Hello!
I am running freeradius on Linux which is connected to
NAS. Remote users run on Windows XP
professional.
What is wrong with my Radius? What means �Invalid ACK
received�? I think that my authentication never finish
because I don�t get �Finished request, Going to the
next request� �message. Can anyone help me? What
should I do?
Thanks,
Pekka
[EMAIL PROTECTED] root]# run-radiusd -x
+ LD_LIBRARY_PATH=/usr/local/openssl/lib
+ LD_PRELOAD=/usr/local/openssl/lib/libcrypto.so
+ export LD_LIBRARY_PATH LD_PRELOAD
+ /usr/local/sbin/radiusd -x
Starting - reading configuration files ...
Using deprecated naslist file. Support for this will
go away soon.
Using deprecated clients file. Support for this will
go away soon.
Using deprecated realms file. Support for this will
go away soon.
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded System
Module: Instantiated unix (unix)
Module: Loaded eap
rlm_eap_tls: conf N ctx stored
rlm_eap: Loaded and initialized the type tls
Module: Instantiated eap (eap)
Module: Loaded preprocess
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
Module: Instantiated realm (suffix)
Module: Loaded files
Module: Instantiated files (files)
Module: Loaded Acct-Unique-Session-Id
Module: Instantiated acct_unique (acct_unique)
Module: Loaded detail
Module: Instantiated detail (detail)
Module: Loaded radutmp
Module: Instantiated radutmp (radutmp)
Initializing the thread pool...
Listening on IP address *, ports 1812/udp and
1813/udp, with proxy on 1814/udp.
Ready to process requests.
rad_recv: Access-Request packet from host
192.168.3.10:6001, id=41, length=122
User-Name = "testi"
NAS-IP-Address = 192.168.3.10
Called-Station-Id = "00-20-a6-48-e0-93"
Calling-Station-Id = "00-04-23-6b-aa-68"
NAS-Identifier = "AP-2000"
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x020a000a017465737469
Message-Authenticator =
0x26f681d2c0bec11e083b760b24819339
Sending Access-Challenge of id 41 to 192.168.3.10:6001
EAP-Message = 0x010b00060d20
Message-Authenticator =
0x00000000000000000000000000000000
State =
0x7b2ac55bdc465d728b784b40bf8668592060534051f2137a1f96b34558b632d5b1deff54
rad_recv: Access-Request packet from host
192.168.3.10:6001, id=42, length=230
User-Name = "testi"
NAS-IP-Address = 192.168.3.10
Called-Station-Id = "00-20-a6-48-e0-93"
Calling-Station-Id = "00-04-23-6b-aa-68"
NAS-Identifier = "AP-2000"
State =
0x7b2ac55bdc465d728b784b40bf8668592060534051f2137a1f96b34558b632d5b1deff54
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message =
0x020b00500d800000004616030100410100003d030140536044609b400483afa4d1774c99acd3c69705dc2151a212fd7627e5b3fe1000001600040005000a000900640062000300060013001200630100
Message-Authenticator =
0xe68faf94bd97a065d065373cf8ddeb96
rlm_eap_tls: Length Included
undefined: before/accept initialization
TLS_accept: before/accept initialization
TLS_accept: SSLv3 read client hello A
TLS_accept: SSLv3 write server hello A
TLS_accept: SSLv3 write certificate A
TLS_accept: SSLv3 write certificate request A
TLS_accept: SSLv3 flush data
TLS_accept:error in SSLv3 read client certificate A
rlm_eap_tls: SSL_read Error
Error code is ..... 2
SSL Error ..... 2
Sending Access-Challenge of id 42 to 192.168.3.10:6001
EAP-Message =
0x010c040a0dc0000006d1160301004a0200004603014053602067f6d841814e0ae3403eb7c37f8886ea76a9edbe1231db2f9e3f08a92099d4ba272a5d567f402a04d4eb28b353b691038b2fe5f332760d7bc71313d95900040016030105e90b0005e50005e200028c30820288308201f1a003020102020101300d06092a864886f70d0101040500307d310b30090603550406130266693110300e0603550408130766696e6c616e64310f300d06035504071306666f727373613110300e060355040a1307746f756b6f6c61310e300c0603550403130570616976693129302706092a864886f70d010901161a70616976692e7669686f6c61696e656e40
EAP-Message =
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
EAP-Message =
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
EAP-Message =
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
EAP-Message =
0x756b6f6c61310e300c06035504031305706169766931
Message-Authenticator =
0x00000000000000000000000000000000
State =
0xff58d87a0846d2ee0118331bcbfaa2bd206053409daff9934d4482f5477b124404437363
rad_recv: Access-Request packet from host
192.168.3.10:6001, id=43, length=156
User-Name = "testi"
NAS-IP-Address = 192.168.3.10
Called-Station-Id = "00-20-a6-48-e0-93"
Calling-Station-Id = "00-04-23-6b-aa-68"
NAS-Identifier = "AP-2000"
State =
0xff58d87a0846d2ee0118331bcbfaa2bd206053409daff9934d4482f5477b124404437363
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x020c00060d00
Message-Authenticator =
0xf524fdaaf42a3f78ecbc09393b155370
rlm_eap_tls: Received EAP-TLS ACK message
Sending Access-Challenge of id 43 to 192.168.3.10:6001
EAP-Message =
0x010d02db0d80000006d129302706092a864886f70d010901161a70616976692e7669686f6c61696e656e4072657070752e6e657430819f300d06092a864886f70d010101050003818d0030818902818100b1960c28240577b739b28e4062fefdbabf61bb1430931064acd14a4286d60a097442cc997bca64d5d276ad399c7ca21bfdc74c9093c30240497b9499492cdf6db165ed020cbc33a7094f47c020e8e4d05fb0e28119171690751321c1fb48477a24d905aa0587935006afb698cc7e6313270844d6c0dc1c75deac005ad464bd210203010001a381db3081d8301d0603551d0e0416041497b3081eae06fc54e0ac83b9ada1b04a94a10e213081
EAP-Message =
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
EAP-Message =
0x9afe8c6430e886b10e233fb5e001b48c217defefdba47d970c0c2a455209de337a697ef927d70ef2661e9bfe77840afefc6be11caf5b1594d51ce4016b21e239869c08758e269662b1c0b0ff51160301008f0d000087030102050081007f307d310b30090603550406130266693110300e0603550408130766696e6c616e64310f300d06035504071306666f727373613110300e060355040a1307746f756b6f6c61310e300c0603550403130570616976693129302706092a864886f70d010901161a70616976692e7669686f6c61696e656e4072657070752e6e65740e000000
Message-Authenticator =
0x00000000000000000000000000000000
State =
0x50c8a62a84b4b50286a9e46600a9055321605340fb1da10712f8c29b01c259a0c4ab00d9
rad_recv: Access-Request packet from host
192.168.3.10:6001, id=44, length=156
User-Name = "testi"
NAS-IP-Address = 192.168.3.10
Called-Station-Id = "00-20-a6-48-e0-93"
Calling-Station-Id = "00-04-23-6b-aa-68"
NAS-Identifier = "AP-2000"
State =
0x50c8a62a84b4b50286a9e46600a9055321605340fb1da10712f8c29b01c259a0c4ab00d9
Framed-MTU = 1400
NAS-Port-Type = Wireless-802.11
EAP-Message = 0x020d00060d00
Message-Authenticator =
0x54191cf251c00e57db5a595f1bd6bf0c
rlm_eap_tls: Received EAP-TLS ACK message
rlm_eap_tls: Invalid ACK received
rad_recv: Access-Request packet from host
192.168.3.10:6001, id=44, length=156
Sending Access-Reject of id 44 to 192.168.3.10:6001
EAP-Message = 0x040d0004
Message-Authenticator =
0x00000000000000000000000000000000
__________________________________
Do you Yahoo!?
Yahoo! Mail - More reliable, more storage, less spam
http://mail.yahoo.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
