
  3098. (22) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  3099. (22)   preacct {
  3100. (22)     [preprocess] = ok
  3101. (22)     update request {
  3102. (22)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  3103. (22)          --> 1586901190
  3104. (22)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  3105. (22)     } # update request = noop
  3106. (22)     policy acct_unique {
  3107. (22)       update request {
  3108. (22)         &Tmp-String-9 := "ai:"
  3109. (22)       } # update request = noop
  3110. (22)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  3111. (22)       EXPAND %{hex:&Class}
  3112. (22)          -->
  3113. (22)       EXPAND ^%{hex:&Tmp-String-9}
  3114. (22)          --> ^61693a
  3115. (22)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  3116. (22)       else {
  3117. (22)         update request {
  3118. (22)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  3119. (22)              --> 9a9488f2d0124a4aa7feb209bced26bb
  3120. (22)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  3121. (22)         } # update request = noop
  3122. (22)       } # else = noop
  3123. (22)     } # policy acct_unique = noop
  3124. (22) suffix: Checking for suffix after "@"
  3125. (22) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3126. (22)     [suffix] = noop
  3127. (22) ntdomain: Checking for prefix before "\"
  3128. (22) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3129. (22)     [ntdomain] = noop
  3130. (22)     [files] = noop
  3131. (22)   } # preacct = ok
  3132. (22) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  3133. (22)   accounting {
  3134. (22) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  3135. (22) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  3136. (22) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  3137. (22) detail: EXPAND %t
  3138. (22) detail:    --> Wed Apr 15 03:25:50 2020
  3139. (22)     [detail] = ok
  3140. (22)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  3141. (22)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  3142. (22)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  3143. (22) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3144. (22) datacounterdaily: EXPAND %{request:User-Name}
  3145. (22) datacounterdaily:    --> anand
  3146. (22) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  3147. (22) datacounterdaily:    --> 644395
  3148. (22) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  3149. (22) datacounterdaily:    --> 978832
  3150. (22) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  3151. (22) datacounterdaily:    --> Interim-Update
  3152. (22) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  3153. (22) datacounterdaily:    --> 6974b7d556ed613e
  3154. (22) datacounterdaily: Program returned code (0) and output ''
  3155. (22) datacounterdaily: Program executed successfully
  3156. (22)       [datacounterdaily] = ok
  3157. (22) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3158. (22) datacounterweekly: EXPAND %{request:User-Name}
  3159. (22) datacounterweekly:    --> anand
  3160. (22) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  3161. (22) datacounterweekly:    --> 644395
  3162. (22) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  3163. (22) datacounterweekly:    --> 978832
  3164. (22) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  3165. (22) datacounterweekly:    --> Interim-Update
  3166. (22) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  3167. (22) datacounterweekly:    --> 6974b7d556ed613e
  3168. (22) datacounterweekly: Program returned code (0) and output ''
  3169. (22) datacounterweekly: Program executed successfully
  3170. (22)       [datacounterweekly] = ok
  3171. (22) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3172. (22) datacountermonthly: EXPAND %{request:User-Name}
  3173. (22) datacountermonthly:    --> anand
  3174. (22) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  3175. (22) datacountermonthly:    --> 644395
  3176. (22) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  3177. (22) datacountermonthly:    --> 978832
  3178. (22) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  3179. (22) datacountermonthly:    --> Interim-Update
  3180. (22) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  3181. (22) datacountermonthly:    --> 6974b7d556ed613e
  3182. (22) datacountermonthly: Program returned code (0) and output ''
  3183. (22) datacountermonthly: Program executed successfully
  3184. (22)       [datacountermonthly] = ok
  3185. (22) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3186. (22) datacounterforever: EXPAND %{request:User-Name}
  3187. (22) datacounterforever:    --> anand
  3188. (22) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  3189. (22) datacounterforever:    --> 644395
  3190. (22) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  3191. (22) datacounterforever:    --> 978832
  3192. (22) datacounterforever: EXPAND %{request:Acct-Status-Type}
  3193. (22) datacounterforever:    --> Interim-Update
  3194. (22) datacounterforever: EXPAND %{request:Acct-Session-Id}
  3195. (22) datacounterforever:    --> 6974b7d556ed613e
  3196. (22) datacounterforever: Program returned code (0) and output ''
  3197. (22) datacounterforever: Program executed successfully
  3198. (22)       [datacounterforever] = ok
  3199. (22)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  3200. (22) radutmp: EXPAND /var/log/radutmp
  3201. (22) radutmp:    --> /var/log/radutmp
  3202. (22) radutmp: EXPAND %{User-Name}
  3203. (22) radutmp:    --> anand
  3204. (22)     [radutmp] = ok
  3205. rlm_counter: We only run on Accounting-Stop packets
  3206. (22)     [daily] = noop
  3207. rlm_counter: We only run on Accounting-Stop packets
  3208. (22)     [weekly] = noop
  3209. rlm_counter: We only run on Accounting-Stop packets
  3210. (22)     [monthly] = noop
  3211. rlm_counter: We only run on Accounting-Stop packets
  3212. (22)     [forever] = noop
  3213. (22)     [exec] = noop
  3214. (22) attr_filter.accounting_response: EXPAND %{User-Name}
  3215. (22) attr_filter.accounting_response:    --> anand
  3216. (22) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  3217. (22)     [attr_filter.accounting_response] = updated
  3218. (22)   } # accounting = updated
  3219. (22) Sent Accounting-Response Id 110 from 192.168.200.1:1813 to 192.168.200.1:34618 length 0
  3220. (22) Finished request
  3221. (22) Cleaning up request packet ID 110 with timestamp +210
  3222. Waking up in 4.8 seconds.
  3223. (23) Received Access-Request Id 128 from 192.168.200.1:61565 to 192.168.200.1:1812 length 160
  3224. (23)   Service-Type = Login-User
  3225. (23)   User-Name = "anand"
  3226. (23)   User-Password = "9829012834"
  3227. (23)   NAS-IP-Address = 192.168.200.1
  3228. (23)   NAS-Identifier = "CaptivePortal-office_zone"
  3229. (23)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  3230. (23)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3231. (23)   NAS-Port-Type = Ethernet
  3232. (23)   NAS-Port = 2002
  3233. (23)   Framed-IP-Address = 192.168.200.202
  3234. (23) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  3235. (23)   authorize {
  3236. (23)     [preprocess] = ok
  3237. (23)     [chap] = noop
  3238. (23)     [mschap] = noop
  3239. (23)     [digest] = noop
  3240. (23) suffix: Checking for suffix after "@"
  3241. (23) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3242. (23)     [suffix] = noop
  3243. (23) ntdomain: Checking for prefix before "\"
  3244. (23) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3245. (23)     [ntdomain] = noop
  3246. (23) eap: No EAP-Message, not doing EAP
  3247. (23)     [eap] = noop
  3248. (23) files: users: Matched entry DEFAULT at line 1
  3249. (23) files: users: Matched entry anand at line 4
  3250. (23)     [files] = ok
  3251. rlm_counter: Entering module authorize code
  3252. rlm_counter: Could not find Check item value pair
  3253. (23)     [daily] = noop
  3254. rlm_counter: Entering module authorize code
  3255. rlm_counter: Could not find Check item value pair
  3256. (23)     [weekly] = noop
  3257. rlm_counter: Entering module authorize code
  3258. rlm_counter: Could not find Check item value pair
  3259. (23)     [monthly] = noop
  3260. rlm_counter: Entering module authorize code
  3261. rlm_counter: Could not find Check item value pair
  3262. (23)     [forever] = noop
  3263. (23)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  3264. (23)     ERROR: Failed retrieving values required to evaluate condition
  3265. (23)     [expiration] = noop
  3266. (23)     [logintime] = noop
  3267. (23)     [pap] = updated
  3268. (23)   } # authorize = updated
  3269. (23) Found Auth-Type = PAP
  3270. (23) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  3271. (23)   Auth-Type PAP {
  3272. (23) pap: Login attempt with password
  3273. (23) pap: Comparing with "known good" Cleartext-Password
  3274. (23) pap: User authenticated successfully
  3275. (23)     [pap] = ok
  3276. (23)   } # Auth-Type PAP = ok
  3277. (23) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  3278. (23)   session {
  3279. (23) radutmp: EXPAND /var/log/radutmp
  3280. (23) radutmp:    --> /var/log/radutmp
  3281. (23) radutmp: EXPAND %{User-Name}
  3282. (23) radutmp:    --> anand
  3283. checkrad: No NAS type, or type "other" not checking
  3284. checkrad: No NAS type, or type "other" not checking
  3285. checkrad: No NAS type, or type "other" not checking
  3286. (23)     [radutmp] = fail
  3287. (23)   } # session = fail
  3288. (23) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  3289. (23)   post-auth {
  3290. (23)     update {
  3291. (23)       No attributes updated for RHS &session-state:
  3292. (23)     } # update = noop
  3293. (23)     [exec] = noop
  3294. (23)     policy remove_reply_message_if_eap {
  3295. (23)       if (&reply:EAP-Message && &reply:Reply-Message) {
  3296. (23)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  3297. (23)       else {
  3298. (23)         [noop] = noop
  3299. (23)       } # else = noop
  3300. (23)     } # policy remove_reply_message_if_eap = noop
  3301. (23)   } # post-auth = noop
  3302. (23) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  3303. (23) Sent Access-Accept Id 128 from 192.168.200.1:1812 to 192.168.200.1:61565 length 0
  3304. (23) Finished request
  3305. Waking up in 4.8 seconds.
  3306. (24) Received Accounting-Request Id 133 from 192.168.200.1:33325 to 192.168.200.1:1813 length 214
  3307. (24)   Service-Type = Login-User
  3308. (24)   User-Name = "anand"
  3309. (24)   Acct-Status-Type = Interim-Update
  3310. (24)   Acct-Authentic = RADIUS
  3311. (24)   NAS-IP-Address = 192.168.200.1
  3312. (24)   NAS-Identifier = "CaptivePortal-office_zone"
  3313. (24)   NAS-Port-Type = Ethernet
  3314. (24)   NAS-Port = 2004
  3315. (24)   Acct-Session-Id = "d4f8574cf15bdf9b"
  3316. (24)   Framed-IP-Address = 192.168.200.203
  3317. (24)   Calling-Station-Id = "da:54:db:27:ae:2b"
  3318. (24)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3319. (24)   Acct-Input-Packets = 45
  3320. (24)   Acct-Input-Octets = 14312
  3321. (24)   Acct-Output-Packets = 32
  3322. (24)   Acct-Output-Octets = 6593
  3323. (24)   Acct-Session-Time = 147
  3324. (24)   Acct-Output-Gigawords = 0
  3325. (24)   Acct-Input-Gigawords = 0
  3326. (24) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  3327. (24)   preacct {
  3328. (24)     [preprocess] = ok
  3329. (24)     update request {
  3330. (24)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  3331. (24)          --> 1586901203
  3332. (24)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  3333. (24)     } # update request = noop
  3334. (24)     policy acct_unique {
  3335. (24)       update request {
  3336. (24)         &Tmp-String-9 := "ai:"
  3337. (24)       } # update request = noop
  3338. (24)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  3339. (24)       EXPAND %{hex:&Class}
  3340. (24)          -->
  3341. (24)       EXPAND ^%{hex:&Tmp-String-9}
  3342. (24)          --> ^61693a
  3343. (24)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  3344. (24)       else {
  3345. (24)         update request {
  3346. (24)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  3347. (24)              --> 8540a37c864a86b96f7917819f3d70c9
  3348. (24)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  3349. (24)         } # update request = noop
  3350. (24)       } # else = noop
  3351. (24)     } # policy acct_unique = noop
  3352. (24) suffix: Checking for suffix after "@"
  3353. (24) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3354. (24)     [suffix] = noop
  3355. (24) ntdomain: Checking for prefix before "\"
  3356. (24) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3357. (24)     [ntdomain] = noop
  3358. (24)     [files] = noop
  3359. (24)   } # preacct = ok
  3360. (24) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  3361. (24)   accounting {
  3362. (24) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  3363. (24) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  3364. (24) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  3365. (24) detail: EXPAND %t
  3366. (24) detail:    --> Wed Apr 15 03:25:50 2020
  3367. (24)     [detail] = ok
  3368. (24)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  3369. (24)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  3370. (24)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  3371. (24) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3372. (24) datacounterdaily: EXPAND %{request:User-Name}
  3373. (24) datacounterdaily:    --> anand
  3374. (24) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  3375. (24) datacounterdaily:    --> 14312
  3376. (24) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  3377. (24) datacounterdaily:    --> 6593
  3378. (24) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  3379. (24) datacounterdaily:    --> Interim-Update
  3380. (24) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  3381. (24) datacounterdaily:    --> d4f8574cf15bdf9b
  3382. (24) datacounterdaily: Program returned code (0) and output ''
  3383. (24) datacounterdaily: Program executed successfully
  3384. (24)       [datacounterdaily] = ok
  3385. (24) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3386. (24) datacounterweekly: EXPAND %{request:User-Name}
  3387. (24) datacounterweekly:    --> anand
  3388. (24) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  3389. (24) datacounterweekly:    --> 14312
  3390. (24) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  3391. (24) datacounterweekly:    --> 6593
  3392. (24) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  3393. (24) datacounterweekly:    --> Interim-Update
  3394. (24) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  3395. (24) datacounterweekly:    --> d4f8574cf15bdf9b
  3396. (24) datacounterweekly: Program returned code (0) and output ''
  3397. (24) datacounterweekly: Program executed successfully
  3398. (24)       [datacounterweekly] = ok
  3399. (24) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3400. (24) datacountermonthly: EXPAND %{request:User-Name}
  3401. (24) datacountermonthly:    --> anand
  3402. (24) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  3403. (24) datacountermonthly:    --> 14312
  3404. (24) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  3405. (24) datacountermonthly:    --> 6593
  3406. (24) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  3407. (24) datacountermonthly:    --> Interim-Update
  3408. (24) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  3409. (24) datacountermonthly:    --> d4f8574cf15bdf9b
  3410. (24) datacountermonthly: Program returned code (0) and output ''
  3411. (24) datacountermonthly: Program executed successfully
  3412. (24)       [datacountermonthly] = ok
  3413. (24) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3414. (24) datacounterforever: EXPAND %{request:User-Name}
  3415. (24) datacounterforever:    --> anand
  3416. (24) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  3417. (24) datacounterforever:    --> 14312
  3418. (24) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  3419. (24) datacounterforever:    --> 6593
  3420. (24) datacounterforever: EXPAND %{request:Acct-Status-Type}
  3421. (24) datacounterforever:    --> Interim-Update
  3422. (24) datacounterforever: EXPAND %{request:Acct-Session-Id}
  3423. (24) datacounterforever:    --> d4f8574cf15bdf9b
  3424. (24) datacounterforever: Program returned code (0) and output ''
  3425. (24) datacounterforever: Program executed successfully
  3426. (24)       [datacounterforever] = ok
  3427. (24)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  3428. (24) radutmp: EXPAND /var/log/radutmp
  3429. (24) radutmp:    --> /var/log/radutmp
  3430. (24) radutmp: EXPAND %{User-Name}
  3431. (24) radutmp:    --> anand
  3432. (24)     [radutmp] = ok
  3433. rlm_counter: We only run on Accounting-Stop packets
  3434. (24)     [daily] = noop
  3435. rlm_counter: We only run on Accounting-Stop packets
  3436. (24)     [weekly] = noop
  3437. rlm_counter: We only run on Accounting-Stop packets
  3438. (24)     [monthly] = noop
  3439. rlm_counter: We only run on Accounting-Stop packets
  3440. (24)     [forever] = noop
  3441. (24)     [exec] = noop
  3442. (24) attr_filter.accounting_response: EXPAND %{User-Name}
  3443. (24) attr_filter.accounting_response:    --> anand
  3444. (24) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  3445. (24)     [attr_filter.accounting_response] = updated
  3446. (24)   } # accounting = updated
  3447. (24) Sent Accounting-Response Id 133 from 192.168.200.1:1813 to 192.168.200.1:33325 length 0
  3448. (24) Finished request
  3449. (24) Cleaning up request packet ID 133 with timestamp +210
  3450. Waking up in 4.6 seconds.
  3451. (25) Received Access-Request Id 105 from 192.168.200.1:59791 to 192.168.200.1:1812 length 160
  3452. (25)   Service-Type = Login-User
  3453. (25)   User-Name = "anand"
  3454. (25)   User-Password = "9829012834"
  3455. (25)   NAS-IP-Address = 192.168.200.1
  3456. (25)   NAS-Identifier = "CaptivePortal-office_zone"
  3457. (25)   Calling-Station-Id = "da:54:db:27:ae:2b"
  3458. (25)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3459. (25)   NAS-Port-Type = Ethernet
  3460. (25)   NAS-Port = 2004
  3461. (25)   Framed-IP-Address = 192.168.200.203
  3462. (25) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  3463. (25)   authorize {
  3464. (25)     [preprocess] = ok
  3465. (25)     [chap] = noop
  3466. (25)     [mschap] = noop
  3467. (25)     [digest] = noop
  3468. (25) suffix: Checking for suffix after "@"
  3469. (25) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3470. (25)     [suffix] = noop
  3471. (25) ntdomain: Checking for prefix before "\"
  3472. (25) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3473. (25)     [ntdomain] = noop
  3474. (25) eap: No EAP-Message, not doing EAP
  3475. (25)     [eap] = noop
  3476. (25) files: users: Matched entry DEFAULT at line 1
  3477. (25) files: users: Matched entry anand at line 4
  3478. (25)     [files] = ok
  3479. rlm_counter: Entering module authorize code
  3480. rlm_counter: Could not find Check item value pair
  3481. (25)     [daily] = noop
  3482. rlm_counter: Entering module authorize code
  3483. rlm_counter: Could not find Check item value pair
  3484. (25)     [weekly] = noop
  3485. rlm_counter: Entering module authorize code
  3486. rlm_counter: Could not find Check item value pair
  3487. (25)     [monthly] = noop
  3488. rlm_counter: Entering module authorize code
  3489. rlm_counter: Could not find Check item value pair
  3490. (25)     [forever] = noop
  3491. (25)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  3492. (25)     ERROR: Failed retrieving values required to evaluate condition
  3493. (25)     [expiration] = noop
  3494. (25)     [logintime] = noop
  3495. (25)     [pap] = updated
  3496. (25)   } # authorize = updated
  3497. (25) Found Auth-Type = PAP
  3498. (25) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  3499. (25)   Auth-Type PAP {
  3500. (25) pap: Login attempt with password
  3501. (25) pap: Comparing with "known good" Cleartext-Password
  3502. (25) pap: User authenticated successfully
  3503. (25)     [pap] = ok
  3504. (25)   } # Auth-Type PAP = ok
  3505. (25) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  3506. (25)   session {
  3507. (25) radutmp: EXPAND /var/log/radutmp
  3508. (25) radutmp:    --> /var/log/radutmp
  3509. (25) radutmp: EXPAND %{User-Name}
  3510. (25) radutmp:    --> anand
  3511. checkrad: No NAS type, or type "other" not checking
  3512. checkrad: No NAS type, or type "other" not checking
  3513. checkrad: No NAS type, or type "other" not checking
  3514. (25)     [radutmp] = fail
  3515. (25)   } # session = fail
  3516. (25) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  3517. (25)   post-auth {
  3518. (25)     update {
  3519. (25)       No attributes updated for RHS &session-state:
  3520. (25)     } # update = noop
  3521. (25)     [exec] = noop
  3522. (25)     policy remove_reply_message_if_eap {
  3523. (25)       if (&reply:EAP-Message && &reply:Reply-Message) {
  3524. (25)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  3525. (25)       else {
  3526. (25)         [noop] = noop
  3527. (25)       } # else = noop
  3528. (25)     } # policy remove_reply_message_if_eap = noop
  3529. (25)   } # post-auth = noop
  3530. (25) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  3531. (25) Sent Access-Accept Id 105 from 192.168.200.1:1812 to 192.168.200.1:59791 length 0
  3532. (25) Finished request
  3533. Waking up in 4.6 seconds.
  3534. (21) Cleaning up request packet ID 166 with timestamp +209
  3535. Waking up in 0.1 seconds.
  3536. (23) Cleaning up request packet ID 128 with timestamp +210
  3537. Waking up in 0.1 seconds.
  3538. (25) Cleaning up request packet ID 105 with timestamp +210
  3539. Ready to process requests
  3540. (26) Received Accounting-Request Id 106 from 192.168.200.1:2448 to 192.168.200.1:1813 length 214
  3541. (26)   Service-Type = Login-User
  3542. (26)   User-Name = "anand"
  3543. (26)   Acct-Status-Type = Interim-Update
  3544. (26)   Acct-Authentic = RADIUS
  3545. (26)   NAS-IP-Address = 192.168.200.1
  3546. (26)   NAS-Identifier = "CaptivePortal-office_zone"
  3547. (26)   NAS-Port-Type = Ethernet
  3548. (26)   NAS-Port = 2000
  3549. (26)   Acct-Session-Id = "874681d3614b1b36"
  3550. (26)   Framed-IP-Address = 192.168.200.201
  3551. (26)   Calling-Station-Id = "e6:8f:99:48:85:89"
  3552. (26)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3553. (26)   Acct-Input-Packets = 612
  3554. (26)   Acct-Input-Octets = 84078
  3555. (26)   Acct-Output-Packets = 719
  3556. (26)   Acct-Output-Octets = 369438
  3557. (26)   Acct-Session-Time = 251
  3558. (26)   Acct-Output-Gigawords = 0
  3559. (26)   Acct-Input-Gigawords = 0
  3560. (26) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  3561. (26)   preacct {
  3562. (26)     [preprocess] = ok
  3563. (26)     update request {
  3564. (26)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  3565. (26)          --> 1586901159
  3566. (26)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  3567. (26)     } # update request = noop
  3568. (26)     policy acct_unique {
  3569. (26)       update request {
  3570. (26)         &Tmp-String-9 := "ai:"
  3571. (26)       } # update request = noop
  3572. (26)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  3573. (26)       EXPAND %{hex:&Class}
  3574. (26)          -->
  3575. (26)       EXPAND ^%{hex:&Tmp-String-9}
  3576. (26)          --> ^61693a
  3577. (26)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  3578. (26)       else {
  3579. (26)         update request {
  3580. (26)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  3581. (26)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  3582. (26)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  3583. (26)         } # update request = noop
  3584. (26)       } # else = noop
  3585. (26)     } # policy acct_unique = noop
  3586. (26) suffix: Checking for suffix after "@"
  3587. (26) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3588. (26)     [suffix] = noop
  3589. (26) ntdomain: Checking for prefix before "\"
  3590. (26) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3591. (26)     [ntdomain] = noop
  3592. (26)     [files] = noop
  3593. (26)   } # preacct = ok
  3594. (26) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  3595. (26)   accounting {
  3596. (26) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  3597. (26) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  3598. (26) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  3599. (26) detail: EXPAND %t
  3600. (26) detail:    --> Wed Apr 15 03:26:50 2020
  3601. (26)     [detail] = ok
  3602. (26)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  3603. (26)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  3604. (26)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  3605. (26) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3606. (26) datacounterdaily: EXPAND %{request:User-Name}
  3607. (26) datacounterdaily:    --> anand
  3608. (26) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  3609. (26) datacounterdaily:    --> 84078
  3610. (26) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  3611. (26) datacounterdaily:    --> 369438
  3612. (26) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  3613. (26) datacounterdaily:    --> Interim-Update
  3614. (26) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  3615. (26) datacounterdaily:    --> 874681d3614b1b36
  3616. (26) datacounterdaily: Program returned code (0) and output ''
  3617. (26) datacounterdaily: Program executed successfully
  3618. (26)       [datacounterdaily] = ok
  3619. (26) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3620. (26) datacounterweekly: EXPAND %{request:User-Name}
  3621. (26) datacounterweekly:    --> anand
  3622. (26) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  3623. (26) datacounterweekly:    --> 84078
  3624. (26) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  3625. (26) datacounterweekly:    --> 369438
  3626. (26) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  3627. (26) datacounterweekly:    --> Interim-Update
  3628. (26) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  3629. (26) datacounterweekly:    --> 874681d3614b1b36
  3630. (26) datacounterweekly: Program returned code (0) and output ''
  3631. (26) datacounterweekly: Program executed successfully
  3632. (26)       [datacounterweekly] = ok
  3633. (26) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3634. (26) datacountermonthly: EXPAND %{request:User-Name}
  3635. (26) datacountermonthly:    --> anand
  3636. (26) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  3637. (26) datacountermonthly:    --> 84078
  3638. (26) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  3639. (26) datacountermonthly:    --> 369438
  3640. (26) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  3641. (26) datacountermonthly:    --> Interim-Update
  3642. (26) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  3643. (26) datacountermonthly:    --> 874681d3614b1b36
  3644. (26) datacountermonthly: Program returned code (0) and output ''
  3645. (26) datacountermonthly: Program executed successfully
  3646. (26)       [datacountermonthly] = ok
  3647. (26) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3648. (26) datacounterforever: EXPAND %{request:User-Name}
  3649. (26) datacounterforever:    --> anand
  3650. (26) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  3651. (26) datacounterforever:    --> 84078
  3652. (26) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  3653. (26) datacounterforever:    --> 369438
  3654. (26) datacounterforever: EXPAND %{request:Acct-Status-Type}
  3655. (26) datacounterforever:    --> Interim-Update
  3656. (26) datacounterforever: EXPAND %{request:Acct-Session-Id}
  3657. (26) datacounterforever:    --> 874681d3614b1b36
  3658. (26) datacounterforever: Program returned code (0) and output ''
  3659. (26) datacounterforever: Program executed successfully
  3660. (26)       [datacounterforever] = ok
  3661. (26)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  3662. (26) radutmp: EXPAND /var/log/radutmp
  3663. (26) radutmp:    --> /var/log/radutmp
  3664. (26) radutmp: EXPAND %{User-Name}
  3665. (26) radutmp:    --> anand
  3666. (26)     [radutmp] = ok
  3667. rlm_counter: We only run on Accounting-Stop packets
  3668. (26)     [daily] = noop
  3669. rlm_counter: We only run on Accounting-Stop packets
  3670. (26)     [weekly] = noop
  3671. rlm_counter: We only run on Accounting-Stop packets
  3672. (26)     [monthly] = noop
  3673. rlm_counter: We only run on Accounting-Stop packets
  3674. (26)     [forever] = noop
  3675. (26)     [exec] = noop
  3676. (26) attr_filter.accounting_response: EXPAND %{User-Name}
  3677. (26) attr_filter.accounting_response:    --> anand
  3678. (26) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  3679. (26)     [attr_filter.accounting_response] = updated
  3680. (26)   } # accounting = updated
  3681. (26) Sent Accounting-Response Id 106 from 192.168.200.1:1813 to 192.168.200.1:2448 length 0
  3682. (26) Finished request
  3683. (26) Cleaning up request packet ID 106 with timestamp +270
  3684. Ready to process requests
  3685. (27) Received Access-Request Id 241 from 192.168.200.1:8392 to 192.168.200.1:1812 length 160
  3686. (27)   Service-Type = Login-User
  3687. (27)   User-Name = "anand"
  3688. (27)   User-Password = "9829012834"
  3689. (27)   NAS-IP-Address = 192.168.200.1
  3690. (27)   NAS-Identifier = "CaptivePortal-office_zone"
  3691. (27)   Calling-Station-Id = "e6:8f:99:48:85:89"
  3692. (27)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3693. (27)   NAS-Port-Type = Ethernet
  3694. (27)   NAS-Port = 2000
  3695. (27)   Framed-IP-Address = 192.168.200.201
  3696. (27) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  3697. (27)   authorize {
  3698. (27)     [preprocess] = ok
  3699. (27)     [chap] = noop
  3700. (27)     [mschap] = noop
  3701. (27)     [digest] = noop
  3702. (27) suffix: Checking for suffix after "@"
  3703. (27) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3704. (27)     [suffix] = noop
  3705. (27) ntdomain: Checking for prefix before "\"
  3706. (27) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3707. (27)     [ntdomain] = noop
  3708. (27) eap: No EAP-Message, not doing EAP
  3709. (27)     [eap] = noop
  3710. (27) files: users: Matched entry DEFAULT at line 1
  3711. (27) files: users: Matched entry anand at line 4
  3712. (27)     [files] = ok
  3713. rlm_counter: Entering module authorize code
  3714. rlm_counter: Could not find Check item value pair
  3715. (27)     [daily] = noop
  3716. rlm_counter: Entering module authorize code
  3717. rlm_counter: Could not find Check item value pair
  3718. (27)     [weekly] = noop
  3719. rlm_counter: Entering module authorize code
  3720. rlm_counter: Could not find Check item value pair
  3721. (27)     [monthly] = noop
  3722. rlm_counter: Entering module authorize code
  3723. rlm_counter: Could not find Check item value pair
  3724. (27)     [forever] = noop
  3725. (27)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  3726. (27)     ERROR: Failed retrieving values required to evaluate condition
  3727. (27)     [expiration] = noop
  3728. (27)     [logintime] = noop
  3729. (27)     [pap] = updated
  3730. (27)   } # authorize = updated
  3731. (27) Found Auth-Type = PAP
  3732. (27) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  3733. (27)   Auth-Type PAP {
  3734. (27) pap: Login attempt with password
  3735. (27) pap: Comparing with "known good" Cleartext-Password
  3736. (27) pap: User authenticated successfully
  3737. (27)     [pap] = ok
  3738. (27)   } # Auth-Type PAP = ok
  3739. (27) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  3740. (27)   session {
  3741. (27) radutmp: EXPAND /var/log/radutmp
  3742. (27) radutmp:    --> /var/log/radutmp
  3743. (27) radutmp: EXPAND %{User-Name}
  3744. (27) radutmp:    --> anand
  3745. checkrad: No NAS type, or type "other" not checking
  3746. checkrad: No NAS type, or type "other" not checking
  3747. checkrad: No NAS type, or type "other" not checking
  3748. (27)     [radutmp] = fail
  3749. (27)   } # session = fail
  3750. (27) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  3751. (27)   post-auth {
  3752. (27)     update {
  3753. (27)       No attributes updated for RHS &session-state:
  3754. (27)     } # update = noop
  3755. (27)     [exec] = noop
  3756. (27)     policy remove_reply_message_if_eap {
  3757. (27)       if (&reply:EAP-Message && &reply:Reply-Message) {
  3758. (27)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  3759. (27)       else {
  3760. (27)         [noop] = noop
  3761. (27)       } # else = noop
  3762. (27)     } # policy remove_reply_message_if_eap = noop
  3763. (27)   } # post-auth = noop
  3764. (27) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  3765. (27) Sent Access-Accept Id 241 from 192.168.200.1:1812 to 192.168.200.1:8392 length 0
  3766. (27) Finished request
  3767. Waking up in 4.9 seconds.
  3768. (28) Received Accounting-Request Id 166 from 192.168.200.1:2771 to 192.168.200.1:1813 length 214
  3769. (28)   Service-Type = Login-User
  3770. (28)   User-Name = "anand"
  3771. (28)   Acct-Status-Type = Interim-Update
  3772. (28)   Acct-Authentic = RADIUS
  3773. (28)   NAS-IP-Address = 192.168.200.1
  3774. (28)   NAS-Identifier = "CaptivePortal-office_zone"
  3775. (28)   NAS-Port-Type = Ethernet
  3776. (28)   NAS-Port = 2002
  3777. (28)   Acct-Session-Id = "6974b7d556ed613e"
  3778. (28)   Framed-IP-Address = 192.168.200.202
  3779. (28)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  3780. (28)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3781. (28)   Acct-Input-Packets = 2262
  3782. (28)   Acct-Input-Octets = 684720
  3783. (28)   Acct-Output-Packets = 3863
  3784. (28)   Acct-Output-Octets = 4108625
  3785. (28)   Acct-Session-Time = 220
  3786. (28)   Acct-Output-Gigawords = 0
  3787. (28)   Acct-Input-Gigawords = 0
  3788. (28) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  3789. (28)   preacct {
  3790. (28)     [preprocess] = ok
  3791. (28)     update request {
  3792. (28)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  3793. (28)          --> 1586901190
  3794. (28)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  3795. (28)     } # update request = noop
  3796. (28)     policy acct_unique {
  3797. (28)       update request {
  3798. (28)         &Tmp-String-9 := "ai:"
  3799. (28)       } # update request = noop
  3800. (28)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  3801. (28)       EXPAND %{hex:&Class}
  3802. (28)          -->
  3803. (28)       EXPAND ^%{hex:&Tmp-String-9}
  3804. (28)          --> ^61693a
  3805. (28)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  3806. (28)       else {
  3807. (28)         update request {
  3808. (28)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  3809. (28)              --> 9a9488f2d0124a4aa7feb209bced26bb
  3810. (28)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  3811. (28)         } # update request = noop
  3812. (28)       } # else = noop
  3813. (28)     } # policy acct_unique = noop
  3814. (28) suffix: Checking for suffix after "@"
  3815. (28) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3816. (28)     [suffix] = noop
  3817. (28) ntdomain: Checking for prefix before "\"
  3818. (28) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3819. (28)     [ntdomain] = noop
  3820. (28)     [files] = noop
  3821. (28)   } # preacct = ok
  3822. (28) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  3823. (28)   accounting {
  3824. (28) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  3825. (28) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  3826. (28) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  3827. (28) detail: EXPAND %t
  3828. (28) detail:    --> Wed Apr 15 03:26:50 2020
  3829. (28)     [detail] = ok
  3830. (28)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  3831. (28)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  3832. (28)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  3833. (28) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3834. (28) datacounterdaily: EXPAND %{request:User-Name}
  3835. (28) datacounterdaily:    --> anand
  3836. (28) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  3837. (28) datacounterdaily:    --> 684720
  3838. (28) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  3839. (28) datacounterdaily:    --> 4108625
  3840. (28) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  3841. (28) datacounterdaily:    --> Interim-Update
  3842. (28) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  3843. (28) datacounterdaily:    --> 6974b7d556ed613e
  3844. (28) datacounterdaily: Program returned code (0) and output ''
  3845. (28) datacounterdaily: Program executed successfully
  3846. (28)       [datacounterdaily] = ok
  3847. (28) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3848. (28) datacounterweekly: EXPAND %{request:User-Name}
  3849. (28) datacounterweekly:    --> anand
  3850. (28) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  3851. (28) datacounterweekly:    --> 684720
  3852. (28) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  3853. (28) datacounterweekly:    --> 4108625
  3854. (28) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  3855. (28) datacounterweekly:    --> Interim-Update
  3856. (28) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  3857. (28) datacounterweekly:    --> 6974b7d556ed613e
  3858. (28) datacounterweekly: Program returned code (0) and output ''
  3859. (28) datacounterweekly: Program executed successfully
  3860. (28)       [datacounterweekly] = ok
  3861. (28) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3862. (28) datacountermonthly: EXPAND %{request:User-Name}
  3863. (28) datacountermonthly:    --> anand
  3864. (28) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  3865. (28) datacountermonthly:    --> 684720
  3866. (28) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  3867. (28) datacountermonthly:    --> 4108625
  3868. (28) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  3869. (28) datacountermonthly:    --> Interim-Update
  3870. (28) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  3871. (28) datacountermonthly:    --> 6974b7d556ed613e
  3872. (28) datacountermonthly: Program returned code (0) and output ''
  3873. (28) datacountermonthly: Program executed successfully
  3874. (28)       [datacountermonthly] = ok
  3875. (28) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  3876. (28) datacounterforever: EXPAND %{request:User-Name}
  3877. (28) datacounterforever:    --> anand
  3878. (28) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  3879. (28) datacounterforever:    --> 684720
  3880. (28) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  3881. (28) datacounterforever:    --> 4108625
  3882. (28) datacounterforever: EXPAND %{request:Acct-Status-Type}
  3883. (28) datacounterforever:    --> Interim-Update
  3884. (28) datacounterforever: EXPAND %{request:Acct-Session-Id}
  3885. (28) datacounterforever:    --> 6974b7d556ed613e
  3886. (28) datacounterforever: Program returned code (0) and output ''
  3887. (28) datacounterforever: Program executed successfully
  3888. (28)       [datacounterforever] = ok
  3889. (28)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  3890. (28) radutmp: EXPAND /var/log/radutmp
  3891. (28) radutmp:    --> /var/log/radutmp
  3892. (28) radutmp: EXPAND %{User-Name}
  3893. (28) radutmp:    --> anand
  3894. (28)     [radutmp] = ok
  3895. rlm_counter: We only run on Accounting-Stop packets
  3896. (28)     [daily] = noop
  3897. rlm_counter: We only run on Accounting-Stop packets
  3898. (28)     [weekly] = noop
  3899. rlm_counter: We only run on Accounting-Stop packets
  3900. (28)     [monthly] = noop
  3901. rlm_counter: We only run on Accounting-Stop packets
  3902. (28)     [forever] = noop
  3903. (28)     [exec] = noop
  3904. (28) attr_filter.accounting_response: EXPAND %{User-Name}
  3905. (28) attr_filter.accounting_response:    --> anand
  3906. (28) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  3907. (28)     [attr_filter.accounting_response] = updated
  3908. (28)   } # accounting = updated
  3909. (28) Sent Accounting-Response Id 166 from 192.168.200.1:1813 to 192.168.200.1:2771 length 0
  3910. (28) Finished request
  3911. (28) Cleaning up request packet ID 166 with timestamp +270
  3912. Waking up in 4.9 seconds.
  3913. (29) Received Access-Request Id 121 from 192.168.200.1:31589 to 192.168.200.1:1812 length 160
  3914. (29)   Service-Type = Login-User
  3915. (29)   User-Name = "anand"
  3916. (29)   User-Password = "9829012834"
  3917. (29)   NAS-IP-Address = 192.168.200.1
  3918. (29)   NAS-Identifier = "CaptivePortal-office_zone"
  3919. (29)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  3920. (29)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  3921. (29)   NAS-Port-Type = Ethernet
  3922. (29)   NAS-Port = 2002
  3923. (29)   Framed-IP-Address = 192.168.200.202
  3924. (29) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  3925. (29)   authorize {
  3926. (29)     [preprocess] = ok
  3927. (29)     [chap] = noop
  3928. (29)     [mschap] = noop
  3929. (29)     [digest] = noop
  3930. (29) suffix: Checking for suffix after "@"
  3931. (29) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  3932. (29)     [suffix] = noop
  3933. (29) ntdomain: Checking for prefix before "\"
  3934. (29) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  3935. (29)     [ntdomain] = noop
  3936. (29) eap: No EAP-Message, not doing EAP
  3937. (29)     [eap] = noop
  3938. (29) files: users: Matched entry DEFAULT at line 1
  3939. (29) files: users: Matched entry anand at line 4
  3940. (29)     [files] = ok
  3941. rlm_counter: Entering module authorize code
  3942. rlm_counter: Could not find Check item value pair
  3943. (29)     [daily] = noop
  3944. rlm_counter: Entering module authorize code
  3945. rlm_counter: Could not find Check item value pair
  3946. (29)     [weekly] = noop
  3947. rlm_counter: Entering module authorize code
  3948. rlm_counter: Could not find Check item value pair
  3949. (29)     [monthly] = noop
  3950. rlm_counter: Entering module authorize code
  3951. rlm_counter: Could not find Check item value pair
  3952. (29)     [forever] = noop
  3953. (29)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  3954. (29)     ERROR: Failed retrieving values required to evaluate condition
  3955. (29)     [expiration] = noop
  3956. (29)     [logintime] = noop
  3957. (29)     [pap] = updated
  3958. (29)   } # authorize = updated
  3959. (29) Found Auth-Type = PAP
  3960. (29) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  3961. (29)   Auth-Type PAP {
  3962. (29) pap: Login attempt with password
  3963. (29) pap: Comparing with "known good" Cleartext-Password
  3964. (29) pap: User authenticated successfully
  3965. (29)     [pap] = ok
  3966. (29)   } # Auth-Type PAP = ok
  3967. (29) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  3968. (29)   session {
  3969. (29) radutmp: EXPAND /var/log/radutmp
  3970. (29) radutmp:    --> /var/log/radutmp
  3971. (29) radutmp: EXPAND %{User-Name}
  3972. (29) radutmp:    --> anand
  3973. checkrad: No NAS type, or type "other" not checking
  3974. checkrad: No NAS type, or type "other" not checking
  3975. checkrad: No NAS type, or type "other" not checking
  3976. (29)     [radutmp] = fail
  3977. (29)   } # session = fail
  3978. (29) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  3979. (29)   post-auth {
  3980. (29)     update {
  3981. (29)       No attributes updated for RHS &session-state:
  3982. (29)     } # update = noop
  3983. (29)     [exec] = noop
  3984. (29)     policy remove_reply_message_if_eap {
  3985. (29)       if (&reply:EAP-Message && &reply:Reply-Message) {
  3986. (29)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  3987. (29)       else {
  3988. (29)         [noop] = noop
  3989. (29)       } # else = noop
  3990. (29)     } # policy remove_reply_message_if_eap = noop
  3991. (29)   } # post-auth = noop
  3992. (29) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  3993. (29) Sent Access-Accept Id 121 from 192.168.200.1:1812 to 192.168.200.1:31589 length 0
  3994. (29) Finished request
  3995. Waking up in 4.9 seconds.
  3996. (30) Received Accounting-Request Id 188 from 192.168.200.1:36742 to 192.168.200.1:1813 length 214
  3997. (30)   Service-Type = Login-User
  3998. (30)   User-Name = "anand"
  3999. (30)   Acct-Status-Type = Interim-Update
  4000. (30)   Acct-Authentic = RADIUS
  4001. (30)   NAS-IP-Address = 192.168.200.1
  4002. (30)   NAS-Identifier = "CaptivePortal-office_zone"
  4003. (30)   NAS-Port-Type = Ethernet
  4004. (30)   NAS-Port = 2004
  4005. (30)   Acct-Session-Id = "d4f8574cf15bdf9b"
  4006. (30)   Framed-IP-Address = 192.168.200.203
  4007. (30)   Calling-Station-Id = "da:54:db:27:ae:2b"
  4008. (30)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4009. (30)   Acct-Input-Packets = 45
  4010. (30)   Acct-Input-Octets = 14312
  4011. (30)   Acct-Output-Packets = 33
  4012. (30)   Acct-Output-Octets = 6633
  4013. (30)   Acct-Session-Time = 207
  4014. (30)   Acct-Output-Gigawords = 0
  4015. (30)   Acct-Input-Gigawords = 0
  4016. (30) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  4017. (30)   preacct {
  4018. (30)     [preprocess] = ok
  4019. (30)     update request {
  4020. (30)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  4021. (30)          --> 1586901203
  4022. (30)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  4023. (30)     } # update request = noop
  4024. (30)     policy acct_unique {
  4025. (30)       update request {
  4026. (30)         &Tmp-String-9 := "ai:"
  4027. (30)       } # update request = noop
  4028. (30)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  4029. (30)       EXPAND %{hex:&Class}
  4030. (30)          -->
  4031. (30)       EXPAND ^%{hex:&Tmp-String-9}
  4032. (30)          --> ^61693a
  4033. (30)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  4034. (30)       else {
  4035. (30)         update request {
  4036. (30)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  4037. (30)              --> 8540a37c864a86b96f7917819f3d70c9
  4038. (30)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  4039. (30)         } # update request = noop
  4040. (30)       } # else = noop
  4041. (30)     } # policy acct_unique = noop
  4042. (30) suffix: Checking for suffix after "@"
  4043. (30) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4044. (30)     [suffix] = noop
  4045. (30) ntdomain: Checking for prefix before "\"
  4046. (30) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4047. (30)     [ntdomain] = noop
  4048. (30)     [files] = noop
  4049. (30)   } # preacct = ok
  4050. (30) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  4051. (30)   accounting {
  4052. (30) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  4053. (30) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  4054. (30) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  4055. (30) detail: EXPAND %t
  4056. (30) detail:    --> Wed Apr 15 03:26:50 2020
  4057. (30)     [detail] = ok
  4058. (30)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  4059. (30)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  4060. (30)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  4061. (30) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4062. (30) datacounterdaily: EXPAND %{request:User-Name}
  4063. (30) datacounterdaily:    --> anand
  4064. (30) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  4065. (30) datacounterdaily:    --> 14312
  4066. (30) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  4067. (30) datacounterdaily:    --> 6633
  4068. (30) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  4069. (30) datacounterdaily:    --> Interim-Update
  4070. (30) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  4071. (30) datacounterdaily:    --> d4f8574cf15bdf9b
  4072. (30) datacounterdaily: Program returned code (0) and output ''
  4073. (30) datacounterdaily: Program executed successfully
  4074. (30)       [datacounterdaily] = ok
  4075. (30) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4076. (30) datacounterweekly: EXPAND %{request:User-Name}
  4077. (30) datacounterweekly:    --> anand
  4078. (30) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  4079. (30) datacounterweekly:    --> 14312
  4080. (30) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  4081. (30) datacounterweekly:    --> 6633
  4082. (30) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  4083. (30) datacounterweekly:    --> Interim-Update
  4084. (30) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  4085. (30) datacounterweekly:    --> d4f8574cf15bdf9b
  4086. (30) datacounterweekly: Program returned code (0) and output ''
  4087. (30) datacounterweekly: Program executed successfully
  4088. (30)       [datacounterweekly] = ok
  4089. (30) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4090. (30) datacountermonthly: EXPAND %{request:User-Name}
  4091. (30) datacountermonthly:    --> anand
  4092. (30) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  4093. (30) datacountermonthly:    --> 14312
  4094. (30) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  4095. (30) datacountermonthly:    --> 6633
  4096. (30) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  4097. (30) datacountermonthly:    --> Interim-Update
  4098. (30) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  4099. (30) datacountermonthly:    --> d4f8574cf15bdf9b
  4100. (30) datacountermonthly: Program returned code (0) and output ''
  4101. (30) datacountermonthly: Program executed successfully
  4102. (30)       [datacountermonthly] = ok
  4103. (30) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4104. (30) datacounterforever: EXPAND %{request:User-Name}
  4105. (30) datacounterforever:    --> anand
  4106. (30) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  4107. (30) datacounterforever:    --> 14312
  4108. (30) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  4109. (30) datacounterforever:    --> 6633
  4110. (30) datacounterforever: EXPAND %{request:Acct-Status-Type}
  4111. (30) datacounterforever:    --> Interim-Update
  4112. (30) datacounterforever: EXPAND %{request:Acct-Session-Id}
  4113. (30) datacounterforever:    --> d4f8574cf15bdf9b
  4114. (30) datacounterforever: Program returned code (0) and output ''
  4115. (30) datacounterforever: Program executed successfully
  4116. (30)       [datacounterforever] = ok
  4117. (30)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  4118. (30) radutmp: EXPAND /var/log/radutmp
  4119. (30) radutmp:    --> /var/log/radutmp
  4120. (30) radutmp: EXPAND %{User-Name}
  4121. (30) radutmp:    --> anand
  4122. (30)     [radutmp] = ok
  4123. rlm_counter: We only run on Accounting-Stop packets
  4124. (30)     [daily] = noop
  4125. rlm_counter: We only run on Accounting-Stop packets
  4126. (30)     [weekly] = noop
  4127. rlm_counter: We only run on Accounting-Stop packets
  4128. (30)     [monthly] = noop
  4129. rlm_counter: We only run on Accounting-Stop packets
  4130. (30)     [forever] = noop
  4131. (30)     [exec] = noop
  4132. (30) attr_filter.accounting_response: EXPAND %{User-Name}
  4133. (30) attr_filter.accounting_response:    --> anand
  4134. (30) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  4135. (30)     [attr_filter.accounting_response] = updated
  4136. (30)   } # accounting = updated
  4137. (30) Sent Accounting-Response Id 188 from 192.168.200.1:1813 to 192.168.200.1:36742 length 0
  4138. (30) Finished request
  4139. (30) Cleaning up request packet ID 188 with timestamp +270
  4140. Waking up in 4.8 seconds.
  4141. (31) Received Access-Request Id 183 from 192.168.200.1:36053 to 192.168.200.1:1812 length 160
  4142. (31)   Service-Type = Login-User
  4143. (31)   User-Name = "anand"
  4144. (31)   User-Password = "9829012834"
  4145. (31)   NAS-IP-Address = 192.168.200.1
  4146. (31)   NAS-Identifier = "CaptivePortal-office_zone"
  4147. (31)   Calling-Station-Id = "da:54:db:27:ae:2b"
  4148. (31)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4149. (31)   NAS-Port-Type = Ethernet
  4150. (31)   NAS-Port = 2004
  4151. (31)   Framed-IP-Address = 192.168.200.203
  4152. (31) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  4153. (31)   authorize {
  4154. (31)     [preprocess] = ok
  4155. (31)     [chap] = noop
  4156. (31)     [mschap] = noop
  4157. (31)     [digest] = noop
  4158. (31) suffix: Checking for suffix after "@"
  4159. (31) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4160. (31)     [suffix] = noop
  4161. (31) ntdomain: Checking for prefix before "\"
  4162. (31) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4163. (31)     [ntdomain] = noop
  4164. (31) eap: No EAP-Message, not doing EAP
  4165. (31)     [eap] = noop
  4166. (31) files: users: Matched entry DEFAULT at line 1
  4167. (31) files: users: Matched entry anand at line 4
  4168. (31)     [files] = ok
  4169. rlm_counter: Entering module authorize code
  4170. rlm_counter: Could not find Check item value pair
  4171. (31)     [daily] = noop
  4172. rlm_counter: Entering module authorize code
  4173. rlm_counter: Could not find Check item value pair
  4174. (31)     [weekly] = noop
  4175. rlm_counter: Entering module authorize code
  4176. rlm_counter: Could not find Check item value pair
  4177. (31)     [monthly] = noop
  4178. rlm_counter: Entering module authorize code
  4179. rlm_counter: Could not find Check item value pair
  4180. (31)     [forever] = noop
  4181. (31)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  4182. (31)     ERROR: Failed retrieving values required to evaluate condition
  4183. (31)     [expiration] = noop
  4184. (31)     [logintime] = noop
  4185. (31)     [pap] = updated
  4186. (31)   } # authorize = updated
  4187. (31) Found Auth-Type = PAP
  4188. (31) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  4189. (31)   Auth-Type PAP {
  4190. (31) pap: Login attempt with password
  4191. (31) pap: Comparing with "known good" Cleartext-Password
  4192. (31) pap: User authenticated successfully
  4193. (31)     [pap] = ok
  4194. (31)   } # Auth-Type PAP = ok
  4195. (31) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  4196. (31)   session {
  4197. (31) radutmp: EXPAND /var/log/radutmp
  4198. (31) radutmp:    --> /var/log/radutmp
  4199. (31) radutmp: EXPAND %{User-Name}
  4200. (31) radutmp:    --> anand
  4201. checkrad: No NAS type, or type "other" not checking
  4202. checkrad: No NAS type, or type "other" not checking
  4203. checkrad: No NAS type, or type "other" not checking
  4204. (31)     [radutmp] = fail
  4205. (31)   } # session = fail
  4206. (31) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  4207. (31)   post-auth {
  4208. (31)     update {
  4209. (31)       No attributes updated for RHS &session-state:
  4210. (31)     } # update = noop
  4211. (31)     [exec] = noop
  4212. (31)     policy remove_reply_message_if_eap {
  4213. (31)       if (&reply:EAP-Message && &reply:Reply-Message) {
  4214. (31)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  4215. (31)       else {
  4216. (31)         [noop] = noop
  4217. (31)       } # else = noop
  4218. (31)     } # policy remove_reply_message_if_eap = noop
  4219. (31)   } # post-auth = noop
  4220. (31) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  4221. (31) Sent Access-Accept Id 183 from 192.168.200.1:1812 to 192.168.200.1:36053 length 0
  4222. (31) Finished request
  4223. Waking up in 4.8 seconds.
  4224. (27) Cleaning up request packet ID 241 with timestamp +270
  4225. (29) Cleaning up request packet ID 121 with timestamp +270
  4226. (31) Cleaning up request packet ID 183 with timestamp +271
  4227. Ready to process requests
  4228. (32) Received Accounting-Request Id 134 from 192.168.200.1:10322 to 192.168.200.1:1813 length 214
  4229. (32)   Service-Type = Login-User
  4230. (32)   User-Name = "anand"
  4231. (32)   Acct-Status-Type = Interim-Update
  4232. (32)   Acct-Authentic = RADIUS
  4233. (32)   NAS-IP-Address = 192.168.200.1
  4234. (32)   NAS-Identifier = "CaptivePortal-office_zone"
  4235. (32)   NAS-Port-Type = Ethernet
  4236. (32)   NAS-Port = 2000
  4237. (32)   Acct-Session-Id = "874681d3614b1b36"
  4238. (32)   Framed-IP-Address = 192.168.200.201
  4239. (32)   Calling-Station-Id = "e6:8f:99:48:85:89"
  4240. (32)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4241. (32)   Acct-Input-Packets = 626
  4242. (32)   Acct-Input-Octets = 85247
  4243. (32)   Acct-Output-Packets = 733
  4244. (32)   Acct-Output-Octets = 370886
  4245. (32)   Acct-Session-Time = 312
  4246. (32)   Acct-Output-Gigawords = 0
  4247. (32)   Acct-Input-Gigawords = 0
  4248. (32) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  4249. (32)   preacct {
  4250. (32)     [preprocess] = ok
  4251. (32)     update request {
  4252. (32)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  4253. (32)          --> 1586901159
  4254. (32)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  4255. (32)     } # update request = noop
  4256. (32)     policy acct_unique {
  4257. (32)       update request {
  4258. (32)         &Tmp-String-9 := "ai:"
  4259. (32)       } # update request = noop
  4260. (32)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  4261. (32)       EXPAND %{hex:&Class}
  4262. (32)          -->
  4263. (32)       EXPAND ^%{hex:&Tmp-String-9}
  4264. (32)          --> ^61693a
  4265. (32)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  4266. (32)       else {
  4267. (32)         update request {
  4268. (32)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  4269. (32)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  4270. (32)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  4271. (32)         } # update request = noop
  4272. (32)       } # else = noop
  4273. (32)     } # policy acct_unique = noop
  4274. (32) suffix: Checking for suffix after "@"
  4275. (32) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4276. (32)     [suffix] = noop
  4277. (32) ntdomain: Checking for prefix before "\"
  4278. (32) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4279. (32)     [ntdomain] = noop
  4280. (32)     [files] = noop
  4281. (32)   } # preacct = ok
  4282. (32) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  4283. (32)   accounting {
  4284. (32) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  4285. (32) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  4286. (32) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  4287. (32) detail: EXPAND %t
  4288. (32) detail:    --> Wed Apr 15 03:27:51 2020
  4289. (32)     [detail] = ok
  4290. (32)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  4291. (32)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  4292. (32)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  4293. (32) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4294. (32) datacounterdaily: EXPAND %{request:User-Name}
  4295. (32) datacounterdaily:    --> anand
  4296. (32) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  4297. (32) datacounterdaily:    --> 85247
  4298. (32) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  4299. (32) datacounterdaily:    --> 370886
  4300. (32) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  4301. (32) datacounterdaily:    --> Interim-Update
  4302. (32) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  4303. (32) datacounterdaily:    --> 874681d3614b1b36
  4304. (32) datacounterdaily: Program returned code (0) and output ''
  4305. (32) datacounterdaily: Program executed successfully
  4306. (32)       [datacounterdaily] = ok
  4307. (32) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4308. (32) datacounterweekly: EXPAND %{request:User-Name}
  4309. (32) datacounterweekly:    --> anand
  4310. (32) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  4311. (32) datacounterweekly:    --> 85247
  4312. (32) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  4313. (32) datacounterweekly:    --> 370886
  4314. (32) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  4315. (32) datacounterweekly:    --> Interim-Update
  4316. (32) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  4317. (32) datacounterweekly:    --> 874681d3614b1b36
  4318. (32) datacounterweekly: Program returned code (0) and output ''
  4319. (32) datacounterweekly: Program executed successfully
  4320. (32)       [datacounterweekly] = ok
  4321. (32) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4322. (32) datacountermonthly: EXPAND %{request:User-Name}
  4323. (32) datacountermonthly:    --> anand
  4324. (32) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  4325. (32) datacountermonthly:    --> 85247
  4326. (32) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  4327. (32) datacountermonthly:    --> 370886
  4328. (32) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  4329. (32) datacountermonthly:    --> Interim-Update
  4330. (32) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  4331. (32) datacountermonthly:    --> 874681d3614b1b36
  4332. (32) datacountermonthly: Program returned code (0) and output ''
  4333. (32) datacountermonthly: Program executed successfully
  4334. (32)       [datacountermonthly] = ok
  4335. (32) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4336. (32) datacounterforever: EXPAND %{request:User-Name}
  4337. (32) datacounterforever:    --> anand
  4338. (32) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  4339. (32) datacounterforever:    --> 85247
  4340. (32) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  4341. (32) datacounterforever:    --> 370886
  4342. (32) datacounterforever: EXPAND %{request:Acct-Status-Type}
  4343. (32) datacounterforever:    --> Interim-Update
  4344. (32) datacounterforever: EXPAND %{request:Acct-Session-Id}
  4345. (32) datacounterforever:    --> 874681d3614b1b36
  4346. (32) datacounterforever: Program returned code (0) and output ''
  4347. (32) datacounterforever: Program executed successfully
  4348. (32)       [datacounterforever] = ok
  4349. (32)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  4350. (32) radutmp: EXPAND /var/log/radutmp
  4351. (32) radutmp:    --> /var/log/radutmp
  4352. (32) radutmp: EXPAND %{User-Name}
  4353. (32) radutmp:    --> anand
  4354. (32)     [radutmp] = ok
  4355. rlm_counter: We only run on Accounting-Stop packets
  4356. (32)     [daily] = noop
  4357. rlm_counter: We only run on Accounting-Stop packets
  4358. (32)     [weekly] = noop
  4359. rlm_counter: We only run on Accounting-Stop packets
  4360. (32)     [monthly] = noop
  4361. rlm_counter: We only run on Accounting-Stop packets
  4362. (32)     [forever] = noop
  4363. (32)     [exec] = noop
  4364. (32) attr_filter.accounting_response: EXPAND %{User-Name}
  4365. (32) attr_filter.accounting_response:    --> anand
  4366. (32) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  4367. (32)     [attr_filter.accounting_response] = updated
  4368. (32)   } # accounting = updated
  4369. (32) Sent Accounting-Response Id 134 from 192.168.200.1:1813 to 192.168.200.1:10322 length 0
  4370. (32) Finished request
  4371. (32) Cleaning up request packet ID 134 with timestamp +331
  4372. Ready to process requests
  4373. (33) Received Access-Request Id 49 from 192.168.200.1:31470 to 192.168.200.1:1812 length 160
  4374. (33)   Service-Type = Login-User
  4375. (33)   User-Name = "anand"
  4376. (33)   User-Password = "9829012834"
  4377. (33)   NAS-IP-Address = 192.168.200.1
  4378. (33)   NAS-Identifier = "CaptivePortal-office_zone"
  4379. (33)   Calling-Station-Id = "e6:8f:99:48:85:89"
  4380. (33)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4381. (33)   NAS-Port-Type = Ethernet
  4382. (33)   NAS-Port = 2000
  4383. (33)   Framed-IP-Address = 192.168.200.201
  4384. (33) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  4385. (33)   authorize {
  4386. (33)     [preprocess] = ok
  4387. (33)     [chap] = noop
  4388. (33)     [mschap] = noop
  4389. (33)     [digest] = noop
  4390. (33) suffix: Checking for suffix after "@"
  4391. (33) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4392. (33)     [suffix] = noop
  4393. (33) ntdomain: Checking for prefix before "\"
  4394. (33) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4395. (33)     [ntdomain] = noop
  4396. (33) eap: No EAP-Message, not doing EAP
  4397. (33)     [eap] = noop
  4398. (33) files: users: Matched entry DEFAULT at line 1
  4399. (33) files: users: Matched entry anand at line 4
  4400. (33)     [files] = ok
  4401. rlm_counter: Entering module authorize code
  4402. rlm_counter: Could not find Check item value pair
  4403. (33)     [daily] = noop
  4404. rlm_counter: Entering module authorize code
  4405. rlm_counter: Could not find Check item value pair
  4406. (33)     [weekly] = noop
  4407. rlm_counter: Entering module authorize code
  4408. rlm_counter: Could not find Check item value pair
  4409. (33)     [monthly] = noop
  4410. rlm_counter: Entering module authorize code
  4411. rlm_counter: Could not find Check item value pair
  4412. (33)     [forever] = noop
  4413. (33)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  4414. (33)     ERROR: Failed retrieving values required to evaluate condition
  4415. (33)     [expiration] = noop
  4416. (33)     [logintime] = noop
  4417. (33)     [pap] = updated
  4418. (33)   } # authorize = updated
  4419. (33) Found Auth-Type = PAP
  4420. (33) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  4421. (33)   Auth-Type PAP {
  4422. (33) pap: Login attempt with password
  4423. (33) pap: Comparing with "known good" Cleartext-Password
  4424. (33) pap: User authenticated successfully
  4425. (33)     [pap] = ok
  4426. (33)   } # Auth-Type PAP = ok
  4427. (33) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  4428. (33)   session {
  4429. (33) radutmp: EXPAND /var/log/radutmp
  4430. (33) radutmp:    --> /var/log/radutmp
  4431. (33) radutmp: EXPAND %{User-Name}
  4432. (33) radutmp:    --> anand
  4433. checkrad: No NAS type, or type "other" not checking
  4434. checkrad: No NAS type, or type "other" not checking
  4435. checkrad: No NAS type, or type "other" not checking
  4436. (33)     [radutmp] = fail
  4437. (33)   } # session = fail
  4438. (33) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  4439. (33)   post-auth {
  4440. (33)     update {
  4441. (33)       No attributes updated for RHS &session-state:
  4442. (33)     } # update = noop
  4443. (33)     [exec] = noop
  4444. (33)     policy remove_reply_message_if_eap {
  4445. (33)       if (&reply:EAP-Message && &reply:Reply-Message) {
  4446. (33)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  4447. (33)       else {
  4448. (33)         [noop] = noop
  4449. (33)       } # else = noop
  4450. (33)     } # policy remove_reply_message_if_eap = noop
  4451. (33)   } # post-auth = noop
  4452. (33) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  4453. (33) Sent Access-Accept Id 49 from 192.168.200.1:1812 to 192.168.200.1:31470 length 0
  4454. (33) Finished request
  4455. Waking up in 4.9 seconds.
  4456. (34) Received Accounting-Request Id 186 from 192.168.200.1:52030 to 192.168.200.1:1813 length 214
  4457. (34)   Service-Type = Login-User
  4458. (34)   User-Name = "anand"
  4459. (34)   Acct-Status-Type = Interim-Update
  4460. (34)   Acct-Authentic = RADIUS
  4461. (34)   NAS-IP-Address = 192.168.200.1
  4462. (34)   NAS-Identifier = "CaptivePortal-office_zone"
  4463. (34)   NAS-Port-Type = Ethernet
  4464. (34)   NAS-Port = 2002
  4465. (34)   Acct-Session-Id = "6974b7d556ed613e"
  4466. (34)   Framed-IP-Address = 192.168.200.202
  4467. (34)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  4468. (34)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4469. (34)   Acct-Input-Packets = 2398
  4470. (34)   Acct-Input-Octets = 702589
  4471. (34)   Acct-Output-Packets = 4005
  4472. (34)   Acct-Output-Octets = 4129498
  4473. (34)   Acct-Session-Time = 281
  4474. (34)   Acct-Output-Gigawords = 0
  4475. (34)   Acct-Input-Gigawords = 0
  4476. (34) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  4477. (34)   preacct {
  4478. (34)     [preprocess] = ok
  4479. (34)     update request {
  4480. (34)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  4481. (34)          --> 1586901190
  4482. (34)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  4483. (34)     } # update request = noop
  4484. (34)     policy acct_unique {
  4485. (34)       update request {
  4486. (34)         &Tmp-String-9 := "ai:"
  4487. (34)       } # update request = noop
  4488. (34)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  4489. (34)       EXPAND %{hex:&Class}
  4490. (34)          -->
  4491. (34)       EXPAND ^%{hex:&Tmp-String-9}
  4492. (34)          --> ^61693a
  4493. (34)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  4494. (34)       else {
  4495. (34)         update request {
  4496. (34)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  4497. (34)              --> 9a9488f2d0124a4aa7feb209bced26bb
  4498. (34)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  4499. (34)         } # update request = noop
  4500. (34)       } # else = noop
  4501. (34)     } # policy acct_unique = noop
  4502. (34) suffix: Checking for suffix after "@"
  4503. (34) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4504. (34)     [suffix] = noop
  4505. (34) ntdomain: Checking for prefix before "\"
  4506. (34) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4507. (34)     [ntdomain] = noop
  4508. (34)     [files] = noop
  4509. (34)   } # preacct = ok
  4510. (34) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  4511. (34)   accounting {
  4512. (34) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  4513. (34) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  4514. (34) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  4515. (34) detail: EXPAND %t
  4516. (34) detail:    --> Wed Apr 15 03:27:51 2020
  4517. (34)     [detail] = ok
  4518. (34)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  4519. (34)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  4520. (34)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  4521. (34) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4522. (34) datacounterdaily: EXPAND %{request:User-Name}
  4523. (34) datacounterdaily:    --> anand
  4524. (34) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  4525. (34) datacounterdaily:    --> 702589
  4526. (34) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  4527. (34) datacounterdaily:    --> 4129498
  4528. (34) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  4529. (34) datacounterdaily:    --> Interim-Update
  4530. (34) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  4531. (34) datacounterdaily:    --> 6974b7d556ed613e
  4532. (34) datacounterdaily: Program returned code (0) and output ''
  4533. (34) datacounterdaily: Program executed successfully
  4534. (34)       [datacounterdaily] = ok
  4535. (34) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4536. (34) datacounterweekly: EXPAND %{request:User-Name}
  4537. (34) datacounterweekly:    --> anand
  4538. (34) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  4539. (34) datacounterweekly:    --> 702589
  4540. (34) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  4541. (34) datacounterweekly:    --> 4129498
  4542. (34) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  4543. (34) datacounterweekly:    --> Interim-Update
  4544. (34) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  4545. (34) datacounterweekly:    --> 6974b7d556ed613e
  4546. (34) datacounterweekly: Program returned code (0) and output ''
  4547. (34) datacounterweekly: Program executed successfully
  4548. (34)       [datacounterweekly] = ok
  4549. (34) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4550. (34) datacountermonthly: EXPAND %{request:User-Name}
  4551. (34) datacountermonthly:    --> anand
  4552. (34) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  4553. (34) datacountermonthly:    --> 702589
  4554. (34) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  4555. (34) datacountermonthly:    --> 4129498
  4556. (34) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  4557. (34) datacountermonthly:    --> Interim-Update
  4558. (34) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  4559. (34) datacountermonthly:    --> 6974b7d556ed613e
  4560. (34) datacountermonthly: Program returned code (0) and output ''
  4561. (34) datacountermonthly: Program executed successfully
  4562. (34)       [datacountermonthly] = ok
  4563. (34) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4564. (34) datacounterforever: EXPAND %{request:User-Name}
  4565. (34) datacounterforever:    --> anand
  4566. (34) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  4567. (34) datacounterforever:    --> 702589
  4568. (34) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  4569. (34) datacounterforever:    --> 4129498
  4570. (34) datacounterforever: EXPAND %{request:Acct-Status-Type}
  4571. (34) datacounterforever:    --> Interim-Update
  4572. (34) datacounterforever: EXPAND %{request:Acct-Session-Id}
  4573. (34) datacounterforever:    --> 6974b7d556ed613e
  4574. (34) datacounterforever: Program returned code (0) and output ''
  4575. (34) datacounterforever: Program executed successfully
  4576. (34)       [datacounterforever] = ok
  4577. (34)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  4578. (34) radutmp: EXPAND /var/log/radutmp
  4579. (34) radutmp:    --> /var/log/radutmp
  4580. (34) radutmp: EXPAND %{User-Name}
  4581. (34) radutmp:    --> anand
  4582. (34)     [radutmp] = ok
  4583. rlm_counter: We only run on Accounting-Stop packets
  4584. (34)     [daily] = noop
  4585. rlm_counter: We only run on Accounting-Stop packets
  4586. (34)     [weekly] = noop
  4587. rlm_counter: We only run on Accounting-Stop packets
  4588. (34)     [monthly] = noop
  4589. rlm_counter: We only run on Accounting-Stop packets
  4590. (34)     [forever] = noop
  4591. (34)     [exec] = noop
  4592. (34) attr_filter.accounting_response: EXPAND %{User-Name}
  4593. (34) attr_filter.accounting_response:    --> anand
  4594. (34) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  4595. (34)     [attr_filter.accounting_response] = updated
  4596. (34)   } # accounting = updated
  4597. (34) Sent Accounting-Response Id 186 from 192.168.200.1:1813 to 192.168.200.1:52030 length 0
  4598. (34) Finished request
  4599. (34) Cleaning up request packet ID 186 with timestamp +331
  4600. Waking up in 4.8 seconds.
  4601. (35) Received Access-Request Id 144 from 192.168.200.1:30286 to 192.168.200.1:1812 length 160
  4602. (35)   Service-Type = Login-User
  4603. (35)   User-Name = "anand"
  4604. (35)   User-Password = "9829012834"
  4605. (35)   NAS-IP-Address = 192.168.200.1
  4606. (35)   NAS-Identifier = "CaptivePortal-office_zone"
  4607. (35)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  4608. (35)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4609. (35)   NAS-Port-Type = Ethernet
  4610. (35)   NAS-Port = 2002
  4611. (35)   Framed-IP-Address = 192.168.200.202
  4612. (35) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  4613. (35)   authorize {
  4614. (35)     [preprocess] = ok
  4615. (35)     [chap] = noop
  4616. (35)     [mschap] = noop
  4617. (35)     [digest] = noop
  4618. (35) suffix: Checking for suffix after "@"
  4619. (35) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4620. (35)     [suffix] = noop
  4621. (35) ntdomain: Checking for prefix before "\"
  4622. (35) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4623. (35)     [ntdomain] = noop
  4624. (35) eap: No EAP-Message, not doing EAP
  4625. (35)     [eap] = noop
  4626. (35) files: users: Matched entry DEFAULT at line 1
  4627. (35) files: users: Matched entry anand at line 4
  4628. (35)     [files] = ok
  4629. rlm_counter: Entering module authorize code
  4630. rlm_counter: Could not find Check item value pair
  4631. (35)     [daily] = noop
  4632. rlm_counter: Entering module authorize code
  4633. rlm_counter: Could not find Check item value pair
  4634. (35)     [weekly] = noop
  4635. rlm_counter: Entering module authorize code
  4636. rlm_counter: Could not find Check item value pair
  4637. (35)     [monthly] = noop
  4638. rlm_counter: Entering module authorize code
  4639. rlm_counter: Could not find Check item value pair
  4640. (35)     [forever] = noop
  4641. (35)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  4642. (35)     ERROR: Failed retrieving values required to evaluate condition
  4643. (35)     [expiration] = noop
  4644. (35)     [logintime] = noop
  4645. (35)     [pap] = updated
  4646. (35)   } # authorize = updated
  4647. (35) Found Auth-Type = PAP
  4648. (35) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  4649. (35)   Auth-Type PAP {
  4650. (35) pap: Login attempt with password
  4651. (35) pap: Comparing with "known good" Cleartext-Password
  4652. (35) pap: User authenticated successfully
  4653. (35)     [pap] = ok
  4654. (35)   } # Auth-Type PAP = ok
  4655. (35) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  4656. (35)   session {
  4657. (35) radutmp: EXPAND /var/log/radutmp
  4658. (35) radutmp:    --> /var/log/radutmp
  4659. (35) radutmp: EXPAND %{User-Name}
  4660. (35) radutmp:    --> anand
  4661. checkrad: No NAS type, or type "other" not checking
  4662. checkrad: No NAS type, or type "other" not checking
  4663. checkrad: No NAS type, or type "other" not checking
  4664. (35)     [radutmp] = fail
  4665. (35)   } # session = fail
  4666. (35) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  4667. (35)   post-auth {
  4668. (35)     update {
  4669. (35)       No attributes updated for RHS &session-state:
  4670. (35)     } # update = noop
  4671. (35)     [exec] = noop
  4672. (35)     policy remove_reply_message_if_eap {
  4673. (35)       if (&reply:EAP-Message && &reply:Reply-Message) {
  4674. (35)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  4675. (35)       else {
  4676. (35)         [noop] = noop
  4677. (35)       } # else = noop
  4678. (35)     } # policy remove_reply_message_if_eap = noop
  4679. (35)   } # post-auth = noop
  4680. (35) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  4681. (35) Sent Access-Accept Id 144 from 192.168.200.1:1812 to 192.168.200.1:30286 length 0
  4682. (35) Finished request
  4683. Waking up in 4.8 seconds.
  4684. (36) Received Accounting-Request Id 12 from 192.168.200.1:45460 to 192.168.200.1:1813 length 214
  4685. (36)   Service-Type = Login-User
  4686. (36)   User-Name = "anand"
  4687. (36)   Acct-Status-Type = Interim-Update
  4688. (36)   Acct-Authentic = RADIUS
  4689. (36)   NAS-IP-Address = 192.168.200.1
  4690. (36)   NAS-Identifier = "CaptivePortal-office_zone"
  4691. (36)   NAS-Port-Type = Ethernet
  4692. (36)   NAS-Port = 2004
  4693. (36)   Acct-Session-Id = "d4f8574cf15bdf9b"
  4694. (36)   Framed-IP-Address = 192.168.200.203
  4695. (36)   Calling-Station-Id = "da:54:db:27:ae:2b"
  4696. (36)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4697. (36)   Acct-Input-Packets = 45
  4698. (36)   Acct-Input-Octets = 14312
  4699. (36)   Acct-Output-Packets = 34
  4700. (36)   Acct-Output-Octets = 6673
  4701. (36)   Acct-Session-Time = 268
  4702. (36)   Acct-Output-Gigawords = 0
  4703. (36)   Acct-Input-Gigawords = 0
  4704. (36) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  4705. (36)   preacct {
  4706. (36)     [preprocess] = ok
  4707. (36)     update request {
  4708. (36)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  4709. (36)          --> 1586901203
  4710. (36)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  4711. (36)     } # update request = noop
  4712. (36)     policy acct_unique {
  4713. (36)       update request {
  4714. (36)         &Tmp-String-9 := "ai:"
  4715. (36)       } # update request = noop
  4716. (36)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  4717. (36)       EXPAND %{hex:&Class}
  4718. (36)          -->
  4719. (36)       EXPAND ^%{hex:&Tmp-String-9}
  4720. (36)          --> ^61693a
  4721. (36)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  4722. (36)       else {
  4723. (36)         update request {
  4724. (36)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  4725. (36)              --> 8540a37c864a86b96f7917819f3d70c9
  4726. (36)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  4727. (36)         } # update request = noop
  4728. (36)       } # else = noop
  4729. (36)     } # policy acct_unique = noop
  4730. (36) suffix: Checking for suffix after "@"
  4731. (36) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4732. (36)     [suffix] = noop
  4733. (36) ntdomain: Checking for prefix before "\"
  4734. (36) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4735. (36)     [ntdomain] = noop
  4736. (36)     [files] = noop
  4737. (36)   } # preacct = ok
  4738. (36) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  4739. (36)   accounting {
  4740. (36) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  4741. (36) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  4742. (36) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  4743. (36) detail: EXPAND %t
  4744. (36) detail:    --> Wed Apr 15 03:27:51 2020
  4745. (36)     [detail] = ok
  4746. (36)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  4747. (36)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  4748. (36)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  4749. (36) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4750. (36) datacounterdaily: EXPAND %{request:User-Name}
  4751. (36) datacounterdaily:    --> anand
  4752. (36) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  4753. (36) datacounterdaily:    --> 14312
  4754. (36) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  4755. (36) datacounterdaily:    --> 6673
  4756. (36) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  4757. (36) datacounterdaily:    --> Interim-Update
  4758. (36) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  4759. (36) datacounterdaily:    --> d4f8574cf15bdf9b
  4760. (36) datacounterdaily: Program returned code (0) and output ''
  4761. (36) datacounterdaily: Program executed successfully
  4762. (36)       [datacounterdaily] = ok
  4763. (36) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4764. (36) datacounterweekly: EXPAND %{request:User-Name}
  4765. (36) datacounterweekly:    --> anand
  4766. (36) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  4767. (36) datacounterweekly:    --> 14312
  4768. (36) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  4769. (36) datacounterweekly:    --> 6673
  4770. (36) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  4771. (36) datacounterweekly:    --> Interim-Update
  4772. (36) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  4773. (36) datacounterweekly:    --> d4f8574cf15bdf9b
  4774. (36) datacounterweekly: Program returned code (0) and output ''
  4775. (36) datacounterweekly: Program executed successfully
  4776. (36)       [datacounterweekly] = ok
  4777. (36) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4778. (36) datacountermonthly: EXPAND %{request:User-Name}
  4779. (36) datacountermonthly:    --> anand
  4780. (36) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  4781. (36) datacountermonthly:    --> 14312
  4782. (36) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  4783. (36) datacountermonthly:    --> 6673
  4784. (36) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  4785. (36) datacountermonthly:    --> Interim-Update
  4786. (36) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  4787. (36) datacountermonthly:    --> d4f8574cf15bdf9b
  4788. (36) datacountermonthly: Program returned code (0) and output ''
  4789. (36) datacountermonthly: Program executed successfully
  4790. (36)       [datacountermonthly] = ok
  4791. (36) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4792. (36) datacounterforever: EXPAND %{request:User-Name}
  4793. (36) datacounterforever:    --> anand
  4794. (36) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  4795. (36) datacounterforever:    --> 14312
  4796. (36) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  4797. (36) datacounterforever:    --> 6673
  4798. (36) datacounterforever: EXPAND %{request:Acct-Status-Type}
  4799. (36) datacounterforever:    --> Interim-Update
  4800. (36) datacounterforever: EXPAND %{request:Acct-Session-Id}
  4801. (36) datacounterforever:    --> d4f8574cf15bdf9b
  4802. (36) datacounterforever: Program returned code (0) and output ''
  4803. (36) datacounterforever: Program executed successfully
  4804. (36)       [datacounterforever] = ok
  4805. (36)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  4806. (36) radutmp: EXPAND /var/log/radutmp
  4807. (36) radutmp:    --> /var/log/radutmp
  4808. (36) radutmp: EXPAND %{User-Name}
  4809. (36) radutmp:    --> anand
  4810. (36)     [radutmp] = ok
  4811. rlm_counter: We only run on Accounting-Stop packets
  4812. (36)     [daily] = noop
  4813. rlm_counter: We only run on Accounting-Stop packets
  4814. (36)     [weekly] = noop
  4815. rlm_counter: We only run on Accounting-Stop packets
  4816. (36)     [monthly] = noop
  4817. rlm_counter: We only run on Accounting-Stop packets
  4818. (36)     [forever] = noop
  4819. (36)     [exec] = noop
  4820. (36) attr_filter.accounting_response: EXPAND %{User-Name}
  4821. (36) attr_filter.accounting_response:    --> anand
  4822. (36) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  4823. (36)     [attr_filter.accounting_response] = updated
  4824. (36)   } # accounting = updated
  4825. (36) Sent Accounting-Response Id 12 from 192.168.200.1:1813 to 192.168.200.1:45460 length 0
  4826. (36) Finished request
  4827. (36) Cleaning up request packet ID 12 with timestamp +331
  4828. Waking up in 4.7 seconds.
  4829. (37) Received Access-Request Id 224 from 192.168.200.1:1311 to 192.168.200.1:1812 length 160
  4830. (37)   Service-Type = Login-User
  4831. (37)   User-Name = "anand"
  4832. (37)   User-Password = "9829012834"
  4833. (37)   NAS-IP-Address = 192.168.200.1
  4834. (37)   NAS-Identifier = "CaptivePortal-office_zone"
  4835. (37)   Calling-Station-Id = "da:54:db:27:ae:2b"
  4836. (37)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4837. (37)   NAS-Port-Type = Ethernet
  4838. (37)   NAS-Port = 2004
  4839. (37)   Framed-IP-Address = 192.168.200.203
  4840. (37) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  4841. (37)   authorize {
  4842. (37)     [preprocess] = ok
  4843. (37)     [chap] = noop
  4844. (37)     [mschap] = noop
  4845. (37)     [digest] = noop
  4846. (37) suffix: Checking for suffix after "@"
  4847. (37) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4848. (37)     [suffix] = noop
  4849. (37) ntdomain: Checking for prefix before "\"
  4850. (37) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4851. (37)     [ntdomain] = noop
  4852. (37) eap: No EAP-Message, not doing EAP
  4853. (37)     [eap] = noop
  4854. (37) files: users: Matched entry DEFAULT at line 1
  4855. (37) files: users: Matched entry anand at line 4
  4856. (37)     [files] = ok
  4857. rlm_counter: Entering module authorize code
  4858. rlm_counter: Could not find Check item value pair
  4859. (37)     [daily] = noop
  4860. rlm_counter: Entering module authorize code
  4861. rlm_counter: Could not find Check item value pair
  4862. (37)     [weekly] = noop
  4863. rlm_counter: Entering module authorize code
  4864. rlm_counter: Could not find Check item value pair
  4865. (37)     [monthly] = noop
  4866. rlm_counter: Entering module authorize code
  4867. rlm_counter: Could not find Check item value pair
  4868. (37)     [forever] = noop
  4869. (37)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  4870. (37)     ERROR: Failed retrieving values required to evaluate condition
  4871. (37)     [expiration] = noop
  4872. (37)     [logintime] = noop
  4873. (37)     [pap] = updated
  4874. (37)   } # authorize = updated
  4875. (37) Found Auth-Type = PAP
  4876. (37) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  4877. (37)   Auth-Type PAP {
  4878. (37) pap: Login attempt with password
  4879. (37) pap: Comparing with "known good" Cleartext-Password
  4880. (37) pap: User authenticated successfully
  4881. (37)     [pap] = ok
  4882. (37)   } # Auth-Type PAP = ok
  4883. (37) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  4884. (37)   session {
  4885. (37) radutmp: EXPAND /var/log/radutmp
  4886. (37) radutmp:    --> /var/log/radutmp
  4887. (37) radutmp: EXPAND %{User-Name}
  4888. (37) radutmp:    --> anand
  4889. checkrad: No NAS type, or type "other" not checking
  4890. checkrad: No NAS type, or type "other" not checking
  4891. checkrad: No NAS type, or type "other" not checking
  4892. (37)     [radutmp] = fail
  4893. (37)   } # session = fail
  4894. (37) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  4895. (37)   post-auth {
  4896. (37)     update {
  4897. (37)       No attributes updated for RHS &session-state:
  4898. (37)     } # update = noop
  4899. (37)     [exec] = noop
  4900. (37)     policy remove_reply_message_if_eap {
  4901. (37)       if (&reply:EAP-Message && &reply:Reply-Message) {
  4902. (37)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  4903. (37)       else {
  4904. (37)         [noop] = noop
  4905. (37)       } # else = noop
  4906. (37)     } # policy remove_reply_message_if_eap = noop
  4907. (37)   } # post-auth = noop
  4908. (37) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  4909. (37) Sent Access-Accept Id 224 from 192.168.200.1:1812 to 192.168.200.1:1311 length 0
  4910. (37) Finished request
  4911. Waking up in 4.7 seconds.
  4912. (33) Cleaning up request packet ID 49 with timestamp +331
  4913. Waking up in 0.1 seconds.
  4914. (35) Cleaning up request packet ID 144 with timestamp +331
  4915. Waking up in 0.1 seconds.
  4916. (37) Cleaning up request packet ID 224 with timestamp +331
  4917. Ready to process requests
  4918. (38) Received Accounting-Request Id 10 from 192.168.200.1:19561 to 192.168.200.1:1813 length 214
  4919. (38)   Service-Type = Login-User
  4920. (38)   User-Name = "anand"
  4921. (38)   Acct-Status-Type = Interim-Update
  4922. (38)   Acct-Authentic = RADIUS
  4923. (38)   NAS-IP-Address = 192.168.200.1
  4924. (38)   NAS-Identifier = "CaptivePortal-office_zone"
  4925. (38)   NAS-Port-Type = Ethernet
  4926. (38)   NAS-Port = 2000
  4927. (38)   Acct-Session-Id = "874681d3614b1b36"
  4928. (38)   Framed-IP-Address = 192.168.200.201
  4929. (38)   Calling-Station-Id = "e6:8f:99:48:85:89"
  4930. (38)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  4931. (38)   Acct-Input-Packets = 641
  4932. (38)   Acct-Input-Octets = 86491
  4933. (38)   Acct-Output-Packets = 749
  4934. (38)   Acct-Output-Octets = 372445
  4935. (38)   Acct-Session-Time = 373
  4936. (38)   Acct-Output-Gigawords = 0
  4937. (38)   Acct-Input-Gigawords = 0
  4938. (38) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  4939. (38)   preacct {
  4940. (38)     [preprocess] = ok
  4941. (38)     update request {
  4942. (38)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  4943. (38)          --> 1586901159
  4944. (38)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  4945. (38)     } # update request = noop
  4946. (38)     policy acct_unique {
  4947. (38)       update request {
  4948. (38)         &Tmp-String-9 := "ai:"
  4949. (38)       } # update request = noop
  4950. (38)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  4951. (38)       EXPAND %{hex:&Class}
  4952. (38)          -->
  4953. (38)       EXPAND ^%{hex:&Tmp-String-9}
  4954. (38)          --> ^61693a
  4955. (38)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  4956. (38)       else {
  4957. (38)         update request {
  4958. (38)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  4959. (38)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  4960. (38)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  4961. (38)         } # update request = noop
  4962. (38)       } # else = noop
  4963. (38)     } # policy acct_unique = noop
  4964. (38) suffix: Checking for suffix after "@"
  4965. (38) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  4966. (38)     [suffix] = noop
  4967. (38) ntdomain: Checking for prefix before "\"
  4968. (38) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  4969. (38)     [ntdomain] = noop
  4970. (38)     [files] = noop
  4971. (38)   } # preacct = ok
  4972. (38) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  4973. (38)   accounting {
  4974. (38) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  4975. (38) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  4976. (38) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  4977. (38) detail: EXPAND %t
  4978. (38) detail:    --> Wed Apr 15 03:28:52 2020
  4979. (38)     [detail] = ok
  4980. (38)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  4981. (38)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  4982. (38)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  4983. (38) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4984. (38) datacounterdaily: EXPAND %{request:User-Name}
  4985. (38) datacounterdaily:    --> anand
  4986. (38) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  4987. (38) datacounterdaily:    --> 86491
  4988. (38) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  4989. (38) datacounterdaily:    --> 372445
  4990. (38) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  4991. (38) datacounterdaily:    --> Interim-Update
  4992. (38) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  4993. (38) datacounterdaily:    --> 874681d3614b1b36
  4994. (38) datacounterdaily: Program returned code (0) and output ''
  4995. (38) datacounterdaily: Program executed successfully
  4996. (38)       [datacounterdaily] = ok
  4997. (38) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  4998. (38) datacounterweekly: EXPAND %{request:User-Name}
  4999. (38) datacounterweekly:    --> anand
  5000. (38) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  5001. (38) datacounterweekly:    --> 86491
  5002. (38) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  5003. (38) datacounterweekly:    --> 372445
  5004. (38) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  5005. (38) datacounterweekly:    --> Interim-Update
  5006. (38) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  5007. (38) datacounterweekly:    --> 874681d3614b1b36
  5008. (38) datacounterweekly: Program returned code (0) and output ''
  5009. (38) datacounterweekly: Program executed successfully
  5010. (38)       [datacounterweekly] = ok
  5011. (38) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5012. (38) datacountermonthly: EXPAND %{request:User-Name}
  5013. (38) datacountermonthly:    --> anand
  5014. (38) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  5015. (38) datacountermonthly:    --> 86491
  5016. (38) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  5017. (38) datacountermonthly:    --> 372445
  5018. (38) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  5019. (38) datacountermonthly:    --> Interim-Update
  5020. (38) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  5021. (38) datacountermonthly:    --> 874681d3614b1b36
  5022. (38) datacountermonthly: Program returned code (0) and output ''
  5023. (38) datacountermonthly: Program executed successfully
  5024. (38)       [datacountermonthly] = ok
  5025. (38) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5026. (38) datacounterforever: EXPAND %{request:User-Name}
  5027. (38) datacounterforever:    --> anand
  5028. (38) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  5029. (38) datacounterforever:    --> 86491
  5030. (38) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  5031. (38) datacounterforever:    --> 372445
  5032. (38) datacounterforever: EXPAND %{request:Acct-Status-Type}
  5033. (38) datacounterforever:    --> Interim-Update
  5034. (38) datacounterforever: EXPAND %{request:Acct-Session-Id}
  5035. (38) datacounterforever:    --> 874681d3614b1b36
  5036. (38) datacounterforever: Program returned code (0) and output ''
  5037. (38) datacounterforever: Program executed successfully
  5038. (38)       [datacounterforever] = ok
  5039. (38)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  5040. (38) radutmp: EXPAND /var/log/radutmp
  5041. (38) radutmp:    --> /var/log/radutmp
  5042. (38) radutmp: EXPAND %{User-Name}
  5043. (38) radutmp:    --> anand
  5044. (38)     [radutmp] = ok
  5045. rlm_counter: We only run on Accounting-Stop packets
  5046. (38)     [daily] = noop
  5047. rlm_counter: We only run on Accounting-Stop packets
  5048. (38)     [weekly] = noop
  5049. rlm_counter: We only run on Accounting-Stop packets
  5050. (38)     [monthly] = noop
  5051. rlm_counter: We only run on Accounting-Stop packets
  5052. (38)     [forever] = noop
  5053. (38)     [exec] = noop
  5054. (38) attr_filter.accounting_response: EXPAND %{User-Name}
  5055. (38) attr_filter.accounting_response:    --> anand
  5056. (38) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  5057. (38)     [attr_filter.accounting_response] = updated
  5058. (38)   } # accounting = updated
  5059. (38) Sent Accounting-Response Id 10 from 192.168.200.1:1813 to 192.168.200.1:19561 length 0
  5060. (38) Finished request
  5061. (38) Cleaning up request packet ID 10 with timestamp +392
  5062. Ready to process requests
  5063. (39) Received Access-Request Id 33 from 192.168.200.1:38974 to 192.168.200.1:1812 length 160
  5064. (39)   Service-Type = Login-User
  5065. (39)   User-Name = "anand"
  5066. (39)   User-Password = "9829012834"
  5067. (39)   NAS-IP-Address = 192.168.200.1
  5068. (39)   NAS-Identifier = "CaptivePortal-office_zone"
  5069. (39)   Calling-Station-Id = "e6:8f:99:48:85:89"
  5070. (39)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5071. (39)   NAS-Port-Type = Ethernet
  5072. (39)   NAS-Port = 2000
  5073. (39)   Framed-IP-Address = 192.168.200.201
  5074. (39) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  5075. (39)   authorize {
  5076. (39)     [preprocess] = ok
  5077. (39)     [chap] = noop
  5078. (39)     [mschap] = noop
  5079. (39)     [digest] = noop
  5080. (39) suffix: Checking for suffix after "@"
  5081. (39) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5082. (39)     [suffix] = noop
  5083. (39) ntdomain: Checking for prefix before "\"
  5084. (39) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5085. (39)     [ntdomain] = noop
  5086. (39) eap: No EAP-Message, not doing EAP
  5087. (39)     [eap] = noop
  5088. (39) files: users: Matched entry DEFAULT at line 1
  5089. (39) files: users: Matched entry anand at line 4
  5090. (39)     [files] = ok
  5091. rlm_counter: Entering module authorize code
  5092. rlm_counter: Could not find Check item value pair
  5093. (39)     [daily] = noop
  5094. rlm_counter: Entering module authorize code
  5095. rlm_counter: Could not find Check item value pair
  5096. (39)     [weekly] = noop
  5097. rlm_counter: Entering module authorize code
  5098. rlm_counter: Could not find Check item value pair
  5099. (39)     [monthly] = noop
  5100. rlm_counter: Entering module authorize code
  5101. rlm_counter: Could not find Check item value pair
  5102. (39)     [forever] = noop
  5103. (39)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  5104. (39)     ERROR: Failed retrieving values required to evaluate condition
  5105. (39)     [expiration] = noop
  5106. (39)     [logintime] = noop
  5107. (39)     [pap] = updated
  5108. (39)   } # authorize = updated
  5109. (39) Found Auth-Type = PAP
  5110. (39) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  5111. (39)   Auth-Type PAP {
  5112. (39) pap: Login attempt with password
  5113. (39) pap: Comparing with "known good" Cleartext-Password
  5114. (39) pap: User authenticated successfully
  5115. (39)     [pap] = ok
  5116. (39)   } # Auth-Type PAP = ok
  5117. (39) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  5118. (39)   session {
  5119. (39) radutmp: EXPAND /var/log/radutmp
  5120. (39) radutmp:    --> /var/log/radutmp
  5121. (39) radutmp: EXPAND %{User-Name}
  5122. (39) radutmp:    --> anand
  5123. checkrad: No NAS type, or type "other" not checking
  5124. checkrad: No NAS type, or type "other" not checking
  5125. checkrad: No NAS type, or type "other" not checking
  5126. (39)     [radutmp] = fail
  5127. (39)   } # session = fail
  5128. (39) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  5129. (39)   post-auth {
  5130. (39)     update {
  5131. (39)       No attributes updated for RHS &session-state:
  5132. (39)     } # update = noop
  5133. (39)     [exec] = noop
  5134. (39)     policy remove_reply_message_if_eap {
  5135. (39)       if (&reply:EAP-Message && &reply:Reply-Message) {
  5136. (39)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  5137. (39)       else {
  5138. (39)         [noop] = noop
  5139. (39)       } # else = noop
  5140. (39)     } # policy remove_reply_message_if_eap = noop
  5141. (39)   } # post-auth = noop
  5142. (39) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  5143. (39) Sent Access-Accept Id 33 from 192.168.200.1:1812 to 192.168.200.1:38974 length 0
  5144. (39) Finished request
  5145. Waking up in 4.9 seconds.
  5146. (40) Received Accounting-Request Id 6 from 192.168.200.1:25026 to 192.168.200.1:1813 length 214
  5147. (40)   Service-Type = Login-User
  5148. (40)   User-Name = "anand"
  5149. (40)   Acct-Status-Type = Interim-Update
  5150. (40)   Acct-Authentic = RADIUS
  5151. (40)   NAS-IP-Address = 192.168.200.1
  5152. (40)   NAS-Identifier = "CaptivePortal-office_zone"
  5153. (40)   NAS-Port-Type = Ethernet
  5154. (40)   NAS-Port = 2002
  5155. (40)   Acct-Session-Id = "6974b7d556ed613e"
  5156. (40)   Framed-IP-Address = 192.168.200.202
  5157. (40)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  5158. (40)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5159. (40)   Acct-Input-Packets = 3006
  5160. (40)   Acct-Input-Octets = 756289
  5161. (40)   Acct-Output-Packets = 6211
  5162. (40)   Acct-Output-Octets = 7278405
  5163. (40)   Acct-Session-Time = 342
  5164. (40)   Acct-Output-Gigawords = 0
  5165. (40)   Acct-Input-Gigawords = 0
  5166. (40) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  5167. (40)   preacct {
  5168. (40)     [preprocess] = ok
  5169. (40)     update request {
  5170. (40)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  5171. (40)          --> 1586901190
  5172. (40)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  5173. (40)     } # update request = noop
  5174. (40)     policy acct_unique {
  5175. (40)       update request {
  5176. (40)         &Tmp-String-9 := "ai:"
  5177. (40)       } # update request = noop
  5178. (40)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  5179. (40)       EXPAND %{hex:&Class}
  5180. (40)          -->
  5181. (40)       EXPAND ^%{hex:&Tmp-String-9}
  5182. (40)          --> ^61693a
  5183. (40)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  5184. (40)       else {
  5185. (40)         update request {
  5186. (40)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  5187. (40)              --> 9a9488f2d0124a4aa7feb209bced26bb
  5188. (40)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  5189. (40)         } # update request = noop
  5190. (40)       } # else = noop
  5191. (40)     } # policy acct_unique = noop
  5192. (40) suffix: Checking for suffix after "@"
  5193. (40) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5194. (40)     [suffix] = noop
  5195. (40) ntdomain: Checking for prefix before "\"
  5196. (40) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5197. (40)     [ntdomain] = noop
  5198. (40)     [files] = noop
  5199. (40)   } # preacct = ok
  5200. (40) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  5201. (40)   accounting {
  5202. (40) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  5203. (40) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  5204. (40) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  5205. (40) detail: EXPAND %t
  5206. (40) detail:    --> Wed Apr 15 03:28:52 2020
  5207. (40)     [detail] = ok
  5208. (40)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  5209. (40)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  5210. (40)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  5211. (40) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5212. (40) datacounterdaily: EXPAND %{request:User-Name}
  5213. (40) datacounterdaily:    --> anand
  5214. (40) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  5215. (40) datacounterdaily:    --> 756289
  5216. (40) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  5217. (40) datacounterdaily:    --> 7278405
  5218. (40) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  5219. (40) datacounterdaily:    --> Interim-Update
  5220. (40) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  5221. (40) datacounterdaily:    --> 6974b7d556ed613e
  5222. (40) datacounterdaily: Program returned code (0) and output ''
  5223. (40) datacounterdaily: Program executed successfully
  5224. (40)       [datacounterdaily] = ok
  5225. (40) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5226. (40) datacounterweekly: EXPAND %{request:User-Name}
  5227. (40) datacounterweekly:    --> anand
  5228. (40) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  5229. (40) datacounterweekly:    --> 756289
  5230. (40) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  5231. (40) datacounterweekly:    --> 7278405
  5232. (40) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  5233. (40) datacounterweekly:    --> Interim-Update
  5234. (40) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  5235. (40) datacounterweekly:    --> 6974b7d556ed613e
  5236. (40) datacounterweekly: Program returned code (0) and output ''
  5237. (40) datacounterweekly: Program executed successfully
  5238. (40)       [datacounterweekly] = ok
  5239. (40) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5240. (40) datacountermonthly: EXPAND %{request:User-Name}
  5241. (40) datacountermonthly:    --> anand
  5242. (40) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  5243. (40) datacountermonthly:    --> 756289
  5244. (40) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  5245. (40) datacountermonthly:    --> 7278405
  5246. (40) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  5247. (40) datacountermonthly:    --> Interim-Update
  5248. (40) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  5249. (40) datacountermonthly:    --> 6974b7d556ed613e
  5250. (40) datacountermonthly: Program returned code (0) and output ''
  5251. (40) datacountermonthly: Program executed successfully
  5252. (40)       [datacountermonthly] = ok
  5253. (40) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5254. (40) datacounterforever: EXPAND %{request:User-Name}
  5255. (40) datacounterforever:    --> anand
  5256. (40) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  5257. (40) datacounterforever:    --> 756289
  5258. (40) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  5259. (40) datacounterforever:    --> 7278405
  5260. (40) datacounterforever: EXPAND %{request:Acct-Status-Type}
  5261. (40) datacounterforever:    --> Interim-Update
  5262. (40) datacounterforever: EXPAND %{request:Acct-Session-Id}
  5263. (40) datacounterforever:    --> 6974b7d556ed613e
  5264. (40) datacounterforever: Program returned code (0) and output ''
  5265. (40) datacounterforever: Program executed successfully
  5266. (40)       [datacounterforever] = ok
  5267. (40)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  5268. (40) radutmp: EXPAND /var/log/radutmp
  5269. (40) radutmp:    --> /var/log/radutmp
  5270. (40) radutmp: EXPAND %{User-Name}
  5271. (40) radutmp:    --> anand
  5272. (40)     [radutmp] = ok
  5273. rlm_counter: We only run on Accounting-Stop packets
  5274. (40)     [daily] = noop
  5275. rlm_counter: We only run on Accounting-Stop packets
  5276. (40)     [weekly] = noop
  5277. rlm_counter: We only run on Accounting-Stop packets
  5278. (40)     [monthly] = noop
  5279. rlm_counter: We only run on Accounting-Stop packets
  5280. (40)     [forever] = noop
  5281. (40)     [exec] = noop
  5282. (40) attr_filter.accounting_response: EXPAND %{User-Name}
  5283. (40) attr_filter.accounting_response:    --> anand
  5284. (40) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  5285. (40)     [attr_filter.accounting_response] = updated
  5286. (40)   } # accounting = updated
  5287. (40) Sent Accounting-Response Id 6 from 192.168.200.1:1813 to 192.168.200.1:25026 length 0
  5288. (40) Finished request
  5289. (40) Cleaning up request packet ID 6 with timestamp +392
  5290. Waking up in 4.9 seconds.
  5291. (41) Received Access-Request Id 163 from 192.168.200.1:5702 to 192.168.200.1:1812 length 160
  5292. (41)   Service-Type = Login-User
  5293. (41)   User-Name = "anand"
  5294. (41)   User-Password = "9829012834"
  5295. (41)   NAS-IP-Address = 192.168.200.1
  5296. (41)   NAS-Identifier = "CaptivePortal-office_zone"
  5297. (41)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  5298. (41)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5299. (41)   NAS-Port-Type = Ethernet
  5300. (41)   NAS-Port = 2002
  5301. (41)   Framed-IP-Address = 192.168.200.202
  5302. (41) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  5303. (41)   authorize {
  5304. (41)     [preprocess] = ok
  5305. (41)     [chap] = noop
  5306. (41)     [mschap] = noop
  5307. (41)     [digest] = noop
  5308. (41) suffix: Checking for suffix after "@"
  5309. (41) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5310. (41)     [suffix] = noop
  5311. (41) ntdomain: Checking for prefix before "\"
  5312. (41) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5313. (41)     [ntdomain] = noop
  5314. (41) eap: No EAP-Message, not doing EAP
  5315. (41)     [eap] = noop
  5316. (41) files: users: Matched entry DEFAULT at line 1
  5317. (41) files: users: Matched entry anand at line 4
  5318. (41)     [files] = ok
  5319. rlm_counter: Entering module authorize code
  5320. rlm_counter: Could not find Check item value pair
  5321. (41)     [daily] = noop
  5322. rlm_counter: Entering module authorize code
  5323. rlm_counter: Could not find Check item value pair
  5324. (41)     [weekly] = noop
  5325. rlm_counter: Entering module authorize code
  5326. rlm_counter: Could not find Check item value pair
  5327. (41)     [monthly] = noop
  5328. rlm_counter: Entering module authorize code
  5329. rlm_counter: Could not find Check item value pair
  5330. (41)     [forever] = noop
  5331. (41)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  5332. (41)     ERROR: Failed retrieving values required to evaluate condition
  5333. (41)     [expiration] = noop
  5334. (41)     [logintime] = noop
  5335. (41)     [pap] = updated
  5336. (41)   } # authorize = updated
  5337. (41) Found Auth-Type = PAP
  5338. (41) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  5339. (41)   Auth-Type PAP {
  5340. (41) pap: Login attempt with password
  5341. (41) pap: Comparing with "known good" Cleartext-Password
  5342. (41) pap: User authenticated successfully
  5343. (41)     [pap] = ok
  5344. (41)   } # Auth-Type PAP = ok
  5345. (41) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  5346. (41)   session {
  5347. (41) radutmp: EXPAND /var/log/radutmp
  5348. (41) radutmp:    --> /var/log/radutmp
  5349. (41) radutmp: EXPAND %{User-Name}
  5350. (41) radutmp:    --> anand
  5351. checkrad: No NAS type, or type "other" not checking
  5352. checkrad: No NAS type, or type "other" not checking
  5353. checkrad: No NAS type, or type "other" not checking
  5354. (41)     [radutmp] = fail
  5355. (41)   } # session = fail
  5356. (41) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  5357. (41)   post-auth {
  5358. (41)     update {
  5359. (41)       No attributes updated for RHS &session-state:
  5360. (41)     } # update = noop
  5361. (41)     [exec] = noop
  5362. (41)     policy remove_reply_message_if_eap {
  5363. (41)       if (&reply:EAP-Message && &reply:Reply-Message) {
  5364. (41)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  5365. (41)       else {
  5366. (41)         [noop] = noop
  5367. (41)       } # else = noop
  5368. (41)     } # policy remove_reply_message_if_eap = noop
  5369. (41)   } # post-auth = noop
  5370. (41) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  5371. (41) Sent Access-Accept Id 163 from 192.168.200.1:1812 to 192.168.200.1:5702 length 0
  5372. (41) Finished request
  5373. Waking up in 4.8 seconds.
  5374. (42) Received Accounting-Request Id 107 from 192.168.200.1:7634 to 192.168.200.1:1813 length 214
  5375. (42)   Service-Type = Login-User
  5376. (42)   User-Name = "anand"
  5377. (42)   Acct-Status-Type = Interim-Update
  5378. (42)   Acct-Authentic = RADIUS
  5379. (42)   NAS-IP-Address = 192.168.200.1
  5380. (42)   NAS-Identifier = "CaptivePortal-office_zone"
  5381. (42)   NAS-Port-Type = Ethernet
  5382. (42)   NAS-Port = 2004
  5383. (42)   Acct-Session-Id = "d4f8574cf15bdf9b"
  5384. (42)   Framed-IP-Address = 192.168.200.203
  5385. (42)   Calling-Station-Id = "da:54:db:27:ae:2b"
  5386. (42)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5387. (42)   Acct-Input-Packets = 45
  5388. (42)   Acct-Input-Octets = 14312
  5389. (42)   Acct-Output-Packets = 35
  5390. (42)   Acct-Output-Octets = 6713
  5391. (42)   Acct-Session-Time = 329
  5392. (42)   Acct-Output-Gigawords = 0
  5393. (42)   Acct-Input-Gigawords = 0
  5394. (42) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  5395. (42)   preacct {
  5396. (42)     [preprocess] = ok
  5397. (42)     update request {
  5398. (42)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  5399. (42)          --> 1586901203
  5400. (42)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  5401. (42)     } # update request = noop
  5402. (42)     policy acct_unique {
  5403. (42)       update request {
  5404. (42)         &Tmp-String-9 := "ai:"
  5405. (42)       } # update request = noop
  5406. (42)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  5407. (42)       EXPAND %{hex:&Class}
  5408. (42)          -->
  5409. (42)       EXPAND ^%{hex:&Tmp-String-9}
  5410. (42)          --> ^61693a
  5411. (42)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  5412. (42)       else {
  5413. (42)         update request {
  5414. (42)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  5415. (42)              --> 8540a37c864a86b96f7917819f3d70c9
  5416. (42)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  5417. (42)         } # update request = noop
  5418. (42)       } # else = noop
  5419. (42)     } # policy acct_unique = noop
  5420. (42) suffix: Checking for suffix after "@"
  5421. (42) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5422. (42)     [suffix] = noop
  5423. (42) ntdomain: Checking for prefix before "\"
  5424. (42) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5425. (42)     [ntdomain] = noop
  5426. (42)     [files] = noop
  5427. (42)   } # preacct = ok
  5428. (42) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  5429. (42)   accounting {
  5430. (42) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  5431. (42) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  5432. (42) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  5433. (42) detail: EXPAND %t
  5434. (42) detail:    --> Wed Apr 15 03:28:52 2020
  5435. (42)     [detail] = ok
  5436. (42)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  5437. (42)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  5438. (42)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  5439. (42) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5440. (42) datacounterdaily: EXPAND %{request:User-Name}
  5441. (42) datacounterdaily:    --> anand
  5442. (42) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  5443. (42) datacounterdaily:    --> 14312
  5444. (42) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  5445. (42) datacounterdaily:    --> 6713
  5446. (42) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  5447. (42) datacounterdaily:    --> Interim-Update
  5448. (42) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  5449. (42) datacounterdaily:    --> d4f8574cf15bdf9b
  5450. (42) datacounterdaily: Program returned code (0) and output ''
  5451. (42) datacounterdaily: Program executed successfully
  5452. (42)       [datacounterdaily] = ok
  5453. (42) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5454. (42) datacounterweekly: EXPAND %{request:User-Name}
  5455. (42) datacounterweekly:    --> anand
  5456. (42) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  5457. (42) datacounterweekly:    --> 14312
  5458. (42) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  5459. (42) datacounterweekly:    --> 6713
  5460. (42) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  5461. (42) datacounterweekly:    --> Interim-Update
  5462. (42) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  5463. (42) datacounterweekly:    --> d4f8574cf15bdf9b
  5464. (42) datacounterweekly: Program returned code (0) and output ''
  5465. (42) datacounterweekly: Program executed successfully
  5466. (42)       [datacounterweekly] = ok
  5467. (42) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5468. (42) datacountermonthly: EXPAND %{request:User-Name}
  5469. (42) datacountermonthly:    --> anand
  5470. (42) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  5471. (42) datacountermonthly:    --> 14312
  5472. (42) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  5473. (42) datacountermonthly:    --> 6713
  5474. (42) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  5475. (42) datacountermonthly:    --> Interim-Update
  5476. (42) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  5477. (42) datacountermonthly:    --> d4f8574cf15bdf9b
  5478. (42) datacountermonthly: Program returned code (0) and output ''
  5479. (42) datacountermonthly: Program executed successfully
  5480. (42)       [datacountermonthly] = ok
  5481. (42) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5482. (42) datacounterforever: EXPAND %{request:User-Name}
  5483. (42) datacounterforever:    --> anand
  5484. (42) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  5485. (42) datacounterforever:    --> 14312
  5486. (42) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  5487. (42) datacounterforever:    --> 6713
  5488. (42) datacounterforever: EXPAND %{request:Acct-Status-Type}
  5489. (42) datacounterforever:    --> Interim-Update
  5490. (42) datacounterforever: EXPAND %{request:Acct-Session-Id}
  5491. (42) datacounterforever:    --> d4f8574cf15bdf9b
  5492. (42) datacounterforever: Program returned code (0) and output ''
  5493. (42) datacounterforever: Program executed successfully
  5494. (42)       [datacounterforever] = ok
  5495. (42)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  5496. (42) radutmp: EXPAND /var/log/radutmp
  5497. (42) radutmp:    --> /var/log/radutmp
  5498. (42) radutmp: EXPAND %{User-Name}
  5499. (42) radutmp:    --> anand
  5500. (42)     [radutmp] = ok
  5501. rlm_counter: We only run on Accounting-Stop packets
  5502. (42)     [daily] = noop
  5503. rlm_counter: We only run on Accounting-Stop packets
  5504. (42)     [weekly] = noop
  5505. rlm_counter: We only run on Accounting-Stop packets
  5506. (42)     [monthly] = noop
  5507. rlm_counter: We only run on Accounting-Stop packets
  5508. (42)     [forever] = noop
  5509. (42)     [exec] = noop
  5510. (42) attr_filter.accounting_response: EXPAND %{User-Name}
  5511. (42) attr_filter.accounting_response:    --> anand
  5512. (42) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  5513. (42)     [attr_filter.accounting_response] = updated
  5514. (42)   } # accounting = updated
  5515. (42) Sent Accounting-Response Id 107 from 192.168.200.1:1813 to 192.168.200.1:7634 length 0
  5516. (42) Finished request
  5517. (42) Cleaning up request packet ID 107 with timestamp +392
  5518. Waking up in 4.8 seconds.
  5519. (43) Received Access-Request Id 60 from 192.168.200.1:30503 to 192.168.200.1:1812 length 160
  5520. (43)   Service-Type = Login-User
  5521. (43)   User-Name = "anand"
  5522. (43)   User-Password = "9829012834"
  5523. (43)   NAS-IP-Address = 192.168.200.1
  5524. (43)   NAS-Identifier = "CaptivePortal-office_zone"
  5525. (43)   Calling-Station-Id = "da:54:db:27:ae:2b"
  5526. (43)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5527. (43)   NAS-Port-Type = Ethernet
  5528. (43)   NAS-Port = 2004
  5529. (43)   Framed-IP-Address = 192.168.200.203
  5530. (43) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  5531. (43)   authorize {
  5532. (43)     [preprocess] = ok
  5533. (43)     [chap] = noop
  5534. (43)     [mschap] = noop
  5535. (43)     [digest] = noop
  5536. (43) suffix: Checking for suffix after "@"
  5537. (43) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5538. (43)     [suffix] = noop
  5539. (43) ntdomain: Checking for prefix before "\"
  5540. (43) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5541. (43)     [ntdomain] = noop
  5542. (43) eap: No EAP-Message, not doing EAP
  5543. (43)     [eap] = noop
  5544. (43) files: users: Matched entry DEFAULT at line 1
  5545. (43) files: users: Matched entry anand at line 4
  5546. (43)     [files] = ok
  5547. rlm_counter: Entering module authorize code
  5548. rlm_counter: Could not find Check item value pair
  5549. (43)     [daily] = noop
  5550. rlm_counter: Entering module authorize code
  5551. rlm_counter: Could not find Check item value pair
  5552. (43)     [weekly] = noop
  5553. rlm_counter: Entering module authorize code
  5554. rlm_counter: Could not find Check item value pair
  5555. (43)     [monthly] = noop
  5556. rlm_counter: Entering module authorize code
  5557. rlm_counter: Could not find Check item value pair
  5558. (43)     [forever] = noop
  5559. (43)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  5560. (43)     ERROR: Failed retrieving values required to evaluate condition
  5561. (43)     [expiration] = noop
  5562. (43)     [logintime] = noop
  5563. (43)     [pap] = updated
  5564. (43)   } # authorize = updated
  5565. (43) Found Auth-Type = PAP
  5566. (43) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  5567. (43)   Auth-Type PAP {
  5568. (43) pap: Login attempt with password
  5569. (43) pap: Comparing with "known good" Cleartext-Password
  5570. (43) pap: User authenticated successfully
  5571. (43)     [pap] = ok
  5572. (43)   } # Auth-Type PAP = ok
  5573. (43) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  5574. (43)   session {
  5575. (43) radutmp: EXPAND /var/log/radutmp
  5576. (43) radutmp:    --> /var/log/radutmp
  5577. (43) radutmp: EXPAND %{User-Name}
  5578. (43) radutmp:    --> anand
  5579. checkrad: No NAS type, or type "other" not checking
  5580. checkrad: No NAS type, or type "other" not checking
  5581. checkrad: No NAS type, or type "other" not checking
  5582. (43)     [radutmp] = fail
  5583. (43)   } # session = fail
  5584. (43) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  5585. (43)   post-auth {
  5586. (43)     update {
  5587. (43)       No attributes updated for RHS &session-state:
  5588. (43)     } # update = noop
  5589. (43)     [exec] = noop
  5590. (43)     policy remove_reply_message_if_eap {
  5591. (43)       if (&reply:EAP-Message && &reply:Reply-Message) {
  5592. (43)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  5593. (43)       else {
  5594. (43)         [noop] = noop
  5595. (43)       } # else = noop
  5596. (43)     } # policy remove_reply_message_if_eap = noop
  5597. (43)   } # post-auth = noop
  5598. (43) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  5599. (43) Sent Access-Accept Id 60 from 192.168.200.1:1812 to 192.168.200.1:30503 length 0
  5600. (43) Finished request
  5601. Waking up in 4.8 seconds.
  5602. (39) Cleaning up request packet ID 33 with timestamp +392
  5603. (41) Cleaning up request packet ID 163 with timestamp +392
  5604. (43) Cleaning up request packet ID 60 with timestamp +392
  5605. Ready to process requests
  5606. (44) Received Accounting-Request Id 156 from 192.168.200.1:33311 to 192.168.200.1:1813 length 214
  5607. (44)   Service-Type = Login-User
  5608. (44)   User-Name = "anand"
  5609. (44)   Acct-Status-Type = Interim-Update
  5610. (44)   Acct-Authentic = RADIUS
  5611. (44)   NAS-IP-Address = 192.168.200.1
  5612. (44)   NAS-Identifier = "CaptivePortal-office_zone"
  5613. (44)   NAS-Port-Type = Ethernet
  5614. (44)   NAS-Port = 2000
  5615. (44)   Acct-Session-Id = "874681d3614b1b36"
  5616. (44)   Framed-IP-Address = 192.168.200.201
  5617. (44)   Calling-Station-Id = "e6:8f:99:48:85:89"
  5618. (44)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5619. (44)   Acct-Input-Packets = 657
  5620. (44)   Acct-Input-Octets = 87742
  5621. (44)   Acct-Output-Packets = 765
  5622. (44)   Acct-Output-Octets = 373997
  5623. (44)   Acct-Session-Time = 434
  5624. (44)   Acct-Output-Gigawords = 0
  5625. (44)   Acct-Input-Gigawords = 0
  5626. (44) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  5627. (44)   preacct {
  5628. (44)     [preprocess] = ok
  5629. (44)     update request {
  5630. (44)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  5631. (44)          --> 1586901159
  5632. (44)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  5633. (44)     } # update request = noop
  5634. (44)     policy acct_unique {
  5635. (44)       update request {
  5636. (44)         &Tmp-String-9 := "ai:"
  5637. (44)       } # update request = noop
  5638. (44)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  5639. (44)       EXPAND %{hex:&Class}
  5640. (44)          -->
  5641. (44)       EXPAND ^%{hex:&Tmp-String-9}
  5642. (44)          --> ^61693a
  5643. (44)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  5644. (44)       else {
  5645. (44)         update request {
  5646. (44)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  5647. (44)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  5648. (44)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  5649. (44)         } # update request = noop
  5650. (44)       } # else = noop
  5651. (44)     } # policy acct_unique = noop
  5652. (44) suffix: Checking for suffix after "@"
  5653. (44) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5654. (44)     [suffix] = noop
  5655. (44) ntdomain: Checking for prefix before "\"
  5656. (44) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5657. (44)     [ntdomain] = noop
  5658. (44)     [files] = noop
  5659. (44)   } # preacct = ok
  5660. (44) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  5661. (44)   accounting {
  5662. (44) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  5663. (44) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  5664. (44) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  5665. (44) detail: EXPAND %t
  5666. (44) detail:    --> Wed Apr 15 03:29:53 2020
  5667. (44)     [detail] = ok
  5668. (44)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  5669. (44)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  5670. (44)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  5671. (44) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5672. (44) datacounterdaily: EXPAND %{request:User-Name}
  5673. (44) datacounterdaily:    --> anand
  5674. (44) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  5675. (44) datacounterdaily:    --> 87742
  5676. (44) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  5677. (44) datacounterdaily:    --> 373997
  5678. (44) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  5679. (44) datacounterdaily:    --> Interim-Update
  5680. (44) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  5681. (44) datacounterdaily:    --> 874681d3614b1b36
  5682. (44) datacounterdaily: Program returned code (0) and output ''
  5683. (44) datacounterdaily: Program executed successfully
  5684. (44)       [datacounterdaily] = ok
  5685. (44) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5686. (44) datacounterweekly: EXPAND %{request:User-Name}
  5687. (44) datacounterweekly:    --> anand
  5688. (44) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  5689. (44) datacounterweekly:    --> 87742
  5690. (44) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  5691. (44) datacounterweekly:    --> 373997
  5692. (44) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  5693. (44) datacounterweekly:    --> Interim-Update
  5694. (44) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  5695. (44) datacounterweekly:    --> 874681d3614b1b36
  5696. (44) datacounterweekly: Program returned code (0) and output ''
  5697. (44) datacounterweekly: Program executed successfully
  5698. (44)       [datacounterweekly] = ok
  5699. (44) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5700. (44) datacountermonthly: EXPAND %{request:User-Name}
  5701. (44) datacountermonthly:    --> anand
  5702. (44) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  5703. (44) datacountermonthly:    --> 87742
  5704. (44) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  5705. (44) datacountermonthly:    --> 373997
  5706. (44) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  5707. (44) datacountermonthly:    --> Interim-Update
  5708. (44) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  5709. (44) datacountermonthly:    --> 874681d3614b1b36
  5710. (44) datacountermonthly: Program returned code (0) and output ''
  5711. (44) datacountermonthly: Program executed successfully
  5712. (44)       [datacountermonthly] = ok
  5713. (44) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5714. (44) datacounterforever: EXPAND %{request:User-Name}
  5715. (44) datacounterforever:    --> anand
  5716. (44) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  5717. (44) datacounterforever:    --> 87742
  5718. (44) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  5719. (44) datacounterforever:    --> 373997
  5720. (44) datacounterforever: EXPAND %{request:Acct-Status-Type}
  5721. (44) datacounterforever:    --> Interim-Update
  5722. (44) datacounterforever: EXPAND %{request:Acct-Session-Id}
  5723. (44) datacounterforever:    --> 874681d3614b1b36
  5724. (44) datacounterforever: Program returned code (0) and output ''
  5725. (44) datacounterforever: Program executed successfully
  5726. (44)       [datacounterforever] = ok
  5727. (44)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  5728. (44) radutmp: EXPAND /var/log/radutmp
  5729. (44) radutmp:    --> /var/log/radutmp
  5730. (44) radutmp: EXPAND %{User-Name}
  5731. (44) radutmp:    --> anand
  5732. (44)     [radutmp] = ok
  5733. rlm_counter: We only run on Accounting-Stop packets
  5734. (44)     [daily] = noop
  5735. rlm_counter: We only run on Accounting-Stop packets
  5736. (44)     [weekly] = noop
  5737. rlm_counter: We only run on Accounting-Stop packets
  5738. (44)     [monthly] = noop
  5739. rlm_counter: We only run on Accounting-Stop packets
  5740. (44)     [forever] = noop
  5741. (44)     [exec] = noop
  5742. (44) attr_filter.accounting_response: EXPAND %{User-Name}
  5743. (44) attr_filter.accounting_response:    --> anand
  5744. (44) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  5745. (44)     [attr_filter.accounting_response] = updated
  5746. (44)   } # accounting = updated
  5747. (44) Sent Accounting-Response Id 156 from 192.168.200.1:1813 to 192.168.200.1:33311 length 0
  5748. (44) Finished request
  5749. (44) Cleaning up request packet ID 156 with timestamp +453
  5750. Ready to process requests
  5751. (45) Received Access-Request Id 225 from 192.168.200.1:49980 to 192.168.200.1:1812 length 160
  5752. (45)   Service-Type = Login-User
  5753. (45)   User-Name = "anand"
  5754. (45)   User-Password = "9829012834"
  5755. (45)   NAS-IP-Address = 192.168.200.1
  5756. (45)   NAS-Identifier = "CaptivePortal-office_zone"
  5757. (45)   Calling-Station-Id = "e6:8f:99:48:85:89"
  5758. (45)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5759. (45)   NAS-Port-Type = Ethernet
  5760. (45)   NAS-Port = 2000
  5761. (45)   Framed-IP-Address = 192.168.200.201
  5762. (45) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  5763. (45)   authorize {
  5764. (45)     [preprocess] = ok
  5765. (45)     [chap] = noop
  5766. (45)     [mschap] = noop
  5767. (45)     [digest] = noop
  5768. (45) suffix: Checking for suffix after "@"
  5769. (45) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5770. (45)     [suffix] = noop
  5771. (45) ntdomain: Checking for prefix before "\"
  5772. (45) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5773. (45)     [ntdomain] = noop
  5774. (45) eap: No EAP-Message, not doing EAP
  5775. (45)     [eap] = noop
  5776. (45) files: users: Matched entry DEFAULT at line 1
  5777. (45) files: users: Matched entry anand at line 4
  5778. (45)     [files] = ok
  5779. rlm_counter: Entering module authorize code
  5780. rlm_counter: Could not find Check item value pair
  5781. (45)     [daily] = noop
  5782. rlm_counter: Entering module authorize code
  5783. rlm_counter: Could not find Check item value pair
  5784. (45)     [weekly] = noop
  5785. rlm_counter: Entering module authorize code
  5786. rlm_counter: Could not find Check item value pair
  5787. (45)     [monthly] = noop
  5788. rlm_counter: Entering module authorize code
  5789. rlm_counter: Could not find Check item value pair
  5790. (45)     [forever] = noop
  5791. (45)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  5792. (45)     ERROR: Failed retrieving values required to evaluate condition
  5793. (45)     [expiration] = noop
  5794. (45)     [logintime] = noop
  5795. (45)     [pap] = updated
  5796. (45)   } # authorize = updated
  5797. (45) Found Auth-Type = PAP
  5798. (45) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  5799. (45)   Auth-Type PAP {
  5800. (45) pap: Login attempt with password
  5801. (45) pap: Comparing with "known good" Cleartext-Password
  5802. (45) pap: User authenticated successfully
  5803. (45)     [pap] = ok
  5804. (45)   } # Auth-Type PAP = ok
  5805. (45) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  5806. (45)   session {
  5807. (45) radutmp: EXPAND /var/log/radutmp
  5808. (45) radutmp:    --> /var/log/radutmp
  5809. (45) radutmp: EXPAND %{User-Name}
  5810. (45) radutmp:    --> anand
  5811. checkrad: No NAS type, or type "other" not checking
  5812. checkrad: No NAS type, or type "other" not checking
  5813. checkrad: No NAS type, or type "other" not checking
  5814. (45)     [radutmp] = fail
  5815. (45)   } # session = fail
  5816. (45) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  5817. (45)   post-auth {
  5818. (45)     update {
  5819. (45)       No attributes updated for RHS &session-state:
  5820. (45)     } # update = noop
  5821. (45)     [exec] = noop
  5822. (45)     policy remove_reply_message_if_eap {
  5823. (45)       if (&reply:EAP-Message && &reply:Reply-Message) {
  5824. (45)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  5825. (45)       else {
  5826. (45)         [noop] = noop
  5827. (45)       } # else = noop
  5828. (45)     } # policy remove_reply_message_if_eap = noop
  5829. (45)   } # post-auth = noop
  5830. (45) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  5831. (45) Sent Access-Accept Id 225 from 192.168.200.1:1812 to 192.168.200.1:49980 length 0
  5832. (45) Finished request
  5833. Waking up in 4.9 seconds.
  5834. (46) Received Accounting-Request Id 165 from 192.168.200.1:17192 to 192.168.200.1:1813 length 214
  5835. (46)   Service-Type = Login-User
  5836. (46)   User-Name = "anand"
  5837. (46)   Acct-Status-Type = Interim-Update
  5838. (46)   Acct-Authentic = RADIUS
  5839. (46)   NAS-IP-Address = 192.168.200.1
  5840. (46)   NAS-Identifier = "CaptivePortal-office_zone"
  5841. (46)   NAS-Port-Type = Ethernet
  5842. (46)   NAS-Port = 2002
  5843. (46)   Acct-Session-Id = "6974b7d556ed613e"
  5844. (46)   Framed-IP-Address = 192.168.200.202
  5845. (46)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  5846. (46)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5847. (46)   Acct-Input-Packets = 3495
  5848. (46)   Acct-Input-Octets = 787060
  5849. (46)   Acct-Output-Packets = 8378
  5850. (46)   Acct-Output-Octets = 10400969
  5851. (46)   Acct-Session-Time = 403
  5852. (46)   Acct-Output-Gigawords = 0
  5853. (46)   Acct-Input-Gigawords = 0
  5854. (46) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  5855. (46)   preacct {
  5856. (46)     [preprocess] = ok
  5857. (46)     update request {
  5858. (46)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  5859. (46)          --> 1586901190
  5860. (46)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  5861. (46)     } # update request = noop
  5862. (46)     policy acct_unique {
  5863. (46)       update request {
  5864. (46)         &Tmp-String-9 := "ai:"
  5865. (46)       } # update request = noop
  5866. (46)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  5867. (46)       EXPAND %{hex:&Class}
  5868. (46)          -->
  5869. (46)       EXPAND ^%{hex:&Tmp-String-9}
  5870. (46)          --> ^61693a
  5871. (46)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  5872. (46)       else {
  5873. (46)         update request {
  5874. (46)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  5875. (46)              --> 9a9488f2d0124a4aa7feb209bced26bb
  5876. (46)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  5877. (46)         } # update request = noop
  5878. (46)       } # else = noop
  5879. (46)     } # policy acct_unique = noop
  5880. (46) suffix: Checking for suffix after "@"
  5881. (46) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5882. (46)     [suffix] = noop
  5883. (46) ntdomain: Checking for prefix before "\"
  5884. (46) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  5885. (46)     [ntdomain] = noop
  5886. (46)     [files] = noop
  5887. (46)   } # preacct = ok
  5888. (46) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  5889. (46)   accounting {
  5890. (46) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  5891. (46) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  5892. (46) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  5893. (46) detail: EXPAND %t
  5894. (46) detail:    --> Wed Apr 15 03:29:53 2020
  5895. (46)     [detail] = ok
  5896. (46)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  5897. (46)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  5898. (46)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  5899. (46) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5900. (46) datacounterdaily: EXPAND %{request:User-Name}
  5901. (46) datacounterdaily:    --> anand
  5902. (46) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  5903. (46) datacounterdaily:    --> 787060
  5904. (46) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  5905. (46) datacounterdaily:    --> 10400969
  5906. (46) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  5907. (46) datacounterdaily:    --> Interim-Update
  5908. (46) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  5909. (46) datacounterdaily:    --> 6974b7d556ed613e
  5910. (46) datacounterdaily: Program returned code (0) and output ''
  5911. (46) datacounterdaily: Program executed successfully
  5912. (46)       [datacounterdaily] = ok
  5913. (46) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5914. (46) datacounterweekly: EXPAND %{request:User-Name}
  5915. (46) datacounterweekly:    --> anand
  5916. (46) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  5917. (46) datacounterweekly:    --> 787060
  5918. (46) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  5919. (46) datacounterweekly:    --> 10400969
  5920. (46) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  5921. (46) datacounterweekly:    --> Interim-Update
  5922. (46) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  5923. (46) datacounterweekly:    --> 6974b7d556ed613e
  5924. (46) datacounterweekly: Program returned code (0) and output ''
  5925. (46) datacounterweekly: Program executed successfully
  5926. (46)       [datacounterweekly] = ok
  5927. (46) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5928. (46) datacountermonthly: EXPAND %{request:User-Name}
  5929. (46) datacountermonthly:    --> anand
  5930. (46) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  5931. (46) datacountermonthly:    --> 787060
  5932. (46) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  5933. (46) datacountermonthly:    --> 10400969
  5934. (46) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  5935. (46) datacountermonthly:    --> Interim-Update
  5936. (46) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  5937. (46) datacountermonthly:    --> 6974b7d556ed613e
  5938. (46) datacountermonthly: Program returned code (0) and output ''
  5939. (46) datacountermonthly: Program executed successfully
  5940. (46)       [datacountermonthly] = ok
  5941. (46) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  5942. (46) datacounterforever: EXPAND %{request:User-Name}
  5943. (46) datacounterforever:    --> anand
  5944. (46) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  5945. (46) datacounterforever:    --> 787060
  5946. (46) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  5947. (46) datacounterforever:    --> 10400969
  5948. (46) datacounterforever: EXPAND %{request:Acct-Status-Type}
  5949. (46) datacounterforever:    --> Interim-Update
  5950. (46) datacounterforever: EXPAND %{request:Acct-Session-Id}
  5951. (46) datacounterforever:    --> 6974b7d556ed613e
  5952. (46) datacounterforever: Program returned code (0) and output ''
  5953. (46) datacounterforever: Program executed successfully
  5954. (46)       [datacounterforever] = ok
  5955. (46)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  5956. (46) radutmp: EXPAND /var/log/radutmp
  5957. (46) radutmp:    --> /var/log/radutmp
  5958. (46) radutmp: EXPAND %{User-Name}
  5959. (46) radutmp:    --> anand
  5960. (46)     [radutmp] = ok
  5961. rlm_counter: We only run on Accounting-Stop packets
  5962. (46)     [daily] = noop
  5963. rlm_counter: We only run on Accounting-Stop packets
  5964. (46)     [weekly] = noop
  5965. rlm_counter: We only run on Accounting-Stop packets
  5966. (46)     [monthly] = noop
  5967. rlm_counter: We only run on Accounting-Stop packets
  5968. (46)     [forever] = noop
  5969. (46)     [exec] = noop
  5970. (46) attr_filter.accounting_response: EXPAND %{User-Name}
  5971. (46) attr_filter.accounting_response:    --> anand
  5972. (46) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  5973. (46)     [attr_filter.accounting_response] = updated
  5974. (46)   } # accounting = updated
  5975. (46) Sent Accounting-Response Id 165 from 192.168.200.1:1813 to 192.168.200.1:17192 length 0
  5976. (46) Finished request
  5977. (46) Cleaning up request packet ID 165 with timestamp +453
  5978. Waking up in 4.8 seconds.
  5979. (47) Received Access-Request Id 111 from 192.168.200.1:31941 to 192.168.200.1:1812 length 160
  5980. (47)   Service-Type = Login-User
  5981. (47)   User-Name = "anand"
  5982. (47)   User-Password = "9829012834"
  5983. (47)   NAS-IP-Address = 192.168.200.1
  5984. (47)   NAS-Identifier = "CaptivePortal-office_zone"
  5985. (47)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  5986. (47)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  5987. (47)   NAS-Port-Type = Ethernet
  5988. (47)   NAS-Port = 2002
  5989. (47)   Framed-IP-Address = 192.168.200.202
  5990. (47) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  5991. (47)   authorize {
  5992. (47)     [preprocess] = ok
  5993. (47)     [chap] = noop
  5994. (47)     [mschap] = noop
  5995. (47)     [digest] = noop
  5996. (47) suffix: Checking for suffix after "@"
  5997. (47) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  5998. (47)     [suffix] = noop
  5999. (47) ntdomain: Checking for prefix before "\"
  6000. (47) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6001. (47)     [ntdomain] = noop
  6002. (47) eap: No EAP-Message, not doing EAP
  6003. (47)     [eap] = noop
  6004. (47) files: users: Matched entry DEFAULT at line 1
  6005. (47) files: users: Matched entry anand at line 4
  6006. (47)     [files] = ok
  6007. rlm_counter: Entering module authorize code
  6008. rlm_counter: Could not find Check item value pair
  6009. (47)     [daily] = noop
  6010. rlm_counter: Entering module authorize code
  6011. rlm_counter: Could not find Check item value pair
  6012. (47)     [weekly] = noop
  6013. rlm_counter: Entering module authorize code
  6014. rlm_counter: Could not find Check item value pair
  6015. (47)     [monthly] = noop
  6016. rlm_counter: Entering module authorize code
  6017. rlm_counter: Could not find Check item value pair
  6018. (47)     [forever] = noop
  6019. (47)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  6020. (47)     ERROR: Failed retrieving values required to evaluate condition
  6021. (47)     [expiration] = noop
  6022. (47)     [logintime] = noop
  6023. (47)     [pap] = updated
  6024. (47)   } # authorize = updated
  6025. (47) Found Auth-Type = PAP
  6026. (47) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  6027. (47)   Auth-Type PAP {
  6028. (47) pap: Login attempt with password
  6029. (47) pap: Comparing with "known good" Cleartext-Password
  6030. (47) pap: User authenticated successfully
  6031. (47)     [pap] = ok
  6032. (47)   } # Auth-Type PAP = ok
  6033. (47) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  6034. (47)   session {
  6035. (47) radutmp: EXPAND /var/log/radutmp
  6036. (47) radutmp:    --> /var/log/radutmp
  6037. (47) radutmp: EXPAND %{User-Name}
  6038. (47) radutmp:    --> anand
  6039. checkrad: No NAS type, or type "other" not checking
  6040. checkrad: No NAS type, or type "other" not checking
  6041. checkrad: No NAS type, or type "other" not checking
  6042. (47)     [radutmp] = fail
  6043. (47)   } # session = fail
  6044. (47) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  6045. (47)   post-auth {
  6046. (47)     update {
  6047. (47)       No attributes updated for RHS &session-state:
  6048. (47)     } # update = noop
  6049. (47)     [exec] = noop
  6050. (47)     policy remove_reply_message_if_eap {
  6051. (47)       if (&reply:EAP-Message && &reply:Reply-Message) {
  6052. (47)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  6053. (47)       else {
  6054. (47)         [noop] = noop
  6055. (47)       } # else = noop
  6056. (47)     } # policy remove_reply_message_if_eap = noop
  6057. (47)   } # post-auth = noop
  6058. (47) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  6059. (47) Sent Access-Accept Id 111 from 192.168.200.1:1812 to 192.168.200.1:31941 length 0
  6060. (47) Finished request
  6061. Waking up in 4.8 seconds.
  6062. (48) Received Accounting-Request Id 202 from 192.168.200.1:22855 to 192.168.200.1:1813 length 214
  6063. (48)   Service-Type = Login-User
  6064. (48)   User-Name = "anand"
  6065. (48)   Acct-Status-Type = Interim-Update
  6066. (48)   Acct-Authentic = RADIUS
  6067. (48)   NAS-IP-Address = 192.168.200.1
  6068. (48)   NAS-Identifier = "CaptivePortal-office_zone"
  6069. (48)   NAS-Port-Type = Ethernet
  6070. (48)   NAS-Port = 2004
  6071. (48)   Acct-Session-Id = "d4f8574cf15bdf9b"
  6072. (48)   Framed-IP-Address = 192.168.200.203
  6073. (48)   Calling-Station-Id = "da:54:db:27:ae:2b"
  6074. (48)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6075. (48)   Acct-Input-Packets = 45
  6076. (48)   Acct-Input-Octets = 14312
  6077. (48)   Acct-Output-Packets = 36
  6078. (48)   Acct-Output-Octets = 6753
  6079. (48)   Acct-Session-Time = 390
  6080. (48)   Acct-Output-Gigawords = 0
  6081. (48)   Acct-Input-Gigawords = 0
  6082. (48) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  6083. (48)   preacct {
  6084. (48)     [preprocess] = ok
  6085. (48)     update request {
  6086. (48)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  6087. (48)          --> 1586901203
  6088. (48)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  6089. (48)     } # update request = noop
  6090. (48)     policy acct_unique {
  6091. (48)       update request {
  6092. (48)         &Tmp-String-9 := "ai:"
  6093. (48)       } # update request = noop
  6094. (48)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  6095. (48)       EXPAND %{hex:&Class}
  6096. (48)          -->
  6097. (48)       EXPAND ^%{hex:&Tmp-String-9}
  6098. (48)          --> ^61693a
  6099. (48)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  6100. (48)       else {
  6101. (48)         update request {
  6102. (48)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  6103. (48)              --> 8540a37c864a86b96f7917819f3d70c9
  6104. (48)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  6105. (48)         } # update request = noop
  6106. (48)       } # else = noop
  6107. (48)     } # policy acct_unique = noop
  6108. (48) suffix: Checking for suffix after "@"
  6109. (48) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6110. (48)     [suffix] = noop
  6111. (48) ntdomain: Checking for prefix before "\"
  6112. (48) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6113. (48)     [ntdomain] = noop
  6114. (48)     [files] = noop
  6115. (48)   } # preacct = ok
  6116. (48) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  6117. (48)   accounting {
  6118. (48) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  6119. (48) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  6120. (48) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  6121. (48) detail: EXPAND %t
  6122. (48) detail:    --> Wed Apr 15 03:29:53 2020
  6123. (48)     [detail] = ok
  6124. (48)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  6125. (48)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  6126. (48)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  6127. (48) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6128. (48) datacounterdaily: EXPAND %{request:User-Name}
  6129. (48) datacounterdaily:    --> anand
  6130. (48) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  6131. (48) datacounterdaily:    --> 14312
  6132. (48) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  6133. (48) datacounterdaily:    --> 6753
  6134. (48) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  6135. (48) datacounterdaily:    --> Interim-Update
  6136. (48) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  6137. (48) datacounterdaily:    --> d4f8574cf15bdf9b
  6138. (48) datacounterdaily: Program returned code (0) and output ''
  6139. (48) datacounterdaily: Program executed successfully
  6140. (48)       [datacounterdaily] = ok
  6141. (48) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6142. (48) datacounterweekly: EXPAND %{request:User-Name}
  6143. (48) datacounterweekly:    --> anand
  6144. (48) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  6145. (48) datacounterweekly:    --> 14312
  6146. (48) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  6147. (48) datacounterweekly:    --> 6753
  6148. (48) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  6149. (48) datacounterweekly:    --> Interim-Update
  6150. (48) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  6151. (48) datacounterweekly:    --> d4f8574cf15bdf9b
  6152. (48) datacounterweekly: Program returned code (0) and output ''
  6153. (48) datacounterweekly: Program executed successfully
  6154. (48)       [datacounterweekly] = ok
  6155. (48) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6156. (48) datacountermonthly: EXPAND %{request:User-Name}
  6157. (48) datacountermonthly:    --> anand
  6158. (48) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  6159. (48) datacountermonthly:    --> 14312
  6160. (48) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  6161. (48) datacountermonthly:    --> 6753
  6162. (48) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  6163. (48) datacountermonthly:    --> Interim-Update
  6164. (48) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  6165. (48) datacountermonthly:    --> d4f8574cf15bdf9b
  6166. (48) datacountermonthly: Program returned code (0) and output ''
  6167. (48) datacountermonthly: Program executed successfully
  6168. (48)       [datacountermonthly] = ok
  6169. (48) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6170. (48) datacounterforever: EXPAND %{request:User-Name}
  6171. (48) datacounterforever:    --> anand
  6172. (48) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  6173. (48) datacounterforever:    --> 14312
  6174. (48) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  6175. (48) datacounterforever:    --> 6753
  6176. (48) datacounterforever: EXPAND %{request:Acct-Status-Type}
  6177. (48) datacounterforever:    --> Interim-Update
  6178. (48) datacounterforever: EXPAND %{request:Acct-Session-Id}
  6179. (48) datacounterforever:    --> d4f8574cf15bdf9b
  6180. (48) datacounterforever: Program returned code (0) and output ''
  6181. (48) datacounterforever: Program executed successfully
  6182. (48)       [datacounterforever] = ok
  6183. (48)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  6184. (48) radutmp: EXPAND /var/log/radutmp
  6185. (48) radutmp:    --> /var/log/radutmp
  6186. (48) radutmp: EXPAND %{User-Name}
  6187. (48) radutmp:    --> anand
  6188. (48)     [radutmp] = ok
  6189. rlm_counter: We only run on Accounting-Stop packets
  6190. (48)     [daily] = noop
  6191. rlm_counter: We only run on Accounting-Stop packets
  6192. (48)     [weekly] = noop
  6193. rlm_counter: We only run on Accounting-Stop packets
  6194. (48)     [monthly] = noop
  6195. rlm_counter: We only run on Accounting-Stop packets
  6196. (48)     [forever] = noop
  6197. (48)     [exec] = noop
  6198. (48) attr_filter.accounting_response: EXPAND %{User-Name}
  6199. (48) attr_filter.accounting_response:    --> anand
  6200. (48) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  6201. (48)     [attr_filter.accounting_response] = updated
  6202. (48)   } # accounting = updated
  6203. (48) Sent Accounting-Response Id 202 from 192.168.200.1:1813 to 192.168.200.1:22855 length 0
  6204. (48) Finished request
  6205. (48) Cleaning up request packet ID 202 with timestamp +453
  6206. Waking up in 4.6 seconds.
  6207. (49) Received Access-Request Id 12 from 192.168.200.1:31244 to 192.168.200.1:1812 length 160
  6208. (49)   Service-Type = Login-User
  6209. (49)   User-Name = "anand"
  6210. (49)   User-Password = "9829012834"
  6211. (49)   NAS-IP-Address = 192.168.200.1
  6212. (49)   NAS-Identifier = "CaptivePortal-office_zone"
  6213. (49)   Calling-Station-Id = "da:54:db:27:ae:2b"
  6214. (49)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6215. (49)   NAS-Port-Type = Ethernet
  6216. (49)   NAS-Port = 2004
  6217. (49)   Framed-IP-Address = 192.168.200.203
  6218. (49) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  6219. (49)   authorize {
  6220. (49)     [preprocess] = ok
  6221. (49)     [chap] = noop
  6222. (49)     [mschap] = noop
  6223. (49)     [digest] = noop
  6224. (49) suffix: Checking for suffix after "@"
  6225. (49) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6226. (49)     [suffix] = noop
  6227. (49) ntdomain: Checking for prefix before "\"
  6228. (49) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6229. (49)     [ntdomain] = noop
  6230. (49) eap: No EAP-Message, not doing EAP
  6231. (49)     [eap] = noop
  6232. (49) files: users: Matched entry DEFAULT at line 1
  6233. (49) files: users: Matched entry anand at line 4
  6234. (49)     [files] = ok
  6235. rlm_counter: Entering module authorize code
  6236. rlm_counter: Could not find Check item value pair
  6237. (49)     [daily] = noop
  6238. rlm_counter: Entering module authorize code
  6239. rlm_counter: Could not find Check item value pair
  6240. (49)     [weekly] = noop
  6241. rlm_counter: Entering module authorize code
  6242. rlm_counter: Could not find Check item value pair
  6243. (49)     [monthly] = noop
  6244. rlm_counter: Entering module authorize code
  6245. rlm_counter: Could not find Check item value pair
  6246. (49)     [forever] = noop
  6247. (49)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  6248. (49)     ERROR: Failed retrieving values required to evaluate condition
  6249. (49)     [expiration] = noop
  6250. (49)     [logintime] = noop
  6251. (49)     [pap] = updated
  6252. (49)   } # authorize = updated
  6253. (49) Found Auth-Type = PAP
  6254. (49) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  6255. (49)   Auth-Type PAP {
  6256. (49) pap: Login attempt with password
  6257. (49) pap: Comparing with "known good" Cleartext-Password
  6258. (49) pap: User authenticated successfully
  6259. (49)     [pap] = ok
  6260. (49)   } # Auth-Type PAP = ok
  6261. (49) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  6262. (49)   session {
  6263. (49) radutmp: EXPAND /var/log/radutmp
  6264. (49) radutmp:    --> /var/log/radutmp
  6265. (49) radutmp: EXPAND %{User-Name}
  6266. (49) radutmp:    --> anand
  6267. checkrad: No NAS type, or type "other" not checking
  6268. checkrad: No NAS type, or type "other" not checking
  6269. checkrad: No NAS type, or type "other" not checking
  6270. (49)     [radutmp] = fail
  6271. (49)   } # session = fail
  6272. (49) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  6273. (49)   post-auth {
  6274. (49)     update {
  6275. (49)       No attributes updated for RHS &session-state:
  6276. (49)     } # update = noop
  6277. (49)     [exec] = noop
  6278. (49)     policy remove_reply_message_if_eap {
  6279. (49)       if (&reply:EAP-Message && &reply:Reply-Message) {
  6280. (49)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  6281. (49)       else {
  6282. (49)         [noop] = noop
  6283. (49)       } # else = noop
  6284. (49)     } # policy remove_reply_message_if_eap = noop
  6285. (49)   } # post-auth = noop
  6286. (49) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  6287. (49) Sent Access-Accept Id 12 from 192.168.200.1:1812 to 192.168.200.1:31244 length 0
  6288. (49) Finished request
  6289. Waking up in 4.6 seconds.
  6290. (45) Cleaning up request packet ID 225 with timestamp +453
  6291. Waking up in 0.1 seconds.
  6292. (47) Cleaning up request packet ID 111 with timestamp +453
  6293. Waking up in 0.1 seconds.
  6294. (49) Cleaning up request packet ID 12 with timestamp +453
  6295. Ready to process requests
  6296. (50) Received Accounting-Request Id 3 from 192.168.200.1:51532 to 192.168.200.1:1813 length 214
  6297. (50)   Service-Type = Login-User
  6298. (50)   User-Name = "anand"
  6299. (50)   Acct-Status-Type = Interim-Update
  6300. (50)   Acct-Authentic = RADIUS
  6301. (50)   NAS-IP-Address = 192.168.200.1
  6302. (50)   NAS-Identifier = "CaptivePortal-office_zone"
  6303. (50)   NAS-Port-Type = Ethernet
  6304. (50)   NAS-Port = 2000
  6305. (50)   Acct-Session-Id = "874681d3614b1b36"
  6306. (50)   Framed-IP-Address = 192.168.200.201
  6307. (50)   Calling-Station-Id = "e6:8f:99:48:85:89"
  6308. (50)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6309. (50)   Acct-Input-Packets = 689
  6310. (50)   Acct-Input-Octets = 91424
  6311. (50)   Acct-Output-Packets = 800
  6312. (50)   Acct-Output-Octets = 385425
  6313. (50)   Acct-Session-Time = 495
  6314. (50)   Acct-Output-Gigawords = 0
  6315. (50)   Acct-Input-Gigawords = 0
  6316. (50) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  6317. (50)   preacct {
  6318. (50)     [preprocess] = ok
  6319. (50)     update request {
  6320. (50)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  6321. (50)          --> 1586901159
  6322. (50)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:22:39 IST
  6323. (50)     } # update request = noop
  6324. (50)     policy acct_unique {
  6325. (50)       update request {
  6326. (50)         &Tmp-String-9 := "ai:"
  6327. (50)       } # update request = noop
  6328. (50)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  6329. (50)       EXPAND %{hex:&Class}
  6330. (50)          -->
  6331. (50)       EXPAND ^%{hex:&Tmp-String-9}
  6332. (50)          --> ^61693a
  6333. (50)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  6334. (50)       else {
  6335. (50)         update request {
  6336. (50)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  6337. (50)              --> e2bf9a1906461b593a1e0e2eb83e1d42
  6338. (50)           &Acct-Unique-Session-Id := e2bf9a1906461b593a1e0e2eb83e1d42
  6339. (50)         } # update request = noop
  6340. (50)       } # else = noop
  6341. (50)     } # policy acct_unique = noop
  6342. (50) suffix: Checking for suffix after "@"
  6343. (50) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6344. (50)     [suffix] = noop
  6345. (50) ntdomain: Checking for prefix before "\"
  6346. (50) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6347. (50)     [ntdomain] = noop
  6348. (50)     [files] = noop
  6349. (50)   } # preacct = ok
  6350. (50) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  6351. (50)   accounting {
  6352. (50) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  6353. (50) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  6354. (50) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  6355. (50) detail: EXPAND %t
  6356. (50) detail:    --> Wed Apr 15 03:30:54 2020
  6357. (50)     [detail] = ok
  6358. (50)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  6359. (50)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  6360. (50)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  6361. (50) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6362. (50) datacounterdaily: EXPAND %{request:User-Name}
  6363. (50) datacounterdaily:    --> anand
  6364. (50) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  6365. (50) datacounterdaily:    --> 91424
  6366. (50) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  6367. (50) datacounterdaily:    --> 385425
  6368. (50) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  6369. (50) datacounterdaily:    --> Interim-Update
  6370. (50) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  6371. (50) datacounterdaily:    --> 874681d3614b1b36
  6372. (50) datacounterdaily: Program returned code (0) and output ''
  6373. (50) datacounterdaily: Program executed successfully
  6374. (50)       [datacounterdaily] = ok
  6375. (50) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6376. (50) datacounterweekly: EXPAND %{request:User-Name}
  6377. (50) datacounterweekly:    --> anand
  6378. (50) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  6379. (50) datacounterweekly:    --> 91424
  6380. (50) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  6381. (50) datacounterweekly:    --> 385425
  6382. (50) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  6383. (50) datacounterweekly:    --> Interim-Update
  6384. (50) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  6385. (50) datacounterweekly:    --> 874681d3614b1b36
  6386. (50) datacounterweekly: Program returned code (0) and output ''
  6387. (50) datacounterweekly: Program executed successfully
  6388. (50)       [datacounterweekly] = ok
  6389. (50) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6390. (50) datacountermonthly: EXPAND %{request:User-Name}
  6391. (50) datacountermonthly:    --> anand
  6392. (50) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  6393. (50) datacountermonthly:    --> 91424
  6394. (50) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  6395. (50) datacountermonthly:    --> 385425
  6396. (50) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  6397. (50) datacountermonthly:    --> Interim-Update
  6398. (50) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  6399. (50) datacountermonthly:    --> 874681d3614b1b36
  6400. (50) datacountermonthly: Program returned code (0) and output ''
  6401. (50) datacountermonthly: Program executed successfully
  6402. (50)       [datacountermonthly] = ok
  6403. (50) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6404. (50) datacounterforever: EXPAND %{request:User-Name}
  6405. (50) datacounterforever:    --> anand
  6406. (50) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  6407. (50) datacounterforever:    --> 91424
  6408. (50) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  6409. (50) datacounterforever:    --> 385425
  6410. (50) datacounterforever: EXPAND %{request:Acct-Status-Type}
  6411. (50) datacounterforever:    --> Interim-Update
  6412. (50) datacounterforever: EXPAND %{request:Acct-Session-Id}
  6413. (50) datacounterforever:    --> 874681d3614b1b36
  6414. (50) datacounterforever: Program returned code (0) and output ''
  6415. (50) datacounterforever: Program executed successfully
  6416. (50)       [datacounterforever] = ok
  6417. (50)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  6418. (50) radutmp: EXPAND /var/log/radutmp
  6419. (50) radutmp:    --> /var/log/radutmp
  6420. (50) radutmp: EXPAND %{User-Name}
  6421. (50) radutmp:    --> anand
  6422. (50)     [radutmp] = ok
  6423. rlm_counter: We only run on Accounting-Stop packets
  6424. (50)     [daily] = noop
  6425. rlm_counter: We only run on Accounting-Stop packets
  6426. (50)     [weekly] = noop
  6427. rlm_counter: We only run on Accounting-Stop packets
  6428. (50)     [monthly] = noop
  6429. rlm_counter: We only run on Accounting-Stop packets
  6430. (50)     [forever] = noop
  6431. (50)     [exec] = noop
  6432. (50) attr_filter.accounting_response: EXPAND %{User-Name}
  6433. (50) attr_filter.accounting_response:    --> anand
  6434. (50) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  6435. (50)     [attr_filter.accounting_response] = updated
  6436. (50)   } # accounting = updated
  6437. (50) Sent Accounting-Response Id 3 from 192.168.200.1:1813 to 192.168.200.1:51532 length 0
  6438. (50) Finished request
  6439. (50) Cleaning up request packet ID 3 with timestamp +514
  6440. Ready to process requests
  6441. (51) Received Access-Request Id 19 from 192.168.200.1:50870 to 192.168.200.1:1812 length 160
  6442. (51)   Service-Type = Login-User
  6443. (51)   User-Name = "anand"
  6444. (51)   User-Password = "9829012834"
  6445. (51)   NAS-IP-Address = 192.168.200.1
  6446. (51)   NAS-Identifier = "CaptivePortal-office_zone"
  6447. (51)   Calling-Station-Id = "e6:8f:99:48:85:89"
  6448. (51)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6449. (51)   NAS-Port-Type = Ethernet
  6450. (51)   NAS-Port = 2000
  6451. (51)   Framed-IP-Address = 192.168.200.201
  6452. (51) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  6453. (51)   authorize {
  6454. (51)     [preprocess] = ok
  6455. (51)     [chap] = noop
  6456. (51)     [mschap] = noop
  6457. (51)     [digest] = noop
  6458. (51) suffix: Checking for suffix after "@"
  6459. (51) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6460. (51)     [suffix] = noop
  6461. (51) ntdomain: Checking for prefix before "\"
  6462. (51) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6463. (51)     [ntdomain] = noop
  6464. (51) eap: No EAP-Message, not doing EAP
  6465. (51)     [eap] = noop
  6466. (51) files: users: Matched entry DEFAULT at line 1
  6467. (51) files: users: Matched entry anand at line 4
  6468. (51)     [files] = ok
  6469. rlm_counter: Entering module authorize code
  6470. rlm_counter: Could not find Check item value pair
  6471. (51)     [daily] = noop
  6472. rlm_counter: Entering module authorize code
  6473. rlm_counter: Could not find Check item value pair
  6474. (51)     [weekly] = noop
  6475. rlm_counter: Entering module authorize code
  6476. rlm_counter: Could not find Check item value pair
  6477. (51)     [monthly] = noop
  6478. rlm_counter: Entering module authorize code
  6479. rlm_counter: Could not find Check item value pair
  6480. (51)     [forever] = noop
  6481. (51)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  6482. (51)     ERROR: Failed retrieving values required to evaluate condition
  6483. (51)     [expiration] = noop
  6484. (51)     [logintime] = noop
  6485. (51)     [pap] = updated
  6486. (51)   } # authorize = updated
  6487. (51) Found Auth-Type = PAP
  6488. (51) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  6489. (51)   Auth-Type PAP {
  6490. (51) pap: Login attempt with password
  6491. (51) pap: Comparing with "known good" Cleartext-Password
  6492. (51) pap: User authenticated successfully
  6493. (51)     [pap] = ok
  6494. (51)   } # Auth-Type PAP = ok
  6495. (51) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  6496. (51)   session {
  6497. (51) radutmp: EXPAND /var/log/radutmp
  6498. (51) radutmp:    --> /var/log/radutmp
  6499. (51) radutmp: EXPAND %{User-Name}
  6500. (51) radutmp:    --> anand
  6501. checkrad: No NAS type, or type "other" not checking
  6502. checkrad: No NAS type, or type "other" not checking
  6503. checkrad: No NAS type, or type "other" not checking
  6504. (51)     [radutmp] = fail
  6505. (51)   } # session = fail
  6506. (51) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  6507. (51)   post-auth {
  6508. (51)     update {
  6509. (51)       No attributes updated for RHS &session-state:
  6510. (51)     } # update = noop
  6511. (51)     [exec] = noop
  6512. (51)     policy remove_reply_message_if_eap {
  6513. (51)       if (&reply:EAP-Message && &reply:Reply-Message) {
  6514. (51)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  6515. (51)       else {
  6516. (51)         [noop] = noop
  6517. (51)       } # else = noop
  6518. (51)     } # policy remove_reply_message_if_eap = noop
  6519. (51)   } # post-auth = noop
  6520. (51) Login OK: [anand/9829012834] (from client captive_portal port 2000 cli e6:8f:99:48:85:89)
  6521. (51) Sent Access-Accept Id 19 from 192.168.200.1:1812 to 192.168.200.1:50870 length 0
  6522. (51) Finished request
  6523. Waking up in 4.9 seconds.
  6524. (52) Received Accounting-Request Id 50 from 192.168.200.1:36910 to 192.168.200.1:1813 length 214
  6525. (52)   Service-Type = Login-User
  6526. (52)   User-Name = "anand"
  6527. (52)   Acct-Status-Type = Interim-Update
  6528. (52)   Acct-Authentic = RADIUS
  6529. (52)   NAS-IP-Address = 192.168.200.1
  6530. (52)   NAS-Identifier = "CaptivePortal-office_zone"
  6531. (52)   NAS-Port-Type = Ethernet
  6532. (52)   NAS-Port = 2002
  6533. (52)   Acct-Session-Id = "6974b7d556ed613e"
  6534. (52)   Framed-IP-Address = 192.168.200.202
  6535. (52)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  6536. (52)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6537. (52)   Acct-Input-Packets = 4586
  6538. (52)   Acct-Input-Octets = 880077
  6539. (52)   Acct-Output-Packets = 10755
  6540. (52)   Acct-Output-Octets = 13576264
  6541. (52)   Acct-Session-Time = 464
  6542. (52)   Acct-Output-Gigawords = 0
  6543. (52)   Acct-Input-Gigawords = 0
  6544. (52) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  6545. (52)   preacct {
  6546. (52)     [preprocess] = ok
  6547. (52)     update request {
  6548. (52)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  6549. (52)          --> 1586901190
  6550. (52)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:10 IST
  6551. (52)     } # update request = noop
  6552. (52)     policy acct_unique {
  6553. (52)       update request {
  6554. (52)         &Tmp-String-9 := "ai:"
  6555. (52)       } # update request = noop
  6556. (52)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  6557. (52)       EXPAND %{hex:&Class}
  6558. (52)          -->
  6559. (52)       EXPAND ^%{hex:&Tmp-String-9}
  6560. (52)          --> ^61693a
  6561. (52)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  6562. (52)       else {
  6563. (52)         update request {
  6564. (52)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  6565. (52)              --> 9a9488f2d0124a4aa7feb209bced26bb
  6566. (52)           &Acct-Unique-Session-Id := 9a9488f2d0124a4aa7feb209bced26bb
  6567. (52)         } # update request = noop
  6568. (52)       } # else = noop
  6569. (52)     } # policy acct_unique = noop
  6570. (52) suffix: Checking for suffix after "@"
  6571. (52) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6572. (52)     [suffix] = noop
  6573. (52) ntdomain: Checking for prefix before "\"
  6574. (52) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6575. (52)     [ntdomain] = noop
  6576. (52)     [files] = noop
  6577. (52)   } # preacct = ok
  6578. (52) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  6579. (52)   accounting {
  6580. (52) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  6581. (52) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  6582. (52) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  6583. (52) detail: EXPAND %t
  6584. (52) detail:    --> Wed Apr 15 03:30:54 2020
  6585. (52)     [detail] = ok
  6586. (52)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  6587. (52)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  6588. (52)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  6589. (52) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6590. (52) datacounterdaily: EXPAND %{request:User-Name}
  6591. (52) datacounterdaily:    --> anand
  6592. (52) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  6593. (52) datacounterdaily:    --> 880077
  6594. (52) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  6595. (52) datacounterdaily:    --> 13576264
  6596. (52) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  6597. (52) datacounterdaily:    --> Interim-Update
  6598. (52) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  6599. (52) datacounterdaily:    --> 6974b7d556ed613e
  6600. (52) datacounterdaily: Program returned code (0) and output ''
  6601. (52) datacounterdaily: Program executed successfully
  6602. (52)       [datacounterdaily] = ok
  6603. (52) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6604. (52) datacounterweekly: EXPAND %{request:User-Name}
  6605. (52) datacounterweekly:    --> anand
  6606. (52) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  6607. (52) datacounterweekly:    --> 880077
  6608. (52) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  6609. (52) datacounterweekly:    --> 13576264
  6610. (52) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  6611. (52) datacounterweekly:    --> Interim-Update
  6612. (52) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  6613. (52) datacounterweekly:    --> 6974b7d556ed613e
  6614. (52) datacounterweekly: Program returned code (0) and output ''
  6615. (52) datacounterweekly: Program executed successfully
  6616. (52)       [datacounterweekly] = ok
  6617. (52) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6618. (52) datacountermonthly: EXPAND %{request:User-Name}
  6619. (52) datacountermonthly:    --> anand
  6620. (52) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  6621. (52) datacountermonthly:    --> 880077
  6622. (52) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  6623. (52) datacountermonthly:    --> 13576264
  6624. (52) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  6625. (52) datacountermonthly:    --> Interim-Update
  6626. (52) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  6627. (52) datacountermonthly:    --> 6974b7d556ed613e
  6628. (52) datacountermonthly: Program returned code (0) and output ''
  6629. (52) datacountermonthly: Program executed successfully
  6630. (52)       [datacountermonthly] = ok
  6631. (52) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6632. (52) datacounterforever: EXPAND %{request:User-Name}
  6633. (52) datacounterforever:    --> anand
  6634. (52) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  6635. (52) datacounterforever:    --> 880077
  6636. (52) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  6637. (52) datacounterforever:    --> 13576264
  6638. (52) datacounterforever: EXPAND %{request:Acct-Status-Type}
  6639. (52) datacounterforever:    --> Interim-Update
  6640. (52) datacounterforever: EXPAND %{request:Acct-Session-Id}
  6641. (52) datacounterforever:    --> 6974b7d556ed613e
  6642. (52) datacounterforever: Program returned code (0) and output ''
  6643. (52) datacounterforever: Program executed successfully
  6644. (52)       [datacounterforever] = ok
  6645. (52)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  6646. (52) radutmp: EXPAND /var/log/radutmp
  6647. (52) radutmp:    --> /var/log/radutmp
  6648. (52) radutmp: EXPAND %{User-Name}
  6649. (52) radutmp:    --> anand
  6650. (52)     [radutmp] = ok
  6651. rlm_counter: We only run on Accounting-Stop packets
  6652. (52)     [daily] = noop
  6653. rlm_counter: We only run on Accounting-Stop packets
  6654. (52)     [weekly] = noop
  6655. rlm_counter: We only run on Accounting-Stop packets
  6656. (52)     [monthly] = noop
  6657. rlm_counter: We only run on Accounting-Stop packets
  6658. (52)     [forever] = noop
  6659. (52)     [exec] = noop
  6660. (52) attr_filter.accounting_response: EXPAND %{User-Name}
  6661. (52) attr_filter.accounting_response:    --> anand
  6662. (52) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  6663. (52)     [attr_filter.accounting_response] = updated
  6664. (52)   } # accounting = updated
  6665. (52) Sent Accounting-Response Id 50 from 192.168.200.1:1813 to 192.168.200.1:36910 length 0
  6666. (52) Finished request
  6667. (52) Cleaning up request packet ID 50 with timestamp +514
  6668. Waking up in 4.9 seconds.
  6669. (53) Received Access-Request Id 100 from 192.168.200.1:64857 to 192.168.200.1:1812 length 160
  6670. (53)   Service-Type = Login-User
  6671. (53)   User-Name = "anand"
  6672. (53)   User-Password = "9829012834"
  6673. (53)   NAS-IP-Address = 192.168.200.1
  6674. (53)   NAS-Identifier = "CaptivePortal-office_zone"
  6675. (53)   Calling-Station-Id = "b6:e7:02:97:a6:23"
  6676. (53)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6677. (53)   NAS-Port-Type = Ethernet
  6678. (53)   NAS-Port = 2002
  6679. (53)   Framed-IP-Address = 192.168.200.202
  6680. (53) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  6681. (53)   authorize {
  6682. (53)     [preprocess] = ok
  6683. (53)     [chap] = noop
  6684. (53)     [mschap] = noop
  6685. (53)     [digest] = noop
  6686. (53) suffix: Checking for suffix after "@"
  6687. (53) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6688. (53)     [suffix] = noop
  6689. (53) ntdomain: Checking for prefix before "\"
  6690. (53) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6691. (53)     [ntdomain] = noop
  6692. (53) eap: No EAP-Message, not doing EAP
  6693. (53)     [eap] = noop
  6694. (53) files: users: Matched entry DEFAULT at line 1
  6695. (53) files: users: Matched entry anand at line 4
  6696. (53)     [files] = ok
  6697. rlm_counter: Entering module authorize code
  6698. rlm_counter: Could not find Check item value pair
  6699. (53)     [daily] = noop
  6700. rlm_counter: Entering module authorize code
  6701. rlm_counter: Could not find Check item value pair
  6702. (53)     [weekly] = noop
  6703. rlm_counter: Entering module authorize code
  6704. rlm_counter: Could not find Check item value pair
  6705. (53)     [monthly] = noop
  6706. rlm_counter: Entering module authorize code
  6707. rlm_counter: Could not find Check item value pair
  6708. (53)     [forever] = noop
  6709. (53)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  6710. (53)     ERROR: Failed retrieving values required to evaluate condition
  6711. (53)     [expiration] = noop
  6712. (53)     [logintime] = noop
  6713. (53)     [pap] = updated
  6714. (53)   } # authorize = updated
  6715. (53) Found Auth-Type = PAP
  6716. (53) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  6717. (53)   Auth-Type PAP {
  6718. (53) pap: Login attempt with password
  6719. (53) pap: Comparing with "known good" Cleartext-Password
  6720. (53) pap: User authenticated successfully
  6721. (53)     [pap] = ok
  6722. (53)   } # Auth-Type PAP = ok
  6723. (53) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  6724. (53)   session {
  6725. (53) radutmp: EXPAND /var/log/radutmp
  6726. (53) radutmp:    --> /var/log/radutmp
  6727. (53) radutmp: EXPAND %{User-Name}
  6728. (53) radutmp:    --> anand
  6729. checkrad: No NAS type, or type "other" not checking
  6730. checkrad: No NAS type, or type "other" not checking
  6731. checkrad: No NAS type, or type "other" not checking
  6732. (53)     [radutmp] = fail
  6733. (53)   } # session = fail
  6734. (53) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  6735. (53)   post-auth {
  6736. (53)     update {
  6737. (53)       No attributes updated for RHS &session-state:
  6738. (53)     } # update = noop
  6739. (53)     [exec] = noop
  6740. (53)     policy remove_reply_message_if_eap {
  6741. (53)       if (&reply:EAP-Message && &reply:Reply-Message) {
  6742. (53)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  6743. (53)       else {
  6744. (53)         [noop] = noop
  6745. (53)       } # else = noop
  6746. (53)     } # policy remove_reply_message_if_eap = noop
  6747. (53)   } # post-auth = noop
  6748. (53) Login OK: [anand/9829012834] (from client captive_portal port 2002 cli b6:e7:02:97:a6:23)
  6749. (53) Sent Access-Accept Id 100 from 192.168.200.1:1812 to 192.168.200.1:64857 length 0
  6750. (53) Finished request
  6751. Waking up in 4.9 seconds.
  6752. (54) Received Accounting-Request Id 232 from 192.168.200.1:28518 to 192.168.200.1:1813 length 214
  6753. (54)   Service-Type = Login-User
  6754. (54)   User-Name = "anand"
  6755. (54)   Acct-Status-Type = Interim-Update
  6756. (54)   Acct-Authentic = RADIUS
  6757. (54)   NAS-IP-Address = 192.168.200.1
  6758. (54)   NAS-Identifier = "CaptivePortal-office_zone"
  6759. (54)   NAS-Port-Type = Ethernet
  6760. (54)   NAS-Port = 2004
  6761. (54)   Acct-Session-Id = "d4f8574cf15bdf9b"
  6762. (54)   Framed-IP-Address = 192.168.200.203
  6763. (54)   Calling-Station-Id = "da:54:db:27:ae:2b"
  6764. (54)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6765. (54)   Acct-Input-Packets = 45
  6766. (54)   Acct-Input-Octets = 14312
  6767. (54)   Acct-Output-Packets = 37
  6768. (54)   Acct-Output-Octets = 6793
  6769. (54)   Acct-Session-Time = 451
  6770. (54)   Acct-Output-Gigawords = 0
  6771. (54)   Acct-Input-Gigawords = 0
  6772. (54) # Executing section preacct from file /usr/local/etc/raddb/sites-enabled/default
  6773. (54)   preacct {
  6774. (54)     [preprocess] = ok
  6775. (54)     update request {
  6776. (54)       EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}}
  6777. (54)          --> 1586901203
  6778. (54)       &FreeRADIUS-Acct-Session-Start-Time = Apr 15 2020 03:23:23 IST
  6779. (54)     } # update request = noop
  6780. (54)     policy acct_unique {
  6781. (54)       update request {
  6782. (54)         &Tmp-String-9 := "ai:"
  6783. (54)       } # update request = noop
  6784. (54)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) {
  6785. (54)       EXPAND %{hex:&Class}
  6786. (54)          -->
  6787. (54)       EXPAND ^%{hex:&Tmp-String-9}
  6788. (54)          --> ^61693a
  6789. (54)       if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) &&      ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i))  -> FALSE
  6790. (54)       else {
  6791. (54)         update request {
  6792. (54)           EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}}
  6793. (54)              --> 8540a37c864a86b96f7917819f3d70c9
  6794. (54)           &Acct-Unique-Session-Id := 8540a37c864a86b96f7917819f3d70c9
  6795. (54)         } # update request = noop
  6796. (54)       } # else = noop
  6797. (54)     } # policy acct_unique = noop
  6798. (54) suffix: Checking for suffix after "@"
  6799. (54) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6800. (54)     [suffix] = noop
  6801. (54) ntdomain: Checking for prefix before "\"
  6802. (54) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6803. (54)     [ntdomain] = noop
  6804. (54)     [files] = noop
  6805. (54)   } # preacct = ok
  6806. (54) # Executing section accounting from file /usr/local/etc/raddb/sites-enabled/default
  6807. (54)   accounting {
  6808. (54) detail: EXPAND /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d
  6809. (54) detail:    --> /var/log/radacct/192.168.200.1/detail-20200415
  6810. (54) detail: /var/log/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/radacct/192.168.200.1/detail-20200415
  6811. (54) detail: EXPAND %t
  6812. (54) detail:    --> Wed Apr 15 03:30:54 2020
  6813. (54)     [detail] = ok
  6814. (54)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update)) {
  6815. (54)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  -> TRUE
  6816. (54)     if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  {
  6817. (54) datacounterdaily: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} daily %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6818. (54) datacounterdaily: EXPAND %{request:User-Name}
  6819. (54) datacounterdaily:    --> anand
  6820. (54) datacounterdaily: EXPAND %{request:Acct-Input-Octets}
  6821. (54) datacounterdaily:    --> 14312
  6822. (54) datacounterdaily: EXPAND %{request:Acct-Output-Octets}
  6823. (54) datacounterdaily:    --> 6793
  6824. (54) datacounterdaily: EXPAND %{request:Acct-Status-Type}
  6825. (54) datacounterdaily:    --> Interim-Update
  6826. (54) datacounterdaily: EXPAND %{request:Acct-Session-Id}
  6827. (54) datacounterdaily:    --> d4f8574cf15bdf9b
  6828. (54) datacounterdaily: Program returned code (0) and output ''
  6829. (54) datacounterdaily: Program executed successfully
  6830. (54)       [datacounterdaily] = ok
  6831. (54) datacounterweekly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} weekly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6832. (54) datacounterweekly: EXPAND %{request:User-Name}
  6833. (54) datacounterweekly:    --> anand
  6834. (54) datacounterweekly: EXPAND %{request:Acct-Input-Octets}
  6835. (54) datacounterweekly:    --> 14312
  6836. (54) datacounterweekly: EXPAND %{request:Acct-Output-Octets}
  6837. (54) datacounterweekly:    --> 6793
  6838. (54) datacounterweekly: EXPAND %{request:Acct-Status-Type}
  6839. (54) datacounterweekly:    --> Interim-Update
  6840. (54) datacounterweekly: EXPAND %{request:Acct-Session-Id}
  6841. (54) datacounterweekly:    --> d4f8574cf15bdf9b
  6842. (54) datacounterweekly: Program returned code (0) and output ''
  6843. (54) datacounterweekly: Program executed successfully
  6844. (54)       [datacounterweekly] = ok
  6845. (54) datacountermonthly: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} monthly %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6846. (54) datacountermonthly: EXPAND %{request:User-Name}
  6847. (54) datacountermonthly:    --> anand
  6848. (54) datacountermonthly: EXPAND %{request:Acct-Input-Octets}
  6849. (54) datacountermonthly:    --> 14312
  6850. (54) datacountermonthly: EXPAND %{request:Acct-Output-Octets}
  6851. (54) datacountermonthly:    --> 6793
  6852. (54) datacountermonthly: EXPAND %{request:Acct-Status-Type}
  6853. (54) datacountermonthly:    --> Interim-Update
  6854. (54) datacountermonthly: EXPAND %{request:Acct-Session-Id}
  6855. (54) datacountermonthly:    --> d4f8574cf15bdf9b
  6856. (54) datacountermonthly: Program returned code (0) and output ''
  6857. (54) datacountermonthly: Program executed successfully
  6858. (54)       [datacountermonthly] = ok
  6859. (54) datacounterforever: Executing: /bin/sh /usr/local/etc/raddb/scripts/datacounter_acct.sh %{request:User-Name} forever %{request:Acct-Input-Octets} %{request:Acct-Output-Octets} %{request:Acct-Status-Type} %{request:Acct-Session-Id}:
  6860. (54) datacounterforever: EXPAND %{request:User-Name}
  6861. (54) datacounterforever:    --> anand
  6862. (54) datacounterforever: EXPAND %{request:Acct-Input-Octets}
  6863. (54) datacounterforever:    --> 14312
  6864. (54) datacounterforever: EXPAND %{request:Acct-Output-Octets}
  6865. (54) datacounterforever:    --> 6793
  6866. (54) datacounterforever: EXPAND %{request:Acct-Status-Type}
  6867. (54) datacounterforever:    --> Interim-Update
  6868. (54) datacounterforever: EXPAND %{request:Acct-Session-Id}
  6869. (54) datacounterforever:    --> d4f8574cf15bdf9b
  6870. (54) datacounterforever: Program returned code (0) and output ''
  6871. (54) datacounterforever: Program executed successfully
  6872. (54)       [datacounterforever] = ok
  6873. (54)     } # if ((request:Acct-Status-Type == Stop) || (request:Acct-Status-Type == Interim-Update))  = ok
  6874. (54) radutmp: EXPAND /var/log/radutmp
  6875. (54) radutmp:    --> /var/log/radutmp
  6876. (54) radutmp: EXPAND %{User-Name}
  6877. (54) radutmp:    --> anand
  6878. (54)     [radutmp] = ok
  6879. rlm_counter: We only run on Accounting-Stop packets
  6880. (54)     [daily] = noop
  6881. rlm_counter: We only run on Accounting-Stop packets
  6882. (54)     [weekly] = noop
  6883. rlm_counter: We only run on Accounting-Stop packets
  6884. (54)     [monthly] = noop
  6885. rlm_counter: We only run on Accounting-Stop packets
  6886. (54)     [forever] = noop
  6887. (54)     [exec] = noop
  6888. (54) attr_filter.accounting_response: EXPAND %{User-Name}
  6889. (54) attr_filter.accounting_response:    --> anand
  6890. (54) attr_filter.accounting_response: Matched entry DEFAULT at line 12
  6891. (54)     [attr_filter.accounting_response] = updated
  6892. (54)   } # accounting = updated
  6893. (54) Sent Accounting-Response Id 232 from 192.168.200.1:1813 to 192.168.200.1:28518 length 0
  6894. (54) Finished request
  6895. (54) Cleaning up request packet ID 232 with timestamp +514
  6896. Waking up in 4.7 seconds.
  6897. (55) Received Access-Request Id 50 from 192.168.200.1:28856 to 192.168.200.1:1812 length 160
  6898. (55)   Service-Type = Login-User
  6899. (55)   User-Name = "anand"
  6900. (55)   User-Password = "9829012834"
  6901. (55)   NAS-IP-Address = 192.168.200.1
  6902. (55)   NAS-Identifier = "CaptivePortal-office_zone"
  6903. (55)   Calling-Station-Id = "da:54:db:27:ae:2b"
  6904. (55)   Called-Station-Id = "f6:86:8e:69:d4:24:pfSense.localdomain"
  6905. (55)   NAS-Port-Type = Ethernet
  6906. (55)   NAS-Port = 2004
  6907. (55)   Framed-IP-Address = 192.168.200.203
  6908. (55) # Executing section authorize from file /usr/local/etc/raddb/sites-enabled/default
  6909. (55)   authorize {
  6910. (55)     [preprocess] = ok
  6911. (55)     [chap] = noop
  6912. (55)     [mschap] = noop
  6913. (55)     [digest] = noop
  6914. (55) suffix: Checking for suffix after "@"
  6915. (55) suffix: No '@' in User-Name = "anand", skipping NULL due to config.
  6916. (55)     [suffix] = noop
  6917. (55) ntdomain: Checking for prefix before "\"
  6918. (55) ntdomain: No '\' in User-Name = "anand", skipping NULL due to config.
  6919. (55)     [ntdomain] = noop
  6920. (55) eap: No EAP-Message, not doing EAP
  6921. (55)     [eap] = noop
  6922. (55) files: users: Matched entry DEFAULT at line 1
  6923. (55) files: users: Matched entry anand at line 4
  6924. (55)     [files] = ok
  6925. rlm_counter: Entering module authorize code
  6926. rlm_counter: Could not find Check item value pair
  6927. (55)     [daily] = noop
  6928. rlm_counter: Entering module authorize code
  6929. rlm_counter: Could not find Check item value pair
  6930. (55)     [weekly] = noop
  6931. rlm_counter: Entering module authorize code
  6932. rlm_counter: Could not find Check item value pair
  6933. (55)     [monthly] = noop
  6934. rlm_counter: Entering module authorize code
  6935. rlm_counter: Could not find Check item value pair
  6936. (55)     [forever] = noop
  6937. (55)     if (&request:Calling-Station-Id == &control:Calling-Station-Id) {
  6938. (55)     ERROR: Failed retrieving values required to evaluate condition
  6939. (55)     [expiration] = noop
  6940. (55)     [logintime] = noop
  6941. (55)     [pap] = updated
  6942. (55)   } # authorize = updated
  6943. (55) Found Auth-Type = PAP
  6944. (55) # Executing group from file /usr/local/etc/raddb/sites-enabled/default
  6945. (55)   Auth-Type PAP {
  6946. (55) pap: Login attempt with password
  6947. (55) pap: Comparing with "known good" Cleartext-Password
  6948. (55) pap: User authenticated successfully
  6949. (55)     [pap] = ok
  6950. (55)   } # Auth-Type PAP = ok
  6951. (55) # Executing section session from file /usr/local/etc/raddb/sites-enabled/default
  6952. (55)   session {
  6953. (55) radutmp: EXPAND /var/log/radutmp
  6954. (55) radutmp:    --> /var/log/radutmp
  6955. (55) radutmp: EXPAND %{User-Name}
  6956. (55) radutmp:    --> anand
  6957. checkrad: No NAS type, or type "other" not checking
  6958. checkrad: No NAS type, or type "other" not checking
  6959. checkrad: No NAS type, or type "other" not checking
  6960. (55)     [radutmp] = fail
  6961. (55)   } # session = fail
  6962. (55) # Executing section post-auth from file /usr/local/etc/raddb/sites-enabled/default
  6963. (55)   post-auth {
  6964. (55)     update {
  6965. (55)       No attributes updated for RHS &session-state:
  6966. (55)     } # update = noop
  6967. (55)     [exec] = noop
  6968. (55)     policy remove_reply_message_if_eap {
  6969. (55)       if (&reply:EAP-Message && &reply:Reply-Message) {
  6970. (55)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
  6971. (55)       else {
  6972. (55)         [noop] = noop
  6973. (55)       } # else = noop
  6974. (55)     } # policy remove_reply_message_if_eap = noop
  6975. (55)   } # post-auth = noop
  6976. (55) Login OK: [anand/9829012834] (from client captive_portal port 2004 cli da:54:db:27:ae:2b)
  6977. (55) Sent Access-Accept Id 50 from 192.168.200.1:1812 to 192.168.200.1:28856 length 0
  6978. (55) Finished request
  6979. Waking up in 4.7 seconds.
  6980. (51) Cleaning up request packet ID 19 with timestamp +514
  6981. (53) Cleaning up request packet ID 100 with timestamp +514
  6982. Waking up in 0.1 seconds.
  6983. (55) Cleaning up request packet ID 50 with timestamp +514
  6984. Ready to process requests
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!