The OpenNET Project / Index page

[ новости /+++ | форум | теги | ]

форумы  помощь  поиск  регистрация  майллист  вход/выход  слежка  RSS
"Freeradius2 EAP-PEAP proxy не сохраняет атрибуты"
Вариант для распечатки  
Пред. тема | След. тема 
Форумы OpenNET: Виртуальная конференция (Public)
Изначальное сообщение [ Отслеживать ]

"Freeradius2 EAP-PEAP proxy не сохраняет атрибуты"  +/
Сообщение от Harunaga on 17-Сен-09, 08:47 
Требуется авторизировать беспроводных абонентов по протоколу EAP-PEAP, но, к сожалению, радиус биллинговой системы не умеет EAP-PEAP. Поэтому был установлен freeradius 2.1.6 в режиме прокси. Freeradius терминирует туннель TLS, а запросы в радиус биллинга уходят уже по алгоритму mschapv2. Но вот проблема - freeradius не сохраняет и не передает дополнительные атрибуты точке доступа, полученные от биллинга, хотя должен и в дебаге они есть (WISPr-Bandwidth-Max-Up и WISPr-Bandwidth-Max-Down). Где ошибка?

192.168.145.42 - точка доступа
192.168.151.59 - радиус биллинга
192.168.151.36 - freeradius

eap.conf:
        eap {
                default_eap_type = mschapv2
                timer_expire     = 60
                ignore_unknown_eap_types = yes
                cisco_accounting_username_bug = no
                max_sessions = 2048
                tls {
                        certdir = ${confdir}/certs
                        cadir = ${confdir}/certs
                        private_key_file = /etc/ssl/hotspot.pem
                        certificate_file = /etc/ssl/hotspot.pem
                        CA_file = /etc/ssl/Equifax_Secure_Certificate_Authority.cer
                        dh_file = ${certdir}/dh
                        random_file = ${certdir}/random
                        cipher_list = "DEFAULT"
                        make_cert_command = "${certdir}/bootstrap"
                        cache {
                              enable = no
                              lifetime = 24 # hours
                              max_entries = 255
                        }
                }
                peap {
                        default_eap_type = mschapv2
                        copy_request_to_tunnel = yes
                        use_tunneled_reply = yes
                        proxy_tunneled_request_as_eap = no
                        virtual_server = "proxy-inner-tunnel"
                }
                mschapv2 {
                }
        }
proxy-inner-tunnel:

server proxy-inner-tunnel {
authorize {
        update control {
                #  You should update this to be one of your realms.
                Proxy-To-Realm := "BILLING"
        }
}
authenticate {
        eap
}

post-proxy {
        eap
}
}

proxy.conf:

realm BILLING {
       authhost        = 192.168.151.59:1812
       secret          = secretkey
}

Высказать мнение | Ответить | Правка | Cообщить модератору

Оглавление

Сообщения по теме [Сортировка по времени | RSS]


1. "Freeradius2 EAP-PEAP proxy не сохраняет атрибуты"  +/
Сообщение от Harunaga on 17-Сен-09, 08:47 
DEBUG:
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=222, length=118
    User-Name = "10"
    EAP-Message = 0x02620007013130
    Message-Authenticator = 0xe38b290e654269d95defc60fb7831415
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 98 length 7
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type mschapv2
rlm_eap_mschapv2: Issuing Challenge
++[eap] returns handled
Sending Access-Challenge of id 222 to 192.168.145.42 port 45920
    EAP-Message = 0x0163001c1a01630017106ec1f0ae862c6445e9a4584a08ab62ef3130
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a30789c9ac02fc8e14eb27c4dd
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=223, length=135
    User-Name = "10"
    State = 0x07ead3a30789c9ac02fc8e14eb27c4dd
    EAP-Message = 0x026300060319
    Message-Authenticator = 0x9525673c0e27ecccf1ac9f6ce46db721
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 99 length 6
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP NAK
[eap] EAP-NAK asked for EAP-Type/peap
[eap] processing type tls
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 223 to 192.168.145.42 port 45920
    EAP-Message = 0x016400061920
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a3068ecaac02fc8e14eb27c4dd
Finished request 1.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=224, length=209
    User-Name = "10"
    State = 0x07ead3a3068ecaac02fc8e14eb27c4dd
    EAP-Message = 0x0264005019800000004616030100410100003d03014ab1b8781e54c0ed2319fa36048467e14e8ea2e75c7ffc26ce5bc8860fc7397d00001600040005000a000900640062000300060013001200630100
    Message-Authenticator = 0x10d075914cfb960691940025bac92d35
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 100 length 80
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
  TLS Length 70
[peap] Length Included
[peap] eaptls_verify returned 11
[peap]     (other): before/accept initialization
[peap]     TLS_accept: before/accept initialization
[peap] <<< TLS 1.0 Handshake [length 0041], ClientHello  
[peap]     TLS_accept: SSLv3 read client hello A
[peap] >>> TLS 1.0 Handshake [length 002a], ServerHello  
[peap]     TLS_accept: SSLv3 write server hello A
[peap] >>> TLS 1.0 Handshake [length 03e1], Certificate  
[peap]     TLS_accept: SSLv3 write certificate A
[peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone  
[peap]     TLS_accept: SSLv3 write server done A
[peap]     TLS_accept: SSLv3 flush data
[peap]     TLS_accept: Need to read more data: SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode  
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 224 to 192.168.145.42 port 45920
    EAP-Message = 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
    EAP-Message = 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
    EAP-Message = 0xefb178907be72a83920a14a80924fd8dd99f0ed93143a8b8f3515c6caaf04a567a7608bf452fa4632cb87ce64088c938cfb6299e9dfb2f76b0316e6aae25123422a4417656a21a2bb2cc840f3d7b6dc800e7d8074517374ffe4e748db3e9200e8b7c686d51b64f245260e84d2cc53fbdee5fc1ddfc15abdb8aeed19c920136cdc68db83ab6ecbb3874e2583c2da213b67ddc1394329a82b0d5602d7e9fd1e07d4afac9c0453ed34ae44b7ca5f27bc42a62a71ed145885bc906ba94d7f0086ba7d1eb5803ec282ec530a55b06f70203010001a381bd3081ba300e0603551d0f0101ff0404030204f0301d0603551d0e04160414453f042356bf8c2f19f2
    EAP-Message = 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
    EAP-Message = 0x62671f10333727cd338cd3cd
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a3058fcaac02fc8e14eb27c4dd
Finished request 2.
Going to the next request
Waking up in 4.8 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=225, length=135
    User-Name = "10"
    State = 0x07ead3a3058fcaac02fc8e14eb27c4dd
    EAP-Message = 0x026500061900
    Message-Authenticator = 0x0891f11bfcde8025eb587ef050e6275d
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 101 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake fragment handler
[peap] eaptls_verify returned 1
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 225 to 192.168.145.42 port 45920
    EAP-Message = 0x0166002e1900702f3a043f13f2d5e5aec143aa600f630c62aa96fdbf5e831ae59e7d9712a816030100040e000000
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a3048ccaac02fc8e14eb27c4dd
Finished request 3.
Going to the next request
Waking up in 4.8 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=226, length=451
    User-Name = "10"
    State = 0x07ead3a3048ccaac02fc8e14eb27c4dd
    EAP-Message = 0x0266014019800000013616030101061000010201004fb56d910fa42a14aa3c6eea33555362d8b39f1a2d77d313bdf079cf50ef4f71679689ec46c0b3577a595bab267f66fbb8b438340d0aceb29255a31a21f06c6fedc4cf0a1b21cb5598998789d459ba071492bb0c3dc88aa298175053356df80f427ad2174f0bd9ff49b1811923ac82e7bae0246f597e697174f90846bd2228ce7c309d62cedfb336b841cdc398ac39d961ee667a60fa8b090bb6aa7b4aa63a8508dbd4d274210bea74e32b96e2a8356eef15f8eac7589b875818656d1f45f5b9fc2afd37644ac93369f11a61c29d3048a906aa43f7edbb70944882868bc3f42581b063fe52f0667b
    EAP-Message = 0x80eea00922809693b706592d39e0b15bb7041c28f500cae3140301000101160301002065aa79b35b69f62a83173f7ab8f5b5a8d32d26a88721a8ee678de11e2b491929
    Message-Authenticator = 0xbbab16716509bef7bd587a9571871429
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 102 length 253
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
  TLS Length 310
[peap] Length Included
[peap] eaptls_verify returned 11
[peap] <<< TLS 1.0 Handshake [length 0106], ClientKeyExchange  
[peap]     TLS_accept: SSLv3 read client key exchange A
[peap] <<< TLS 1.0 ChangeCipherSpec [length 0001]  
[peap] <<< TLS 1.0 Handshake [length 0010], Finished  
[peap]     TLS_accept: SSLv3 read finished A
[peap] >>> TLS 1.0 ChangeCipherSpec [length 0001]  
[peap]     TLS_accept: SSLv3 write change cipher spec A
[peap] >>> TLS 1.0 Handshake [length 0010], Finished  
[peap]     TLS_accept: SSLv3 write finished A
[peap]     TLS_accept: SSLv3 flush data
[peap]     (other): SSL negotiation finished successfully
SSL Connection Established
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 226 to 192.168.145.42 port 45920
    EAP-Message = 0x01670031190014030100010116030100206aacab4436bbf44e492d852573dfe1266992043b58bbe3f8899aff0353065bc3
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a3038dcaac02fc8e14eb27c4dd
Finished request 4.
Going to the next request
Waking up in 4.7 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=227, length=135
    User-Name = "10"
    State = 0x07ead3a3038dcaac02fc8e14eb27c4dd
    EAP-Message = 0x026700061900
    Message-Authenticator = 0x8cacd03c12a16673a93fa5f29a008a9f
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 103 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake is finished
[peap] eaptls_verify returned 3
[peap] eaptls_process returned 3
[peap] EAPTLS_SUCCESS
++[eap] returns handled
Sending Access-Challenge of id 227 to 192.168.145.42 port 45920
    EAP-Message = 0x01680020190017030100151f5ac40f4ba30f1f7a95c7e53868bb2f92829d3504
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a30282caac02fc8e14eb27c4dd
Finished request 5.
Going to the next request
Waking up in 4.6 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=228, length=159
    User-Name = "10"
    State = 0x07ead3a30282caac02fc8e14eb27c4dd
    EAP-Message = 0x0268001e19001703010013c5e116d8769ea065b0481bac42772977282860
    Message-Authenticator = 0x3a5e3bd0c1eda2cae9ba82bae0fa84c2
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 104 length 30
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] Identity - 10
[peap] Got tunneled request
    EAP-Message = 0x02680007013130
server  {
  PEAP: Got tunneled identity of 10
  PEAP: Setting default EAP type for tunneled EAP session.
  PEAP: Setting User-Name to 10
Sending tunneled request
    EAP-Message = 0x02680007013130
    FreeRADIUS-Proxied-To = 127.0.0.1
    User-Name = "10"
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
server proxy-inner-tunnel {
+- entering group authorize {...}
++[control] returns notfound
} # server proxy-inner-tunnel
[peap] Got tunneled reply code 0
  PEAP: Calling authenticate in order to initiate tunneled EAP session.
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type mschapv2
rlm_eap_mschapv2: Issuing Challenge
++[eap] returns handled
    PEAP: Cancelling proxy to realm BILLING until the tunneled EAP session has been established
[peap] Got tunneled reply RADIUS code 11
    EAP-Message = 0x0169001c1a0169001710d01d8df2bebb58a339c9c0b7d7caa2173130
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0xed5f6a24ed3670cb0fe406473891ab01
[peap] Got tunneled Access-Challenge
++[eap] returns handled
Sending Access-Challenge of id 228 to 192.168.145.42 port 45920
    EAP-Message = 0x0169003319001703010028974ef70851394a0c9a4a9783c4e94ef4b3b55dd38ce01d825860cca95b3b17454b897a2b291d5659
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a30183caac02fc8e14eb27c4dd
Finished request 6.
Going to the next request
Waking up in 4.6 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=229, length=213
    User-Name = "10"
    State = 0x07ead3a30183caac02fc8e14eb27c4dd
    EAP-Message = 0x02690054190017030100490a8a2dceac8c7bf8f6ef0a654c42c8dadc887fc06747ec53c2b84f03ad4cab7787dd12fbde394d8c0a931f3fc632a4a14d834fcf2751b9d2cd8fd7e1795b4c02b858804be81e5dba50
    Message-Authenticator = 0x8e1a99d600d67e4900cddbe680e0ea8d
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 105 length 84
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] EAP type mschapv2
[peap] Got tunneled request
    EAP-Message = 0x0269003d1a0269003831082b6e438ecf27aae769335526e67a4300000000000000001fef103523937a5a401a1f294a3a15cca7aca61bfc5e5cce003130
server  {
  PEAP: Setting User-Name to 10
Sending tunneled request
    EAP-Message = 0x0269003d1a0269003831082b6e438ecf27aae769335526e67a4300000000000000001fef103523937a5a401a1f294a3a15cca7aca61bfc5e5cce003130
    FreeRADIUS-Proxied-To = 127.0.0.1
    User-Name = "10"
    State = 0xed5f6a24ed3670cb0fe406473891ab01
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
server proxy-inner-tunnel {
+- entering group authorize {...}
++[control] returns notfound
} # server proxy-inner-tunnel
[peap] Got tunneled reply code 0
  PEAP: Calling authenticate in order to initiate tunneled EAP session.
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/mschapv2
[eap] processing type mschapv2
[eap]   Not-EAP proxy set.  Not composing EAP
++[eap] returns handled
  PEAP: Tunneled authentication will be proxied to BILLING
  PEAP: Remembering to do EAP-MS-CHAP-V2 post-proxy.
[eap]   Tunneled session will be proxied.  Not doing EAP.
++[eap] returns handled
Sending Access-Request of id 210 to 192.168.151.59 port 1812
    User-Name = "10"
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
    MS-CHAP-Challenge = 0xd01d8df2bebb58a339c9c0b7d7caa217
    MS-CHAP2-Response = 0x6930082b6e438ecf27aae769335526e67a4300000000000000001fef103523937a5a401a1f294a3a15cca7aca61bfc5e5cce
    Proxy-State = 0x323239
Proxying request 7 to home server 192.168.151.59 port 1812
Sending Access-Request of id 210 to 192.168.151.59 port 1812
    User-Name = "10"
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
    MS-CHAP-Challenge = 0xd01d8df2bebb58a339c9c0b7d7caa217
    MS-CHAP2-Response = 0x6930082b6e438ecf27aae769335526e67a4300000000000000001fef103523937a5a401a1f294a3a15cca7aca61bfc5e5cce
    Proxy-State = 0x323239
Going to the next request
Waking up in 0.9 seconds.
rad_recv: Access-Accept packet from host 192.168.151.59 port 1812, id=210, length=190
    Acct-Interim-Interval = 100
    Vendor-14559-Attr-2 = 0x3746bdf7
    WISPr-Bandwidth-Max-Up = 256000
    WISPr-Bandwidth-Max-Down = 1024000
    MS-CHAP2-Success = 0x69533d38364544453342343842363931353546304535343645363831414538304436454232373039384144
    MS-MPPE-Recv-Key = 0xe7f1174e7beff1487910dc87d142d6e6
    MS-MPPE-Send-Key = 0x57c39cbbbdb601ce38ef7909bd7f9e12
    MS-MPPE-Encryption-Policy = 0x00000001
    MS-MPPE-Encryption-Types = 0x00000006
    Proxy-State = 0x323239
+- entering group post-proxy {...}
[eap] Doing post-proxy callback
[eap] Passing reply from proxy back into the tunnel.
server proxy-inner-tunnel {
[eap] Passing reply back for EAP-MS-CHAP-V2
+- entering group post-proxy {...}
[eap] Doing post-proxy callback
  rlm_eap_mschapv2: Passing reply from proxy back into the tunnel 0x8178f00 2.
  rlm_eap_mschapv2: Authentication succeeded.
MSCHAP Success
++[eap] returns ok
} # server proxy-inner-tunnel
[eap] Final reply from tunneled session code 11
    Acct-Interim-Interval = 100
    Vendor-14559-Attr-2 = 0x3746bdf7
    WISPr-Bandwidth-Max-Up = 256000
    WISPr-Bandwidth-Max-Down = 1024000
    Proxy-State = 0x323239
    EAP-Message = 0x016a00331a0369002e533d38364544453342343842363931353546304535343645363831414538304436454232373039384144
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0xed5f6a24ec3570cb0fe406473891ab01
[eap] Got reply 11
[eap] Got tunneled reply RADIUS code 11
    Acct-Interim-Interval = 100
    Vendor-14559-Attr-2 = 0x3746bdf7
    WISPr-Bandwidth-Max-Up = 256000
    WISPr-Bandwidth-Max-Down = 1024000
    Proxy-State = 0x323239
    EAP-Message = 0x016a00331a0369002e533d38364544453342343842363931353546304535343645363831414538304436454232373039384144
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0xed5f6a24ec3570cb0fe406473891ab01
[eap] Got tunneled Access-Challenge
[eap] Saving tunneled attributes for later
[eap] Reply was handled
++[eap] returns ok
Sending Access-Challenge of id 229 to 192.168.145.42 port 45920
    EAP-Message = 0x016a004a1900170301003fd2ea6e8b90e35bd3dc79e64ecc7ae61cd620a7629fd3abf26723951ef19cfefbc3902e8c6b69247948560d9d5a2ffd957aaccfc6275fbeb408f6b9298c0b63
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a30080caac02fc8e14eb27c4dd
Finished request 7.
Going to the next request
Waking up in 4.4 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=230, length=158
    User-Name = "10"
    State = 0x07ead3a30080caac02fc8e14eb27c4dd
    EAP-Message = 0x026a001d1900170301001205f944ba8b8681891372395b7988718791f7
    Message-Authenticator = 0x650b5766f4853772e7afc56471b7a0a0
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 106 length 29
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] EAP type mschapv2
[peap] Got tunneled request
    EAP-Message = 0x026a00061a03
server  {
  PEAP: Setting User-Name to 10
Sending tunneled request
    EAP-Message = 0x026a00061a03
    FreeRADIUS-Proxied-To = 127.0.0.1
    User-Name = "10"
    State = 0xed5f6a24ec3570cb0fe406473891ab01
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
server proxy-inner-tunnel {
+- entering group authorize {...}
++[control] returns notfound
} # server proxy-inner-tunnel
[peap] Got tunneled reply code 0
  PEAP: Calling authenticate in order to initiate tunneled EAP session.
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/mschapv2
[eap] processing type mschapv2
[eap] Freeing handler
++[eap] returns ok
[peap] Got tunneled reply RADIUS code 2
    EAP-Message = 0x036a0004
    Message-Authenticator = 0x00000000000000000000000000000000
    User-Name = "10"
[peap] Tunneled authentication was successful.
[peap] SUCCESS
[peap] Saving tunneled attributes for later
++[eap] returns handled
Sending Access-Challenge of id 230 to 192.168.145.42 port 45920
    EAP-Message = 0x016b00261900170301001b6e683e898fecffe435a9ac6da18b14d763fce8469753e75845e608
    Message-Authenticator = 0x00000000000000000000000000000000
    State = 0x07ead3a30f81caac02fc8e14eb27c4dd
Finished request 8.
Going to the next request
Waking up in 4.4 seconds.
rad_recv: Access-Request packet from host 192.168.145.42 port 45920, id=231, length=167
    User-Name = "10"
    State = 0x07ead3a30f81caac02fc8e14eb27c4dd
    EAP-Message = 0x026b00261900170301001b460a94724013aed47c0d5d4baf51a28b8e327f5dc38f3c4f8409eb
    Message-Authenticator = 0xc6f562fa8c5e6f07251406f048927499
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] EAP packet type response id 107 length 38
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established.  Decoding tunneled attributes.
[peap] Received EAP-TLV response.
[peap] Success
[peap] Using saved attributes from the original Access-Accept
[eap] Freeing handler
++[eap] returns ok
+- entering group post-auth {...}
++[exec] returns noop
Sending Access-Accept of id 231 to 192.168.145.42 port 45920
    User-Name = "10"
    MS-MPPE-Recv-Key = 0x95cd48dc452bb7ea093e2a2945d4337a6112847f9ac1dafce280a27713ec34ca
    MS-MPPE-Send-Key = 0x34066a293d5a0f0f5269014040f41bc79d125807510bc15bf99f75e7e3307977
    EAP-Message = 0x036b0004
    Message-Authenticator = 0x00000000000000000000000000000000
Finished request 9.
Going to the next request
Waking up in 4.3 seconds.
rad_recv: Accounting-Request packet from host 192.168.145.42 port 45920, id=232, length=131
    Acct-Status-Type = Start
    User-Name = "10"
    Calling-Station-Id = "00:17:9A:0A:54:F1"
    Called-Station-Id = "00:15:6D:AD:1E:D7"
    NAS-Port-Type = Wireless-802.11
    NAS-Port = 0
    NAS-Port-Id = "00000000"
    NAS-IP-Address = 192.168.145.42
    NAS-Identifier = "DreamWiFi"
    Framed-IP-Address = 192.168.40.19
    Acct-Session-Id = "4ab1b87300000000"
+- entering group preacct {...}
++[preprocess] returns ok
[acct_unique] Hashing 'NAS-Port = 0,Client-IP-Address = 192.168.145.42,NAS-IP-Address = 192.168.145.42,Acct-Session-Id = "4ab1b87300000000",User-Name = "10"'
[acct_unique] Acct-Unique-Session-ID = "1e54eedf8186ab47".
++[acct_unique] returns ok
[suffix] No '@' in User-Name = "10", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
++[files] returns noop
+- entering group accounting {...}
[detail]     expand: /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radacct/192.168.145.42/detail-20090917
[detail] /var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radacct/192.168.145.42/detail-20090917
[detail]     expand: %t -> Thu Sep 17 10:17:55 2009
++[detail] returns ok
++[unix] returns ok
[radutmp]     expand: /var/log/radutmp -> /var/log/radutmp
[radutmp]     expand: %{User-Name} -> 10
++[radutmp] returns ok
[attr_filter.accounting_response]     expand: %{User-Name} -> 10
attr_filter: Matched entry DEFAULT at line 12
++[attr_filter.accounting_response] returns updated
Sending Accounting-Response of id 232 to 192.168.145.42 port 45920
Finished request 10.
Высказать мнение | Ответить | Правка | Наверх | Cообщить модератору

Архив | Удалить

Индекс форумов | Темы | Пред. тема | След. тема




Партнёры:
PostgresPro
Inferno Solutions
Hosting by Hoster.ru
Хостинг:

Закладки на сайте
Проследить за страницей
Created 1996-2024 by Maxim Chirkov
Добавить, Поддержать, Вебмастеру