rad_recv: Access-Request packet from host 172.18.30.69:1143, id=38, length=197 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" EAP-Message = 0x0201000a016c31303237 Message-Authenticator = 0xdae7e9bdbe9df43027e747c2190ade9d Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_eap: EAP packet type response id 1 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group authenticate (returns handled) for request 0 Sending Access-Challenge of id 38 to 172.18.30.69 port 1143 EAP-Message = 0x010200060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x7a2819c44a15c5eea6c63e48ef5478f3 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 172.18.30.69:1143, id=39, length=285 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" State = 0x7a2819c44a15c5eea6c63e48ef5478f3 EAP-Message = 0x020200500d800000004616030100410100003d030145ddc8ecfafa118fcf1df672164a0c229adee86e6737a6203b4571862bdc4ad600001600040005000a000900640062000300060013001200630100 Message-Authenticator = 0xabe6bf9721cc813e5da4d7ea5ad4a516 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 rlm_eap: EAP packet type response id 2 length 80 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization rlm_eap_tls: <<< TLS 1.0 Handshake [length 0041], ClientHello TLS_accept: SSLv3 read client hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 004a], ServerHello TLS_accept: SSLv3 write server hello A rlm_eap_tls: >>> TLS 1.0 Handshake [length 0aca], Certificate TLS_accept: SSLv3 write certificate A rlm_eap_tls: >>> TLS 1.0 Handshake [length 006a], CertificateRequest TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0) In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 1 modcall: leaving group authenticate (returns handled) for request 1 Sending Access-Challenge of id 39 to 172.18.30.69 port 1143 EAP-Message = 0x0103040a0dc000000b8d160301004a02000046030145ddcad8ab4998de073cec1275b620b083a1737406cb0f5abb3248b3ceb0f4b02019868c47790627b105fb0b59ec3137202c96e0e77eb98ce1a78c6640ebb37c510004001603010aca0b000ac6000ac30003b1308203ad30820295a003020102020837cabf6d426087c6300d06092a864886f70d010105050030593122302006035504030c1920466972737420496e647573747269616c20574c414e20434131263024060355040a0c1d466972737420496e647573747269616c205265616c7479205472757374310b3009060355040613027573301e170d3037303232303137343431395a170d30 EAP-Message = 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 EAP-Message = 0xbf2a772e1a934d3820145d3d9e6cdacffb007ca0a96f90dd35be60fa15ede16c294303ceb4549fc6977308d060d9b6c2b10b87a8ce61183f2747017d5b4ed5ad30891d028679a6f1582b99ef0815fae1ec6b17b5ecfd5a915ff6c618990f5207495c87ad9f24cef203fc264dc93da47b4cee13c40a99f761ec18f6e6706bfc284641f0f975536cde5455ca7ba6e138a264ba75f6538ade8625036d62f8213492a8584d5f0203010001a360305e300c0603551d130101ff04023000300e0603551d0f0101ff0404030204b0301d0603551d0e04160414eb76c5736ebdc439a88270d9b5070b36169dfe56301f0603551d23041830168014a74a71a61a4c EAP-Message = 0x9667e92ead488f00f85edb469be5300d06092a864886f70d010105050003820101005606d91abd72a7d136456f8431d541bc98e74a333ccac72d565f90a49aeaf0ac0b7d1d39c17d113e0b0d3eaf2b4c01f3f0bd1bbfa0beceab82c022376cb98fc3184310fa5aa43b103ea4471fddcdf194a3da5b9a67b6494619249b5f8072f81e6fbb9cca208dd4d07a7b365fbb2896f9de1ea382b6b533f3c0fc67c85416455a88422afa782e6a28690730c411c63d5de4c9395b4d275683c442f1142495b921bb70c7eaa0cb81d57069d32f3aeb33f8d0f4791174cc986511f058a437aa7f2d08b84d66e859be02c13df27c9c14f9437f0ffec2baf22a0d708009 EAP-Message = 0xe37e55afa4160f24f52471787494735982bfbdea64fd Message-Authenticator = 0x00000000000000000000000000000000 State = 0x9aad5767d0e9c4c2bdc18964cb9aff9f Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 172.18.30.69:1143, id=40, length=211 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" State = 0x9aad5767d0e9c4c2bdc18964cb9aff9f EAP-Message = 0x020300060d00 Message-Authenticator = 0x0b0b1307feb868642775d26f3efa3bb6 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_eap: EAP packet type response id 3 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 modcall: leaving group authorize (returns updated) for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 2 modcall: leaving group authenticate (returns handled) for request 2 Sending Access-Challenge of id 40 to 172.18.30.69 port 1143 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x22abe89eb437ed2efd81bc3a2cadba16ab95f643b081761c3d7a9b1022adea4c960dcfa8772b199455a965bc896af94d0203010001a3633061300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e04160414a74a71a61a4c9667e92ead488f00f85edb469be5301f0603551d230418301680140fbee2d7dcc2f4278b25532544c0ab8eb3771a7f300d06092a864886f70d0101050500038201010035257ebaee5c2ec0e79b82741d3f2e0ad03b9d5e70c72ee0ae481a198dff775bec6c28388bb2aac299b2aec3b70da7cf21a9d4db169fbdab9bed1914a4c0d2ad2b3f2bbe1e461bb6b8185725616b35 EAP-Message = 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 EAP-Message = 0x6972737420496e647573747269616c205265616c7479 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xff184703cf378b99fabebe4cbdcbef62 Finished request 2 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 172.18.30.69:1143, id=41, length=211 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" State = 0xff184703cf378b99fabebe4cbdcbef62 EAP-Message = 0x020400060d00 Message-Authenticator = 0xee135b7a4715880e2ed0480a189dfc13 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 3 modcall[authorize]: module "preprocess" returns ok for request 3 rlm_eap: EAP packet type response id 4 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 3 modcall: leaving group authorize (returns updated) for request 3 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 3 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 3 modcall: leaving group authenticate (returns handled) for request 3 Sending Access-Challenge of id 41 to 172.18.30.69 port 1143 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x6b3ca0e05edbb0e8e461161e1c8e4de8d7c0455e0171362217ba1f5ea5baca71a9c63b410ed9cd8f2b3cfac8a117f04172160301006a0d000062020102005d005b30593122302006035504030c1920466972737420496e647573747269616c20574c414e20434131263024060355040a0c1d466972737420496e647573747269616c205265616c7479205472757374310b30090603550406130275730e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x3b9b743626e1cc6988d174e13dfad2cc Finished request 3 Going to the next request --- Walking the entire request list --- Waking up in 5 seconds... rad_recv: Access-Request packet from host 172.18.30.69:1143, id=42, length=1705 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" State = 0x3b9b743626e1cc6988d174e13dfad2cc EAP-Message = 0x020505d20dc00000098b160301095b0b00074b0007480003b6308203b23082029aa00302010202084a111ea0ec999096300d06092a864886f70d010105050030593122302006035504030c1920466972737420496e647573747269616c20574c414e20434131263024060355040a0c1d466972737420496e647573747269616c205265616c7479205472757374310b3009060355040613027573301e170d3037303232323135303631385a170d3137303231313135313532395a3038310e300c06035504030c056c3130323731263024060355040a0c1d467269737420496e647573747269616c205265616c747920547275737430820122300d06092a EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x01050500304a3113301106035504030c0a464941646d696e43413131263024060355040a0c1d466972737420496e647573747269616c205265616c7479205472757374310b3009060355040613025553301e170d3037303232303137353335335a170d3137303231313135313532395a30593122302006035504030c1920466972737420496e647573747269616c20574c414e20434131263024060355040a0c1d466972737420496e647573747269616c205265616c7479205472757374310b300906035504061302757330820122300d06092a864886f70d01010105000382010f003082010a02820101008703064c57c21dbf3b44a4e7bb9d143632 EAP-Message = 0xfab0beb2365f49d55ad078a18ef1dff034909d1233015119243747e1877046bbe1cfb2e40b5257ba20133e372dc70df9e10b59c9761b47d08f5560ef39d5805891b05437bf3f4192f3530b998ac74f0aadc814179b0a32726409456dae673979ab57a60597c8284b8309a65e72b5bd1a308ded9e04c63b6d240c1362d9aae86a74e49bc699f6b91ba1dd0c533e7b92c5d82add1b295cf06e02e83b9bac520242872ad6901320a60642c61683658b4e826664fabebb12d512b5f3dabdab508922abe89eb437ed2efd81bc3a2cadba16ab95f643b081761c3d7a9b1022adea4c960d Message-Authenticator = 0xf86ddd1e547ee29646bd925e6994205e Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 rlm_eap: EAP packet type response id 5 length 253 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 4 modcall: leaving group authorize (returns updated) for request 4 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 4 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS First Fragment of the message eaptls_verify returned 9 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 4 modcall: leaving group authenticate (returns handled) for request 4 Sending Access-Challenge of id 42 to 172.18.30.69 port 1143 EAP-Message = 0x010600060d00 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x167e295868fa3b2e0c07f6e167ab128d Finished request 4 Going to the next request Waking up in 5 seconds... rad_recv: Access-Request packet from host 172.18.30.69:1143, id=43, length=1180 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" State = 0x167e295868fa3b2e0c07f6e167ab128d EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x3c89fc6670866d9d8009b81d9d2ff4e11a331451da8f3787aeed7f959f5812bd23585d60c1dd5c1b40a6159deeebbc9ea57f3f34d401dcd5348267004817fba8c9d85f09f0255317efbc51c2f340304e2c91b539afa6ea9894f825156f0743b6ee13ac226996e20ecd3bdcb5ea4c05c922583649bc61b3029f7e9a8b9722cfef54b3f958d097d1fa43f0b96496349be547500ef60ed2c123441f65bd52c426025818fc72c3e83c140301000101160301002015bfc4a3ce4083ca7d6a7a52cb8a254bb56f60e433e00fb3f55da6a3f8d813a1 Message-Authenticator = 0xe0092d8de0bf7a9c6a9bf95744815127 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 5 modcall[authorize]: module "preprocess" returns ok for request 5 rlm_eap: EAP packet type response id 6 length 253 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 5 modcall: leaving group authorize (returns updated) for request 5 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake rlm_eap_tls: <<< TLS 1.0 Handshake [length 074f], Certificate --> verify error:num=20:unable to get local issuer certificate rlm_eap_tls: >>> TLS 1.0 Alert [length 0002], fatal unknown_ca TLS Alert write:fatal:unknown CA TLS_accept:error in SSLv3 read client certificate B rlm_eap: SSL error error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. In SSL Handshake Phase In SSL Accept mode eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 5 modcall: leaving group authenticate (returns handled) for request 5 Sending Access-Challenge of id 43 to 172.18.30.69 port 1143 EAP-Message = 0x010700110d800000000715030100020230 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xcf0c52c27b9106498c1e7198b568bd8d Finished request 5 Going to the next request Waking up in 5 seconds... rad_recv: Access-Request packet from host 172.18.30.69:1143, id=44, length=211 Framed-MTU = 1480 NAS-IP-Address = 172.18.30.69 NAS-Identifier = "45-1-sw" User-Name = "l1027" Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 5 NAS-Port-Type = Ethernet NAS-Port-Id = "5" Called-Station-Id = "00-14-c2-7e-03-00" Calling-Station-Id = "00-00-86-43-e1-84" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "35" State = 0xcf0c52c27b9106498c1e7198b568bd8d EAP-Message = 0x020700060d00 Message-Authenticator = 0x7224fb92820423e8e537c83a16d9d8b4 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 6 modcall[authorize]: module "preprocess" returns ok for request 6 rlm_eap: EAP packet type response id 7 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 6 modcall: leaving group authorize (returns updated) for request 6 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack alert eaptls_verify returned 4 eaptls_process returned 4 rlm_eap: Handler failed in EAP/tls rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 6 modcall: leaving group authenticate (returns invalid) for request 6 auth: Failed to validate the user. Delaying request 6 for 1 seconds Finished request 6 Going to the next request Waking up in 5 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 38 with timestamp 45ddcad8 Cleaning up request 1 ID 39 with timestamp 45ddcad8 Cleaning up request 2 ID 40 with timestamp 45ddcad8 Sending Access-Reject of id 44 to 172.18.30.69 port 1143 EAP-Message = 0x04070004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 3 ID 41 with timestamp 45ddcad9 Cleaning up request 4 ID 42 with timestamp 45ddcad9 Cleaning up request 5 ID 43 with timestamp 45ddcad9 Cleaning up request 6 ID 44 with timestamp 45ddcad9 Nothing to do. Sleeping until we see a request. ^[[B