(RADIATOR) Xsupplicant Radiator EAP_TLS problems

Mon Jan 12 03:02:39 CST 2004

Mike,
Below there is the Xsupplicant log,
Do you have any idea about what's going on in the supplicant side?
You wrote that perhaps the supplicant does not like the either the
server certificate or their own certificate. I created them using the
xpextensions and, as I said before, they work under a windows 802.1x
client... could it be the problem?
Kind regards,
Alex

Omni:/home/alex# xsupplicant -i eth1 -d 8
Calling do_eapol, with device eth1
Setup on device eth1 complete
(EAPMD5) Initalized
(EAPMS-CHAP) Initalized
Done with init.
Loading profile for test from /etc/1x/1x.conf.
Sending EAPOL-Start #1
## eap_decode_packet ##: Got an EAP request
## eap_decode_packet ##: Type is Identity
Connection Established, authenticating...
Please Enter Your Password :
ACQUIRED
## eap_decode_packet ##: Got an EAP request
### Type is 13, length: 6
Loading certificate /etc/1x/certs/certs_amuse/root.pem
. . .
(TLS)Loaded root certificate
/etc/1x/certs/certs_amuse/root.pem and dirctory (null)
     --- SSL : before/connect initialization
     --- SSL : before/connect initialization
     --- SSL : SSLv3 write client hello A
     --- SSL : SSLv3 read server hello A
Destination : 0:40:96:31:d:73
AUTHENTICATING
## eap_decode_packet ##: Got an EAP request
### Type is 13, length: 1034
(EAPTTLS) Saved packet fragment.
Destination : 0:40:96:31:d:73
## eap_decode_packet ##: Got an EAP request
### Type is 13, length: 1030
(EAPTTLS) Saved packet fragment.
Destination : 0:40:96:31:d:73
## eap_decode_packet ##: Got an EAP request
### Type is 13, length: 8
Destination : 0:40:96:31:d:73
(EAPMD5) Cleaning up.
(EAPMS-CHAP) Cleaning up.

-----Original Message-----
From: Mike McCauley [mailto:mikem at open.com.au] 
Sent: zondag 11 januari 2004 11:17
To: Lopez, A.; radiator at open.com.au
Subject: Re: (RADIATOR) Xsupplicant Radiator EAP_TLS problems

Hello Alex,

Im not sure what is going on here.
Looks like Radiator is send back its certificate fine, but then the
client 
does not send its certificate.

I suspect that there is a problem innthe clinet: either it does not like
the 
servers certificate, or else it cant access or decode it own
certificate.

Suggest you have a close look at the XSupplicant log.

We have tested Radiator against XSupplicant and TLS successfully here.

Cheers.

On Sat, 10 Jan 2004 01:21 am, Lopez, A. wrote:
> Dear all,
> I am trying to make EAP-TLS work between Xsupplicant and Radiator. But
I
> am having some problems.
> I generated the certidficates using Openssl and authentication works
> perfectly when authenticating against Radiator from a windows
> supplicant. The problem only appears when using Xsupplicant (under
> GNU/Debian).
> In my notebook I installed:
> Xsupplicant 0.8b
> Openssl 0.9.7b
> Libpcap 0.7.2
> Lindnet 1.7
> Below there is the 1.conf I used for Xsupplicant and the output
> generated by Radiator during the authentication process.
> I would appreciate any idea.
> Thanks in advance
> Alex
>
> /etc/1x/1x.conf
> --------------------------
> default : id = a.lopez at amuse_tls.nl
> default : cert = /etc/1x/certs/certs_amuse/a.lopez at amuse_tls.nl.der
> default : key = /etc/1x/certs/certs_amuse/a.lopez at amuse_tls.nl.pem
> default : root = /etc/1x/certs/certs_amuse/root.pem
> default :auth = EAP
> default : pref = tls
> default : random_file = /dev/random
> default : after_auth = "/bin/echo I authenticated"
>
> =================================
>
> RADIATOR OUTPUT:
> ------------------------
> Fri Jan  9 14:12:25 2004: DEBUG: Reading users file
> /etc/radiator/users_tls
> Fri Jan  9 14:12:25 2004: DEBUG: Reading users file
/etc/radiator/users
> Fri Jan  9 14:12:25 2004: DEBUG: Reading users file
/etc/radiator/users
> Fri Jan  9 14:12:25 2004: DEBUG: Finished reading configuration file
> '/etc/radiator/radius.cfg'
> This Radiator license will expire on 2004-02-01
> This Radiator license will stop operating after 1000 requests
> To purchase an unlimited full source version of Radiator, see
> http://www.open.com.au/ordering.html
> To extend your evaluation period, contact admin at open.com.au
>
> Fri Jan  9 14:12:25 2004: DEBUG: Reading dictionary file
> '/etc/radiator/dictionary'
> Fri Jan  9 14:12:26 2004: DEBUG: Creating authentication port
> 0.0.0.0:1812
> Fri Jan  9 14:12:26 2004: DEBUG: Creating accounting port 0.0.0.0:1813
> Fri Jan  9 14:12:26 2004: NOTICE: Server started: Radiator 3.7.1 on
> phoenix (EVALUATION)
> Fri Jan  9 14:13:54 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1035 ....
> Code:       Access-Request
> Identifier: 5
> Authentic:
> <233>,<246><157>.<209><178><150><24>8<255><25><185><151><30><161>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><0><0><25><1>a.lopez at amuse_tls.nl
>         Message-Authenticator =
> <200><181><130><228>DP<195><234><152><140>T<229><24><24><201>`
>
> Fri Jan  9 14:13:54 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:13:54 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:13:54 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:13:54 2004: DEBUG: Handling with EAP: code 2, 0, 25
> Fri Jan  9 14:13:54 2004: DEBUG: Response type 1
> Fri Jan  9 14:13:55 2004: DEBUG: EAP result: 3, EAP TLS Challenge
> Fri Jan  9 14:13:55 2004: DEBUG: Access challenged for
> a.lopez at amuse_tls.nl: EAP TLS Challenge
> Fri Jan  9 14:13:55 2004: DEBUG: Packet dump:
> *** Sending to 131.155.193.92 port 1035 ....
> Code:       Access-Challenge
> Identifier: 5
> Authentic:
> <233>,<246><157>.<209><178><150><24>8<255><25><185><151><30><161>
> Attributes:
>         EAP-Message = <1><1><0><6><13>
>         Message-Authenticator =
> <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
>
> Fri Jan  9 14:13:55 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1036 ....
> Code:       Access-Request
> Identifier: 6
> Authentic:
> <247><214><254><245><146>p<189><133><221><24><183><178><177>:<11><192>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message =
>
<2><1><0>n<13><128><0><0><0>d<22><3><1><0>_<1><0><0>[<3><1>?<254><169><2
> 37>k<233><229>|<206>I<248><166>
>
U<25><208><130>M<237><229><188><218><152><210><187>Y<9><219><172><139><2
> 28><141><22><0><0>4<0>9<0>8<0>5<0><22><0><19><0><10><
>
0>3<0>2<0>/<0>f<0><5><0><4><0>c<0>b<0>a<0><21><0><18><0><9><0>e<0>d<0>`<
> 0><20><0><17><0><8><0><6><0><3><1><0>
>
>         Message-Authenticator =
> <15><180><202><136><208>;<153>Q<224><29>}Z<243>K<7><21>
>
> Fri Jan  9 14:13:55 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:13:55 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:13:55 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:13:55 2004: DEBUG: Handling with EAP: code 2, 1, 110
> Fri Jan  9 14:13:55 2004: DEBUG: Response type 13
> Fri Jan  9 14:13:55 2004: DEBUG: EAP result: 3, EAP TLS Challenge
> Fri Jan  9 14:13:55 2004: DEBUG: Access challenged for
> a.lopez at amuse_tls.nl: EAP TLS Challenge
> Fri Jan  9 14:13:55 2004: DEBUG: Packet dump:
> *** Sending to 131.155.193.92 port 1036 ....
> Code:       Access-Challenge
> Identifier: 6
> Authentic:
> <247><214><254><245><146>p<189><133><221><24><183><178><177>:<11><192>
> Attributes:
>         EAP-Message =
>
<1><2><4><10><13><192><0><0><8><2><22><3><1><0>J<2><0><0>F<3><1>?<254><1
> 69><19><213><19>s<234><181><128
>
> ><253>3~<204><146><134>{y<237>Za<171>y.<252>Z<135>j<138><212>I<199>
>
> <159><17>)5<217><156><183><213>Z<136><193><137><175>DTMHa
>
<129><166><242>!y<146><229>VQ<189>+<183><153><30><0>5<0><22><3><1><6><23
> 3><11><0><6><229><0><6><226><0><2><243>0<130><2><239>
>
0<130><2>X<160><3><2><1><2><2><1><1>0<13><6><9>*<134>H<134><247><13><1><
> 1><4><5><0>0<129><174>1<11>0<9><6><3>U<4><6><19><2>NL
>
1<20>0<18><6><3>U<4><8><19><11>Netherlands1<18>0<16><6><3>U<4><7><19><9>
> Eindhoven1*0(<6><3>U<4><10><19>!Technische Universite it
> Eindhoven1<16>0<14><6><3>U<4><11><19><7>TTE-E
>
>         EAP-Message =
>
CO1<24>0<22><6><3>U<4><3><20><15>silmarillion_ca1<29>0<27><6><9>*<134>H<
> 134><247><13><1><9><1><22><14>a
>
.lopez at tue.nl0<30><23><13>031219130601Z<23><13>041218130601Z0<129><178>1
> <11>0<9><6><3>U<4><6><19><2>NL1<20>0<18><6><3>U<4><8>
>
<19><11>Netherlands1<18>0<16><6><3>U<4><7><19><9>Eindhoven1*0(<6><3>U<4>
> <10><19>!Technische Universiteit Eindhoven1<16>0<14><
>
6><3>U<4><11><19><7>TTE-ECO1<28>0<26><6><3>U<4><3><20><19>server_silmari
> llion1<29>0<27><6><9>*<134>H<134><247><13>
>
>         EAP-Message =
>
<1><9><1><22><14>a.lopez at tue.nl0<129><159>0<13><6><9>*<134>H<134><247><1
> 3><1><1><1><5><0><3><129><141><
>
0>0<129><137><2><129><129><0><193><217>kQ<132>a<147>7#=&O<172><238><149>
> <188><28><172><133>E*<187><143><172>KP!<194>T<253><23
>
0>Y<222>r<11><20><22>(<214>o<<166><171><173><186>'<185>YW<19><255><14>zS
> <231>'B<156>U<239><27>TW<159>;<160><134><255>\<164><1
>
52>s<155><144><250><28>n<11>}-<129><8><197><191><214><172>{<241><142><12
>
> ><163><159>tFg<197>,tQ<20>x<144>_<211>^<31><216><200>
>
>
}<200>><129>E<210><135><29><232><1><192>&<146><140><247>K%7<236><167><2>
> <3><1><0><1><163><23>0<21>0<19><6><3>U<29>%<4><12>0<1
>
0><6><8>+<6><1><5><5><7><3><1>0<13><6><9>*<134>H<134><247><13><1><1><4><
> 5><0><3><129><129><0><161>y<206><242><182><178><154><
>
15><16><181>E<181><142>.<189><249><223><161>;<174><211><148>._<7>M<240><
> 222>
>
>         EAP-Message =
>
<193>X<144><148><172><133><236><226><141><14><132>Z><147><164><21>?j:4\E
> <6><235>C<141><245><203>p<31><1
>
64><174>4<156>7<135><19><226>(]<128>#<29><199>C<245><154>8<141>_<133><31
>
> ><182><144>m<19>D<199>l<255><159><170>8*<240><249>"<2
>
>
53><11><25><148><248><175>K!<247><144><253><241>Wc<186>K\<236><30><242><
> 185><238>E<128>K+t<154>@<254>.o<238><0><3><233>0<130>
>
<3><229>0<130><3>N<160><3><2><1><2><2><1><0>0<13><6><9>*<134>H<134><247>
> <13><1><1><4><5><0>0<129><174>1<11>0<9><6><3>U<4><6><
>
19><2>NL1<20>0<18><6><3>U<4><8><19><11>Netherlands1<18>0<16><6><3>U<4><7
>
> ><19><9>Eindhoven1*0(<6><3>U<4><10><19>!Technische Un iversiteit
>
> Eindhoven1<16>0<14><6><3>U<4><11><19><7>TTE-EC
>
>         EAP-Message = O1<24>0<22><6><3>U<4><3><20><15>silmarilli
>         Message-Authenticator =
> <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
>
> Fri Jan  9 14:13:55 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1037 ....
> Code:       Access-Request
> Identifier: 7
> Authentic:  <9><24>`J<194><160>r<201><144><137><175>K<151>#<166><171>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><2><0><6><13><0>
>         Message-Authenticator =
> <161><189><171><156><137><205><200><159><215>:Y<142>U<23><140>z
>
> Fri Jan  9 14:13:55 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:13:55 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:13:55 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:13:55 2004: DEBUG: Handling with EAP: code 2, 2, 6
> Fri Jan  9 14:13:55 2004: DEBUG: Response type 13
> Fri Jan  9 14:13:55 2004: DEBUG: EAP result: 3, EAP TLS Challenge
> Fri Jan  9 14:13:55 2004: DEBUG: Access challenged for
> a.lopez at amuse_tls.nl: EAP TLS Challenge
> Fri Jan  9 14:13:55 2004: DEBUG: Packet dump:
> *** Sending to 131.155.193.92 port 1037 ....
> Code:       Access-Challenge
> Identifier: 7
> Authentic:  <9><24>`J<194><160>r<201><144><137><175>K<151>#<166><171>
> Attributes:
>         EAP-Message =
>
<1><3><4><6><13>@on_ca1<29>0<27><6><9>*<134>H<134><247><13><1><9><1><22>
> <14>a.lopez at tue.nl0<30><23><13>
>
031219130528Z<23><13>040118130528Z0<129><174>1<11>0<9><6><3>U<4><6><19><
> 2>NL1<20>0<18><6><3>U<4><8><19><11>Netherlands1<18>0<
> 16><6><3>U<4><7><19><9>Eindhoven1*0(<6><3>U<4><10><19>!Technische
> Universiteit Eindhoven1<16>0<14><6><3>U<4><11><19><7>TTE-EC
>
O1<24>0<22><6><3>U<4><3><20><15>silmarillion_ca1<29>0<27><6><9>*<134>H<1
> 34><247><13><1><9><1><22><14>a.lopez at tue.nl0<129>
>
>         EAP-Message =
>
<159>0<13><6><9>*<134>H<134><247><13><1><1><1><5><0><3><129><141><0>0<12
> 9><137><2><129><129><0><196>*<1
>
35><211><234><210><150>7]<165><209><242><129><29>v<163><12>p<215>h<139><
> 172><234>o<179><227><205><159>^><207><165><182><1>7<1
>
53>cw<247><236><248>|<194><163>"<220>>K&<167><1><137>UD<8><21>@<157><0>L
> <255><174><215><205>Aa%K<1>n<193>1<249>{(<152><199>`<
>
205><133>Y|XI}<1><225>F<167><19><219>q<9>T<140><176><10><14>"@<17><132><
> 184><14>+1<231>P<23><241>M<239><151><8><178><154><228
>
>
><181><170><150><228>d<235><145>HL<186><181><2><3><1><0><1><163><130><1>
>
> <15>0<130><1><11>0<29><6><3>U<29><14><4><22><4><20>\-
>
<136><218><218><244>N<178><10><165><225>t<170><150>2L<178>T<20>u0<129><2
> 19><6><3>U<29>#<4><129><211>0<129><208><128><20>\-<13
>
6><218><218><244>N<178><10><165><225>t<170><150>2L<178>T<20>u<161><129><
> 180><164><129><177>0<129><174>1<11>0<9><6><3>U<4><6>
>
>         EAP-Message =
>
<19><2>NL1<20>0<18><6><3>U<4><8><19><11>Netherlands1<18>0<16><6><3>U<4><
> 7><19><9>Eindhoven1*0(<6><3>U<4 ><10><19>!Technische Universiteit
>
Eindhoven1<16>0<14><6><3>U<4><11><19><7>TTE-ECO1<24>0<22><6><3>U<4><3><2
> 0><15>silmarillion_
>
ca1<29>0<27><6><9>*<134>H<134><247><13><1><9><1><22><14>a.lopez at tue.nl<1
> 30><1><0>0<12><6><3>U<29><19><4><5>0<3><1><1><255>0<1
>
3><6><9>*<134>H<134><247><13><1><1><4><5><0><3><129><129><0>ib<160><147>
> <199><198><180><186><165>8<215><161><160><203>h<228><
>
255><204><166><247><143><231>,fy+<25><193><229>z<176>F<168><196><7><131>
> n<138><138>RJTD<25>S<156><172><241>?<182><191><158>
>
>         EAP-Message =
>
<191><5><11>tl{<237>wtcMLy)H<144>k<192>5q~<178><225><212><17>7<153><152>
> <154><29><148><3><137>7<158>Z<1
>
75>"<232><192><213><233><190><20><1><204><215><20><160><255><209><213><2
> 5>~<242>7N<133><180>8r<215>F<226><13><131><165><192>|
>
<210><137><147><247><151><181><248><22><3><1><0><192><13><0><0><184><2><
> 1><2><0><179><0><177>0<129><174>1<11>0<9><6><3>U<4><6
>
>
><19><2>NL1<20>0<18><6><3>U<4><8><19><11>Netherlands1<18>0<16><6><3>U<4>
>
> <7><19><9>Eindhoven1*0(<6><3>U<4><10><19>!Technische Universiteit
>
Eindhoven1<16>0<14><6><3>U<4><11><19><7>TTE-ECO1<24>0<22><6><3>U<4><3><2
> 0><15>silmarillion_ca1<29>0<27><6><9>*<1 34>H<134><247><13><1><9><1>
>
>         EAP-Message = <22><14>a.lopez at tue.nl<14><0>
>         Message-Authenticator =
> <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
>
> Fri Jan  9 14:13:56 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1038 ....
> Code:       Access-Request
> Identifier: 8
> Authentic:
> <142><21><200><145><176><24><188>RO<193><246>~<188><15><<172>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><3><0><6><13><0>
>         Message-Authenticator =
> W<223>2<136>><153><160>a<172><173>H<15><226><148><237>I
>
> Fri Jan  9 14:13:56 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:13:56 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:13:56 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:13:56 2004: DEBUG: Handling with EAP: code 2, 3, 6
> Fri Jan  9 14:13:56 2004: DEBUG: Response type 13
> Fri Jan  9 14:13:56 2004: DEBUG: EAP result: 3, EAP TLS Challenge
> Fri Jan  9 14:13:56 2004: DEBUG: Access challenged for
> a.lopez at amuse_tls.nl: EAP TLS Challenge
> Fri Jan  9 14:13:56 2004: DEBUG: Packet dump:
> *** Sending to 131.155.193.92 port 1038 ....
> Code:       Access-Challenge
> Identifier: 8
> Authentic:
> <142><21><200><145><176><24><188>RO<193><246>~<188><15><<172>
> Attributes:
>         EAP-Message = <1><4><0><8><13><0><0><0>
>         Message-Authenticator =
> <0><0><0><0><0><0><0><0><0><0><0><0><0><0><0><0>
>
> Fri Jan  9 14:13:56 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:13:56 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:13:56 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:13:56 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:13:56 2004: DEBUG: Handling with EAP: code 2, 4, 6
> Fri Jan  9 14:13:56 2004: DEBUG: Response type 13
> Fri Jan  9 14:13:56 2004: DEBUG: EAP result: 2, EAP TLS Nothing to
read
> or write
> Fri Jan  9 14:13:57 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:13:57 2004: INFO: Duplicate request id 9 received from
> 131.155.193.92(1039): ignored
> Fri Jan  9 14:13:58 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:13:58 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:13:58 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:13:58 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:13:58 2004: DEBUG: Handling with EAP: code 2, 4, 6
> Fri Jan  9 14:13:58 2004: DEBUG: Response type 13
> Fri Jan  9 14:13:58 2004: DEBUG: EAP result: 2, EAP TLS Nothing to
read
> or write
> Fri Jan  9 14:13:59 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:13:59 2004: INFO: Duplicate request id 9 received from
> 131.155.193.92(1039): ignored
> Fri Jan  9 14:14:00 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:14:00 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:14:00 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:14:00 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:14:00 2004: DEBUG: Handling with EAP: code 2, 4, 6
> Fri Jan  9 14:14:00 2004: DEBUG: Response type 13
> Fri Jan  9 14:14:00 2004: DEBUG: EAP result: 2, EAP TLS Nothing to
read
> or write
> Fri Jan  9 14:14:01 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:14:01 2004: INFO: Duplicate request id 9 received from
> 131.155.193.92(1039): ignored
> Fri Jan  9 14:14:02 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:14:02 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:14:02 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:14:02 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:14:02 2004: DEBUG: Handling with EAP: code 2, 4, 6
> Fri Jan  9 14:14:02 2004: DEBUG: Response type 13
> Fri Jan  9 14:14:02 2004: DEBUG: EAP result: 2, EAP TLS Nothing to
read
> or write
> Fri Jan  9 14:14:03 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:14:03 2004: INFO: Duplicate request id 9 received from
> 131.155.193.92(1039): ignored
> Fri Jan  9 14:14:04 2004: DEBUG: Packet dump:
> *** Received from 131.155.193.92 port 1039 ....
> Code:       Access-Request
> Identifier: 9
> Authentic:  f<249><168><236><130>%<167>t<252>N<198>K<2><247>Y<11>
> Attributes:
>         User-Name = "a.lopez at amuse_tls.nl"
>         NAS-IP-Address = 131.155.193.92
>         Called-Station-Id = "004096310d73"
>         Calling-Station-Id = "00022d0292be"
>         NAS-Identifier = "ap340-2"
>         NAS-Port = 29
>         Framed-MTU = 1400
>         NAS-Port-Type = Wireless-IEEE-802-11
>         EAP-Message = <2><4><0><6><13><0>
>         Message-Authenticator =
> <169><132>%h<239><217><5>!<197><239>pU<154><179>jx
>
> Fri Jan  9 14:14:04 2004: DEBUG: Handling request with Handler
> 'Realm=amuse_tls.nl'
> Fri Jan  9 14:14:04 2004: DEBUG:  Deleting session for
> a.lopez at amuse_tls.nl, 131.155.193.92, 29
> Fri Jan  9 14:14:04 2004: DEBUG: Handling with Radius::AuthFILE:
> Fri Jan  9 14:14:04 2004: DEBUG: Handling with EAP: code 2, 4, 6
> Fri Jan  9 14:14:04 2004: DEBUG: Response type 13
> Fri Jan  9 14:14:04 2004: DEBUG: EAP result: 2, EAP TLS Nothing to
read
> or write
>
>
> ===
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia
http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.