ZusLwhjA

1
2(91) Tue May 29 15:55:53 2018: Debug: Received Access-Request Id 167 from 172.31.1.167:1812 to 172.31.1.130:1812 length 327
3(91) Tue May 29 15:55:53 2018: Debug:   Framed-MTU = 1480
4(91) Tue May 29 15:55:53 2018: Debug:   NAS-IP-Address = 172.31.1.167
5(91) Tue May 29 15:55:53 2018: Debug:   NAS-Identifier = "HP-2530-24"
6(91) Tue May 29 15:55:53 2018: Debug:   User-Name = "alex"
7(91) Tue May 29 15:55:53 2018: Debug:   Service-Type = Framed-User
8(91) Tue May 29 15:55:53 2018: Debug:   Framed-Protocol = PPP
9(91) Tue May 29 15:55:53 2018: Debug:   NAS-Port = 9
10(91) Tue May 29 15:55:53 2018: Debug:   NAS-Port-Type = Ethernet
11(91) Tue May 29 15:55:53 2018: Debug:   NAS-Port-Id = "9"
12(91) Tue May 29 15:55:53 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
13(91) Tue May 29 15:55:53 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
14(91) Tue May 29 15:55:53 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
15(91) Tue May 29 15:55:53 2018: Debug:   CHAP-Password = 0xd600000000000000000000000000000000
16(91) Tue May 29 15:55:53 2018: Debug:   Message-Authenticator = 0xf8aa2a35b0c871fbe81d98560ac088b0
17(91) Tue May 29 15:55:53 2018: Debug:   MS-RAS-Vendor = 11
18(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
19(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
20(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
21(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
22(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
23(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x0138
24(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x013a
25(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x0140
26(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x0141
27(91) Tue May 29 15:55:53 2018: Debug:   HP-Capability-Advert = 0x0151
28(91) Tue May 29 15:55:53 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
29(91) Tue May 29 15:55:53 2018: Debug:   authorize {
30(91) Tue May 29 15:55:53 2018: Debug:     update {
31(91) Tue May 29 15:55:53 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
32(91) Tue May 29 15:55:53 2018: Debug:          --> 172.31.1.167
33(91) Tue May 29 15:55:53 2018: Debug:       EXPAND %l
34(91) Tue May 29 15:55:53 2018: Debug:          --> 1527602153
35(91) Tue May 29 15:55:53 2018: Debug:     } # update = noop
36(91) Tue May 29 15:55:53 2018: Debug:     policy packetfence-set-tenant-id {
37(91) Tue May 29 15:55:53 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
38(91) Tue May 29 15:55:53 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
39(91) Tue May 29 15:55:53 2018: Debug:          --> 0
40(91) Tue May 29 15:55:53 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
41(91) Tue May 29 15:55:53 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
42(91) Tue May 29 15:55:53 2018: Debug:         update control {
43(91) Tue May 29 15:55:53 2018: Debug:           EXPAND %{User-Name}
44(91) Tue May 29 15:55:53 2018: Debug:              --> alex
45(91) Tue May 29 15:55:53 2018: Debug:           SQL-User-Name set to 'alex'
46(91) Tue May 29 15:55:53 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
47(91) Tue May 29 15:55:53 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
48(91) Tue May 29 15:55:53 2018: Debug:              --> 1
49(91) Tue May 29 15:55:53 2018: Debug:         } # update control = noop
50(91) Tue May 29 15:55:53 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
51(91) Tue May 29 15:55:53 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
52(91) Tue May 29 15:55:53 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
53(91) Tue May 29 15:55:53 2018: Debug:     } # policy packetfence-set-tenant-id = noop
54(91) Tue May 29 15:55:53 2018: Debug:     policy rewrite_calling_station_id {
55(91) Tue May 29 15:55:53 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
56(91) Tue May 29 15:55:53 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
57(91) Tue May 29 15:55:53 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
58(91) Tue May 29 15:55:53 2018: Debug:         update request {
59(91) Tue May 29 15:55:53 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
60(91) Tue May 29 15:55:53 2018: Debug:              --> 78:24:af:07:fc:cf
61(91) Tue May 29 15:55:53 2018: Debug:         } # update request = noop
62(91) Tue May 29 15:55:53 2018: Debug:         [updated] = updated
63(91) Tue May 29 15:55:53 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
64(91) Tue May 29 15:55:53 2018: Debug:       ... skipping else: Preceding "if" was taken
65(91) Tue May 29 15:55:53 2018: Debug:     } # policy rewrite_calling_station_id = updated
66(91) Tue May 29 15:55:53 2018: Debug:     policy rewrite_called_station_id {
67(91) Tue May 29 15:55:53 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
68(91) Tue May 29 15:55:53 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
69(91) Tue May 29 15:55:53 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
70(91) Tue May 29 15:55:53 2018: Debug:         update request {
71(91) Tue May 29 15:55:53 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
72(91) Tue May 29 15:55:53 2018: Debug:              --> 9c:dc:71:31:2a:20
73(91) Tue May 29 15:55:53 2018: Debug:         } # update request = noop
74(91) Tue May 29 15:55:53 2018: Debug:         if ("%{8}") {
75(91) Tue May 29 15:55:53 2018: Debug:         EXPAND %{8}
76(91) Tue May 29 15:55:53 2018: Debug:            --> 
77(91) Tue May 29 15:55:53 2018: Debug:         if ("%{8}")  -> FALSE
78(91) Tue May 29 15:55:53 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
79(91) Tue May 29 15:55:53 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
80(91) Tue May 29 15:55:53 2018: Debug:         elsif (Aruba-Essid-Name) {
81(91) Tue May 29 15:55:53 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
82(91) Tue May 29 15:55:53 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
83(91) Tue May 29 15:55:53 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
84(91) Tue May 29 15:55:53 2018: Debug:         [updated] = updated
85(91) Tue May 29 15:55:53 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
86(91) Tue May 29 15:55:53 2018: Debug:       ... skipping else: Preceding "if" was taken
87(91) Tue May 29 15:55:53 2018: Debug:     } # policy rewrite_called_station_id = updated
88(91) Tue May 29 15:55:53 2018: Debug:     policy filter_username {
89(91) Tue May 29 15:55:53 2018: Debug:       if (&User-Name) {
90(91) Tue May 29 15:55:53 2018: Debug:       if (&User-Name)  -> TRUE
91(91) Tue May 29 15:55:53 2018: Debug:       if (&User-Name)  {
92(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ / /) {
93(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
94(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
95(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
96(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /\.\./ ) {
97(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
98(91) Tue May 29 15:55:53 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
99(91) Tue May 29 15:55:53 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
100(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /\.$/)  {
101(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
102(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /@\./)  {
103(91) Tue May 29 15:55:53 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
104(91) Tue May 29 15:55:53 2018: Debug:       } # if (&User-Name)  = updated
105(91) Tue May 29 15:55:53 2018: Debug:     } # policy filter_username = updated
106(91) Tue May 29 15:55:53 2018: Debug:     policy filter_password {
107(91) Tue May 29 15:55:53 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
108(91) Tue May 29 15:55:53 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
109(91) Tue May 29 15:55:53 2018: Debug:     } # policy filter_password = updated
110(91) Tue May 29 15:55:53 2018: Debug:     [preprocess] = ok
111(91) Tue May 29 15:55:53 2018: Debug: suffix: Checking for suffix after "@"
112(91) Tue May 29 15:55:53 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
113(91) Tue May 29 15:55:53 2018: Debug:     [suffix] = noop
114(91) Tue May 29 15:55:53 2018: Debug: ntdomain: Checking for prefix before "\"
115(91) Tue May 29 15:55:53 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
116(91) Tue May 29 15:55:53 2018: Debug: ntdomain: Found realm "null"
117(91) Tue May 29 15:55:53 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
118(91) Tue May 29 15:55:53 2018: Debug: ntdomain: Adding Realm = "null"
119(91) Tue May 29 15:55:53 2018: Debug: ntdomain: Authentication realm is LOCAL
120(91) Tue May 29 15:55:53 2018: Debug:     [ntdomain] = ok
121(91) Tue May 29 15:55:53 2018: Debug: eap: No EAP-Message, not doing EAP
122(91) Tue May 29 15:55:53 2018: Debug:     [eap] = noop
123(91) Tue May 29 15:55:53 2018: Debug:     if ( !EAP-Message ) {
124(91) Tue May 29 15:55:53 2018: Debug:     if ( !EAP-Message )  -> TRUE
125(91) Tue May 29 15:55:53 2018: Debug:     if ( !EAP-Message )  {
126(91) Tue May 29 15:55:53 2018: Debug:       update {
127(91) Tue May 29 15:55:53 2018: Debug:       } # update = noop
128(91) Tue May 29 15:55:53 2018: Debug:     } # if ( !EAP-Message )  = noop
129(91) Tue May 29 15:55:53 2018: Debug:     policy packetfence-eap-mac-policy {
130(91) Tue May 29 15:55:53 2018: Debug:       if ( &EAP-Type ) {
131(91) Tue May 29 15:55:53 2018: Debug:       if ( &EAP-Type )  -> FALSE
132(91) Tue May 29 15:55:53 2018: Debug:       [noop] = noop
133(91) Tue May 29 15:55:53 2018: Debug:     } # policy packetfence-eap-mac-policy = noop
134(91) Tue May 29 15:55:53 2018: WARNING: pap: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
135(91) Tue May 29 15:55:53 2018: WARNING: pap: !!! Ignoring control:User-Password.  Update your        !!!
136(91) Tue May 29 15:55:53 2018: WARNING: pap: !!! configuration so that the "known good" clear text !!!
137(91) Tue May 29 15:55:53 2018: WARNING: pap: !!! password is in Cleartext-Password and NOT in        !!!
138(91) Tue May 29 15:55:53 2018: WARNING: pap: !!! User-Password.                                      !!!
139(91) Tue May 29 15:55:53 2018: WARNING: pap: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
140(91) Tue May 29 15:55:53 2018: WARNING: pap: Auth-Type already set.  Not setting to PAP
141(91) Tue May 29 15:55:53 2018: Debug:     [pap] = noop
142(91) Tue May 29 15:55:53 2018: Debug:   } # authorize = updated
143(91) Tue May 29 15:55:53 2018: Debug: Found Auth-Type = Accept
144(91) Tue May 29 15:55:53 2018: Debug: Auth-Type = Accept, accepting the user
145(91) Tue May 29 15:55:53 2018: Debug: # Executing section post-auth from file /usr/local/pf/raddb/sites-enabled/packetfence
146(91) Tue May 29 15:55:53 2018: Debug:   post-auth {
147(91) Tue May 29 15:55:53 2018: Debug:     update {
148(91) Tue May 29 15:55:53 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
149(91) Tue May 29 15:55:53 2018: Debug:          --> 172.31.1.167
150(91) Tue May 29 15:55:53 2018: Debug:     } # update = noop
151(91) Tue May 29 15:55:53 2018: Debug:     policy packetfence-set-tenant-id {
152(91) Tue May 29 15:55:53 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
153(91) Tue May 29 15:55:53 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
154(91) Tue May 29 15:55:53 2018: Debug:          --> 1
155(91) Tue May 29 15:55:53 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> FALSE
156(91) Tue May 29 15:55:53 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
157(91) Tue May 29 15:55:53 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
158(91) Tue May 29 15:55:53 2018: Debug:     } # policy packetfence-set-tenant-id = noop
159(91) Tue May 29 15:55:53 2018: Debug:     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) ) {
160(91) Tue May 29 15:55:53 2018: Debug:     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) )  -> TRUE
161(91) Tue May 29 15:55:53 2018: Debug:     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) )  {
162(91) Tue May 29 15:55:53 2018: Debug: rest: Expanding URI components
163(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND http://127.0.0.1:7070
164(91) Tue May 29 15:55:53 2018: Debug: rest:    --> http://127.0.0.1:7070
165(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND //radius/rest/authorize
166(91) Tue May 29 15:55:53 2018: Debug: rest:    --> //radius/rest/authorize
167(91) Tue May 29 15:55:53 2018: Debug: rest: Sending HTTP POST to "http://127.0.0.1:7070//radius/rest/authorize"
168(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "User-Name"
169(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "CHAP-Password"
170(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "NAS-IP-Address"
171(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "NAS-Port"
172(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Service-Type"
173(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Framed-Protocol"
174(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Framed-MTU"
175(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Called-Station-Id"
176(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Calling-Station-Id"
177(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "NAS-Identifier"
178(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "CHAP-Challenge"
179(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "NAS-Port-Type"
180(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Event-Timestamp"
181(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Connect-Info"
182(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Message-Authenticator"
183(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "NAS-Port-Id"
184(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "HP-Capability-Advert"
185(91) Tue May 29 15:55:53 2018: Debug: rest: Returning 989 bytes of JSON data (buffer full or chunk exceeded)
186(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "HP-Capability-Advert"
187(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "MS-RAS-Vendor"
188(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Stripped-User-Name"
189(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "Realm"
190(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "SQL-User-Name"
191(91) Tue May 29 15:55:53 2018: Debug: rest: Encoding attribute "FreeRADIUS-Client-IP-Address"
192(91) Tue May 29 15:55:53 2018: Debug: rest: Processing response header
193(91) Tue May 29 15:55:53 2018: Debug: rest:   Status : 100 (Continue)
194(91) Tue May 29 15:55:53 2018: Debug: rest: Continuing...
195(91) Tue May 29 15:55:53 2018: Debug: rest: Processing response header
196(91) Tue May 29 15:55:53 2018: Debug: rest:   Status : 200 (OK)
197(91) Tue May 29 15:55:53 2018: Debug: rest:   Type   : json (application/json)
198(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Status"
199(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND unreg
200(91) Tue May 29 15:55:53 2018: Debug: rest:    --> unreg
201(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Status := "unreg"
202(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Switch-Ip-Address"
203(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 172.31.1.167
204(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 172.31.1.167
205(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Switch-Ip-Address := "172.31.1.167"
206(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-UserName"
207(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND alex
208(91) Tue May 29 15:55:53 2018: Debug: rest:    --> alex
209(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-UserName := "alex"
210(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Connection-Type"
211(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND WIRED_MAC_AUTH
212(91) Tue May 29 15:55:53 2018: Debug: rest:    --> WIRED_MAC_AUTH
213(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Connection-Type := "WIRED_MAC_AUTH"
214(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-AutoReg"
215(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 0
216(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 0
217(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-AutoReg := "0"
218(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Computer-Name"
219(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND alex
220(91) Tue May 29 15:55:53 2018: Debug: rest:    --> alex
221(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Computer-Name := "alex"
222(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Mac"
223(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 78:24:af:07:fc:cf
224(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 78:24:af:07:fc:cf
225(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Mac := "78:24:af:07:fc:cf"
226(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Switch-Mac"
227(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 9c:dc:71:31:2a:20
228(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 9c:dc:71:31:2a:20
229(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Switch-Mac := "9c:dc:71:31:2a:20"
230(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Role"
231(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND registration
232(91) Tue May 29 15:55:53 2018: Debug: rest:    --> registration
233(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Role := "registration"
234(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Authorization-Status"
235(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND allow
236(91) Tue May 29 15:55:53 2018: Debug: rest:    --> allow
237(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Authorization-Status := "allow"
238(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "Tunnel-Private-Group-ID"
239(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 22
240(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 22
241(91) Tue May 29 15:55:53 2018: Debug: rest: Tunnel-Private-Group-Id := "22"
242(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Request-Time"
243(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 1527602153
244(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 1527602153
245(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Request-Time := 1527602153
246(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "Tunnel-Type"
247(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 13
248(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 13
249(91) Tue May 29 15:55:53 2018: Debug: rest: Tunnel-Type := VLAN
250(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-IsPhone"
251(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-IsPhone := ""
252(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Eap-Type"
253(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 0
254(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 0
255(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Eap-Type := "0"
256(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "Tunnel-Medium-Type"
257(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 6
258(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 6
259(91) Tue May 29 15:55:53 2018: Debug: rest: Tunnel-Medium-Type := IEEE-802
260(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-Switch-Id"
261(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 172.31.1.167
262(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 172.31.1.167
263(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-Switch-Id := "172.31.1.167"
264(91) Tue May 29 15:55:53 2018: Debug: rest: Parsing attribute "control:PacketFence-IfIndex"
265(91) Tue May 29 15:55:53 2018: Debug: rest: EXPAND 9
266(91) Tue May 29 15:55:53 2018: Debug: rest:    --> 9
267(91) Tue May 29 15:55:53 2018: Debug: rest: PacketFence-IfIndex := "9"
268(91) Tue May 29 15:55:53 2018: Debug:       [rest] = updated
269(91) Tue May 29 15:55:53 2018: Debug:       update {
270(91) Tue May 29 15:55:53 2018: Debug:       } # update = noop
271(91) Tue May 29 15:55:53 2018: Debug:       if (&control:PacketFence-Authorization-Status == "deny") {
272(91) Tue May 29 15:55:53 2018: Debug:       if (&control:PacketFence-Authorization-Status == "deny")  -> FALSE
273(91) Tue May 29 15:55:53 2018: Debug:       else {
274(91) Tue May 29 15:55:53 2018: Debug:         policy packetfence-audit-log-accept {
275(91) Tue May 29 15:55:53 2018: Debug:           if (&User-Name != "dummy") {
276(91) Tue May 29 15:55:53 2018: Debug:           if (&User-Name != "dummy")  -> TRUE
277(91) Tue May 29 15:55:53 2018: Debug:           if (&User-Name != "dummy")  {
278(91) Tue May 29 15:55:53 2018: Debug:             policy request-timing {
279(91) Tue May 29 15:55:53 2018: Debug:               if (control:PacketFence-Request-Time != 0) {
280(91) Tue May 29 15:55:53 2018: Debug:               if (control:PacketFence-Request-Time != 0)  -> TRUE
281(91) Tue May 29 15:55:53 2018: Debug:               if (control:PacketFence-Request-Time != 0)  {
282(91) Tue May 29 15:55:53 2018: Debug:                 update control {
283(91) Tue May 29 15:55:53 2018: Debug:                   EXPAND %{expr: %{control:PacketFence-Request-Time} - %{control:Tmp-Integer-0}}
284(91) Tue May 29 15:55:53 2018: Debug:                      --> 0
285(91) Tue May 29 15:55:53 2018: Debug:                 } # update control = noop
286(91) Tue May 29 15:55:53 2018: Debug:               } # if (control:PacketFence-Request-Time != 0)  = noop
287(91) Tue May 29 15:55:53 2018: Debug:             } # policy request-timing = noop
288(91) Tue May 29 15:55:53 2018: Debug: sql: EXPAND type.accept.query
289(91) Tue May 29 15:55:53 2018: Debug: sql:    --> type.accept.query
290(91) Tue May 29 15:55:53 2018: Debug: sql: Using query template 'query'
291(91) Tue May 29 15:55:53 2018: Debug: sql: EXPAND %{User-Name}
292(91) Tue May 29 15:55:53 2018: Debug: sql:    --> alex
293(91) Tue May 29 15:55:53 2018: Debug: sql: SQL-User-Name set to 'alex'
294(91) Tue May 29 15:55:53 2018: Debug: sql: EXPAND INSERT INTO radius_audit_log               ( mac, ip, computer_name, user_name,                stripped_user_name,  realm, event_type,                switch_id, switch_mac, switch_ip_address,                radius_source_ip_address, called_station_id, calling_station_id,                nas_port_type, ssid, nas_port_id,                ifindex, nas_port, connection_type,                nas_ip_address, nas_identifier, auth_status,                reason, auth_type, eap_type,                role, node_status, profile,                source, auto_reg, is_phone,                pf_domain, uuid, radius_request,                radius_reply, request_time, tenant_id)              VALUES               ( '%{request:Calling-Station-Id}', '%{request:Framed-IP-Address}', '%{%{control:PacketFence-Computer-Name}:-N/A}', '%{request:User-Name}',                '%{request:Stripped-User-Name}', '%{request:Realm}', 'Radius-Access-Request',                '%{%{control:PacketFence-Switch-Id}:-N/A}', '%{%{control:PacketFence-Switch-Mac}:-N/A}', '%{%{control:PacketFence-Switch-Ip-Address}:-N/A}',                '%{Packet-Src-IP-Address}', '%{request:Called-Station-Id}', '%{request:Calling-Station-Id}',                '%{request:NAS-Port-Type}', '%{request:Called-Station-SSID}', '%{request:NAS-Port-Id}',                '%{%{control:PacketFence-IfIndex}:-N/A}', '%{request:NAS-Port}', '%{%{control:PacketFence-Connection-Type}:-N/A}',                '%{request:NAS-IP-Address}', '%{request:NAS-Identifier}', 'Accept',                '%{request:Module-Failure-Message}', '%{control:Auth-Type}', '%{request:EAP-Type}',                '%{%{control:PacketFence-Role}:-N/A}', '%{%{control:PacketFence-Status}:-N/A}', '%{%{control:PacketFence-Profile}:-N/A}',                '%{%{control:PacketFence-Source}:-N/A}', '%{%{control:PacketFence-AutoReg}:-0}', '%{%{control:PacketFence-IsPhone}:-0}',                '%{request:PacketFence-Domain}', '', '%{pairs:&request:[*]}','%{pairs:&reply:[*]}', '%{control:PacketFence-Request-Time}', '%{control:PacketFence-Tenant-Id}')
295(91) Tue May 29 15:55:53 2018: Debug: sql:    --> INSERT INTO radius_audit_log               ( mac, ip, computer_name, user_name,                stripped_user_name,  realm, event_type,                switch_id, switch_mac, switch_ip_address,                radius_source_ip_address, called_station_id, calling_station_id,                nas_port_type, ssid, nas_port_id,                ifindex, nas_port, connection_type,                nas_ip_address, nas_identifier, auth_status,                reason, auth_type, eap_type,                role, node_status, profile,                source, auto_reg, is_phone,                pf_domain, uuid, radius_request,                radius_reply, request_time, tenant_id)              VALUES               ( '78:24:af:07:fc:cf', '', 'alex', 'alex',                'alex', 'null', 'Radius-Access-Request',                '172.31.1.167', '9c:dc:71:31:2a:20', '172.31.1.167',                '172.31.1.167', '9c:dc:71:31:2a:20', '78:24:af:07:fc:cf',                'Ethernet', '', '9',                '9', '9', 'WIRED_MAC_AUTH',                '172.31.1.167', 'HP-2530-24', 'Accept',                '', 'Accept', '',                'registration', 'unreg', 'N/A',                'N/A', '0', '0',                '', '', 'User-Name =3D =22alex=22=2C CHAP-Password =3D 0xd600000000000000000000000000000000=2C NAS-IP-Address =3D 172.31.1.167=2C NAS-Port =3D 9=2C Service-Type =3D Framed-User=2C Framed-Protocol =3D PPP=2C Framed-MTU =3D 1480=2C Called-Station-Id =3D =229c:dc:71:31:2a:20=22=2C Calling-Station-Id =3D =2278:24:af:07:fc:cf=22=2C NAS-Identifier =3D =22HP-2530-24=22=2C CHAP-Challenge =3D 0x62f3b029ae4fdce5ba6bc8618647749d=2C NAS-Port-Type =3D Ethernet=2C Event-Timestamp =3D =22mai 29 2018 15:55:53 CEST=22=2C Connect-Info =3D =22CONNECT Ethernet 100Mbps Full duplex=22=2C Message-Authenticator =3D 0xf8aa2a35b0c871fbe81d98560ac088b0=2C NAS-Port-Id =3D =229=22=2C HP-Capability-Advert =3D 0x011a0000000b28=2C HP-Capability-Advert =3D 0x011a0000000b2e=2C HP-Capability-Advert =3D 0x011a0000000b30=2C HP-Capability-Advert =3D 0x011a0000000b3d=2C HP-Capability-Advert =3D 0x011a0000000b18=2C HP-Capability-Advert =3D 0x0138=2C HP-Capability-Advert =3D 0x013a=2C HP-Capability-Advert =3D 0x0140=2C HP-Capability-Advert =3D 0x0141=2C HP-Capability-Advert =3D 0x0151=2C MS-RAS-Vendor =3D 11=2C Stripped-User-Name =3D =22alex=22=2C Realm =3D =22null=22=2C FreeRADIUS-Client-IP-Address =3D 172.31.1.167=2C User-Password =3D =22=2A=2A=2A=2A=2A=2A=22=2C SQL-User-Name =3D =22alex=22','Tunnel-Private-Group-Id =3D =2222=22=2C Tunnel-Type =3D VLAN=2C Tunnel-Medium-Type =3D IEEE-802', '0', '1')
296(91) Tue May 29 15:55:53 2018: Debug: sql: Executing query: INSERT INTO radius_audit_log               ( mac, ip, computer_name, user_name,                stripped_user_name,  realm, event_type,                switch_id, switch_mac, switch_ip_address,                radius_source_ip_address, called_station_id, calling_station_id,                nas_port_type, ssid, nas_port_id,                ifindex, nas_port, connection_type,                nas_ip_address, nas_identifier, auth_status,                reason, auth_type, eap_type,                role, node_status, profile,                source, auto_reg, is_phone,                pf_domain, uuid, radius_request,                radius_reply, request_time, tenant_id)              VALUES               ( '78:24:af:07:fc:cf', '', 'alex', 'alex',                'alex', 'null', 'Radius-Access-Request',                '172.31.1.167', '9c:dc:71:31:2a:20', '172.31.1.167',                '172.31.1.167', '9c:dc:71:31:2a:20', '78:24:af:07:fc:cf',                'Ethernet', '', '9',                '9', '9', 'WIRED_MAC_AUTH',                '172.31.1.167', 'HP-2530-24', 'Accept',                '', 'Accept', '',                'registration', 'unreg', 'N/A',                'N/A', '0', '0',                '', '', 'User-Name =3D =22alex=22=2C CHAP-Password =3D 0xd600000000000000000000000000000000=2C NAS-IP-Address =3D 172.31.1.167=2C NAS-Port =3D 9=2C Service-Type =3D Framed-User=2C Framed-Protocol =3D PPP=2C Framed-MTU =3D 1480=2C Called-Station-Id =3D =229c:dc:71:31:2a:20=22=2C Calling-Station-Id =3D =2278:24:af:07:fc:cf=22=2C NAS-Identifier =3D =22HP-2530-24=22=2C CHAP-Challenge =3D 0x62f3b029ae4fdce5ba6bc8618647749d=2C NAS-Port-Type =3D Ethernet=2C Event-Timestamp =3D =22mai 29 2018 15:55:53 CEST=22=2C Connect-Info =3D =22CONNECT Ethernet 100Mbps Full duplex=22=2C Message-Authenticator =3D 0xf8aa2a35b0c871fbe81d98560ac088b0=2C NAS-Port-Id =3D =229=22=2C HP-Capability-Advert =3D 0x011a0000000b28=2C HP-Capability-Advert =3D 0x011a0000000b2e=2C HP-Capability-Advert =3D 0x011a0000000b30=2C HP-Capability-Advert =3D 0x011a0000000b3d=2C HP-Capability-Advert =3D 0x011a0000000b18=2C HP-Capability-Advert =3D 0x0138=2C HP-Capability-Advert =3D 0x013a=2C HP-Capability-Advert =3D 0x0140=2C HP-Capability-Advert =3D 0x0141=2C HP-Capability-Advert =3D 0x0151=2C MS-RAS-Vendor =3D 11=2C Stripped-User-Name =3D =22alex=22=2C Realm =3D =22null=22=2C FreeRADIUS-Client-IP-Address =3D 172.31.1.167=2C User-Password =3D =22=2A=2A=2A=2A=2A=2A=22=2C SQL-User-Name =3D =22alex=22','Tunnel-Private-Group-Id =3D =2222=22=2C Tunnel-Type =3D VLAN=2C Tunnel-Medium-Type =3D IEEE-802', '0', '1')
297(91) Tue May 29 15:55:53 2018: Debug: sql: SQL query returned: success
298(91) Tue May 29 15:55:53 2018: Debug: sql: 1 record(s) updated
299(91) Tue May 29 15:55:53 2018: Debug:             [sql] = ok
300(91) Tue May 29 15:55:53 2018: Debug:           } # if (&User-Name != "dummy")  = ok
301(91) Tue May 29 15:55:53 2018: Debug:         } # policy packetfence-audit-log-accept = ok
302(91) Tue May 29 15:55:53 2018: Debug:       } # else = ok
303(91) Tue May 29 15:55:53 2018: Debug:     } # if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) )  = updated
304(91) Tue May 29 15:55:53 2018: Debug: attr_filter.packetfence_post_auth: EXPAND %{User-Name}
305(91) Tue May 29 15:55:53 2018: Debug: attr_filter.packetfence_post_auth:    --> alex
306(91) Tue May 29 15:55:53 2018: Debug: attr_filter.packetfence_post_auth: Matched entry DEFAULT at line 10
307(91) Tue May 29 15:55:53 2018: Debug:     [attr_filter.packetfence_post_auth] = updated
308(91) Tue May 29 15:55:53 2018: Debug: linelog: EXPAND messages.%{%{reply:Packet-Type}:-default}
309(91) Tue May 29 15:55:53 2018: Debug: linelog:    --> messages.Access-Accept
310(91) Tue May 29 15:55:53 2018: Debug: linelog: EXPAND [mac:%{Calling-Station-Id}] Accepted user: %{reply:User-Name} and returned VLAN %{reply:Tunnel-Private-Group-ID}
311(91) Tue May 29 15:55:53 2018: Debug: linelog:    --> [mac:78:24:af:07:fc:cf] Accepted user:  and returned VLAN 22
312(91) Tue May 29 15:55:53 2018: Debug:     [linelog] = ok
313(91) Tue May 29 15:55:53 2018: Debug:   } # post-auth = updated
314(91) Tue May 29 15:55:53 2018: Debug: Sent Access-Accept Id 167 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
315(91) Tue May 29 15:55:53 2018: Debug:   Tunnel-Private-Group-Id = "22"
316(91) Tue May 29 15:55:53 2018: Debug:   Tunnel-Type = VLAN
317(91) Tue May 29 15:55:53 2018: Debug:   Tunnel-Medium-Type = IEEE-802
318(91) Tue May 29 15:55:53 2018: Debug: Finished request
319(91) Tue May 29 15:55:58 2018: Debug: Cleaning up request packet ID 167 with timestamp +3475
320(92) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 168 from 172.31.1.167:1812 to 172.31.1.130:1812 length 335
321(92) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
322(92) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
323(92) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
324(92) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
325(92) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
326(92) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
327(92) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
328(92) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
329(92) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
330(92) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
331(92) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
332(92) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
333(92) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
334(92) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
335(92) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
336(92) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02d8000901616c6578
337(92) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x828eee18b195cce50c63f648f1a1c767
338(92) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
339(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
340(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
341(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
342(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
343(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
344(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
345(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
346(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
347(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
348(92) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
349(92) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
350(92) Tue May 29 15:58:01 2018: Debug:   authorize {
351(92) Tue May 29 15:58:01 2018: Debug:     update {
352(92) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
353(92) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
354(92) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
355(92) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
356(92) Tue May 29 15:58:01 2018: Debug:     } # update = noop
357(92) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
358(92) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
359(92) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
360(92) Tue May 29 15:58:01 2018: Debug:          --> 0
361(92) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
362(92) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
363(92) Tue May 29 15:58:01 2018: Debug:         update control {
364(92) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
365(92) Tue May 29 15:58:01 2018: Debug:              --> alex
366(92) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
367(92) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
368(92) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
369(92) Tue May 29 15:58:01 2018: Debug:              --> 1
370(92) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
371(92) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
372(92) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
373(92) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
374(92) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
375(92) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
376(92) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
377(92) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
378(92) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
379(92) Tue May 29 15:58:01 2018: Debug:         update request {
380(92) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
381(92) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
382(92) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
383(92) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
384(92) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
385(92) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
386(92) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
387(92) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
388(92) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
389(92) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
390(92) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
391(92) Tue May 29 15:58:01 2018: Debug:         update request {
392(92) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
393(92) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
394(92) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
395(92) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
396(92) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
397(92) Tue May 29 15:58:01 2018: Debug:            --> 
398(92) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
399(92) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
400(92) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
401(92) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
402(92) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
403(92) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
404(92) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
405(92) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
406(92) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
407(92) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
408(92) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
409(92) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
410(92) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
411(92) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
412(92) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
413(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
414(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
415(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
416(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
417(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
418(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
419(92) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
420(92) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
421(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
422(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
423(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
424(92) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
425(92) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
426(92) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
427(92) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
428(92) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
429(92) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
430(92) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
431(92) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
432(92) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
433(92) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
434(92) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
435(92) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
436(92) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
437(92) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
438(92) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
439(92) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
440(92) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
441(92) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
442(92) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 216 length 9
443(92) Tue May 29 15:58:01 2018: Debug: eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize
444(92) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
445(92) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
446(92) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
447(92) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
448(92) Tue May 29 15:58:01 2018: Debug:   authenticate {
449(92) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP Identity (1)
450(92) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
451(92) Tue May 29 15:58:01 2018: Debug: eap_peap: Initiating new EAP-TLS session
452(92) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls start] = request
453(92) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 217 length 6
454(92) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f9b816d8a
455(92) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
456(92) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
457(92) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
458(92) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
459(92) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
460(92) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 168 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
461(92) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01d900061920
462(92) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
463(92) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9b816d8a362781b0ef5e3ccf
464(92) Tue May 29 15:58:01 2018: Debug: Finished request
465(93) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 169 from 172.31.1.167:1812 to 172.31.1.130:1812 length 466
466(93) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
467(93) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
468(93) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
469(93) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
470(93) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
471(93) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
472(93) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
473(93) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
474(93) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
475(93) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
476(93) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
477(93) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
478(93) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
479(93) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
480(93) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
481(93) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9b816d8a362781b0ef5e3ccf
482(93) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02d9007a198000000070160301006b0100006703015b0d5c64256429e9cd0c4f314de6e0d06b4810be0b7fd500454129fa29a67372000018c014c0130035002fc00ac00900380032000a00130005000401000026000500050100000000000a0006000400170018000b000201000023000000170000ff01
483(93) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x6687699b5571ab96efefb5e79f8f51ca
484(93) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
485(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
486(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
487(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
488(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
489(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
490(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
491(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
492(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
493(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
494(93) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
495(93) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
496(93) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
497(93) Tue May 29 15:58:01 2018: Debug:   authorize {
498(93) Tue May 29 15:58:01 2018: Debug:     update {
499(93) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
500(93) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
501(93) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
502(93) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
503(93) Tue May 29 15:58:01 2018: Debug:     } # update = noop
504(93) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
505(93) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
506(93) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
507(93) Tue May 29 15:58:01 2018: Debug:          --> 0
508(93) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
509(93) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
510(93) Tue May 29 15:58:01 2018: Debug:         update control {
511(93) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
512(93) Tue May 29 15:58:01 2018: Debug:              --> alex
513(93) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
514(93) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
515(93) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
516(93) Tue May 29 15:58:01 2018: Debug:              --> 1
517(93) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
518(93) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
519(93) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
520(93) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
521(93) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
522(93) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
523(93) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
524(93) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
525(93) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
526(93) Tue May 29 15:58:01 2018: Debug:         update request {
527(93) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
528(93) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
529(93) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
530(93) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
531(93) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
532(93) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
533(93) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
534(93) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
535(93) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
536(93) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
537(93) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
538(93) Tue May 29 15:58:01 2018: Debug:         update request {
539(93) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
540(93) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
541(93) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
542(93) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
543(93) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
544(93) Tue May 29 15:58:01 2018: Debug:            --> 
545(93) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
546(93) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
547(93) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
548(93) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
549(93) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
550(93) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
551(93) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
552(93) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
553(93) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
554(93) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
555(93) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
556(93) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
557(93) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
558(93) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
559(93) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
560(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
561(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
562(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
563(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
564(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
565(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
566(93) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
567(93) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
568(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
569(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
570(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
571(93) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
572(93) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
573(93) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
574(93) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
575(93) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
576(93) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
577(93) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
578(93) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
579(93) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
580(93) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
581(93) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
582(93) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
583(93) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
584(93) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
585(93) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
586(93) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
587(93) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
588(93) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
589(93) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 217 length 122
590(93) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
591(93) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
592(93) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
593(93) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
594(93) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
595(93) Tue May 29 15:58:01 2018: Debug:   authenticate {
596(93) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f9b816d8a
597(93) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f9b816d8a
598(93) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f9b816d8a, released from the list
599(93) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
600(93) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
601(93) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
602(93) Tue May 29 15:58:01 2018: Debug: eap_peap: Peer indicated complete TLS record size will be 112 bytes
603(93) Tue May 29 15:58:01 2018: Debug: eap_peap: Got complete TLS record (112 bytes)
604(93) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = length included
605(93) Tue May 29 15:58:01 2018: Debug: eap_peap: (other): before/accept initialization
606(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: before/accept initialization
607(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
608(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
609(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
610(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
611(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
612(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
613(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
614(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: Need to read more data: unknown state
615(93) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: Need to read more data: unknown state
616(93) Tue May 29 15:58:01 2018: Debug: eap_peap: In SSL Handshake Phase
617(93) Tue May 29 15:58:01 2018: Debug: eap_peap: In SSL Accept mode
618(93) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = handled
619(93) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 218 length 1004
620(93) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f9a826d8a
621(93) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
622(93) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
623(93) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
624(93) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
625(93) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
626(93) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 169 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
627(93) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01da03ec19c000000a6f160301003902000035030118aa66e888c431f40f018b4291eba585681edd0dc35687c5859c3c79d1b4152900c01400000dff01000100000b00040300010216030108d30b0008cf0008cc0003de308203da308202c2a003020102020101300d06092a864886f70d01010b050030
628(93) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
629(93) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9a826d8a362781b0ef5e3ccf
630(93) Tue May 29 15:58:01 2018: Debug: Finished request
631(94) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 170 from 172.31.1.167:1812 to 172.31.1.130:1812 length 350
632(94) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
633(94) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
634(94) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
635(94) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
636(94) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
637(94) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
638(94) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
639(94) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
640(94) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
641(94) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
642(94) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
643(94) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
644(94) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
645(94) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
646(94) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
647(94) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9a826d8a362781b0ef5e3ccf
648(94) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02da00061900
649(94) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0xb3e92d3b92b60d585753133c2f287f0f
650(94) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
651(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
652(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
653(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
654(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
655(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
656(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
657(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
658(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
659(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
660(94) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
661(94) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
662(94) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
663(94) Tue May 29 15:58:01 2018: Debug:   authorize {
664(94) Tue May 29 15:58:01 2018: Debug:     update {
665(94) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
666(94) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
667(94) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
668(94) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
669(94) Tue May 29 15:58:01 2018: Debug:     } # update = noop
670(94) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
671(94) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
672(94) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
673(94) Tue May 29 15:58:01 2018: Debug:          --> 0
674(94) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
675(94) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
676(94) Tue May 29 15:58:01 2018: Debug:         update control {
677(94) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
678(94) Tue May 29 15:58:01 2018: Debug:              --> alex
679(94) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
680(94) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
681(94) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
682(94) Tue May 29 15:58:01 2018: Debug:              --> 1
683(94) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
684(94) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
685(94) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
686(94) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
687(94) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
688(94) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
689(94) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
690(94) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
691(94) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
692(94) Tue May 29 15:58:01 2018: Debug:         update request {
693(94) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
694(94) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
695(94) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
696(94) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
697(94) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
698(94) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
699(94) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
700(94) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
701(94) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
702(94) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
703(94) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
704(94) Tue May 29 15:58:01 2018: Debug:         update request {
705(94) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
706(94) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
707(94) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
708(94) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
709(94) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
710(94) Tue May 29 15:58:01 2018: Debug:            --> 
711(94) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
712(94) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
713(94) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
714(94) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
715(94) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
716(94) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
717(94) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
718(94) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
719(94) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
720(94) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
721(94) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
722(94) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
723(94) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
724(94) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
725(94) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
726(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
727(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
728(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
729(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
730(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
731(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
732(94) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
733(94) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
734(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
735(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
736(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
737(94) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
738(94) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
739(94) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
740(94) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
741(94) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
742(94) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
743(94) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
744(94) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
745(94) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
746(94) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
747(94) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
748(94) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
749(94) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
750(94) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
751(94) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
752(94) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
753(94) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
754(94) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
755(94) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 218 length 6
756(94) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
757(94) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
758(94) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
759(94) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
760(94) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
761(94) Tue May 29 15:58:01 2018: Debug:   authenticate {
762(94) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f9a826d8a
763(94) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f9a826d8a
764(94) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f9a826d8a, released from the list
765(94) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
766(94) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
767(94) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
768(94) Tue May 29 15:58:01 2018: Debug: eap_peap: Peer ACKed our handshake fragment
769(94) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = request
770(94) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = handled
771(94) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 219 length 1000
772(94) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f99836d8a
773(94) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
774(94) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
775(94) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
776(94) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
777(94) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
778(94) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 170 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
779(94) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01db03e81940fa9b5334039ffd30f4a65aa710d5a8dadf78079cd297fbdf51507767883b203e4a2639900e7209743cc021a6b45a458aa17b40035d856103253121a356879c2143ad1922795b9e068a0004e8308204e4308203cca003020102020900be0e53fc14559504300d06092a864886f70d01010b
780(94) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
781(94) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f99836d8a362781b0ef5e3ccf
782(94) Tue May 29 15:58:01 2018: Debug: Finished request
783(95) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 171 from 172.31.1.167:1812 to 172.31.1.130:1812 length 350
784(95) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
785(95) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
786(95) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
787(95) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
788(95) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
789(95) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
790(95) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
791(95) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
792(95) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
793(95) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
794(95) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
795(95) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
796(95) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
797(95) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
798(95) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
799(95) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f99836d8a362781b0ef5e3ccf
800(95) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02db00061900
801(95) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x4541d16ad685bf2d1a67dcdcb95af0d5
802(95) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
803(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
804(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
805(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
806(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
807(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
808(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
809(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
810(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
811(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
812(95) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
813(95) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
814(95) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
815(95) Tue May 29 15:58:01 2018: Debug:   authorize {
816(95) Tue May 29 15:58:01 2018: Debug:     update {
817(95) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
818(95) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
819(95) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
820(95) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
821(95) Tue May 29 15:58:01 2018: Debug:     } # update = noop
822(95) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
823(95) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
824(95) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
825(95) Tue May 29 15:58:01 2018: Debug:          --> 0
826(95) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
827(95) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
828(95) Tue May 29 15:58:01 2018: Debug:         update control {
829(95) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
830(95) Tue May 29 15:58:01 2018: Debug:              --> alex
831(95) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
832(95) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
833(95) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
834(95) Tue May 29 15:58:01 2018: Debug:              --> 1
835(95) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
836(95) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
837(95) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
838(95) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
839(95) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
840(95) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
841(95) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
842(95) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
843(95) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
844(95) Tue May 29 15:58:01 2018: Debug:         update request {
845(95) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
846(95) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
847(95) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
848(95) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
849(95) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
850(95) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
851(95) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
852(95) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
853(95) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
854(95) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
855(95) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
856(95) Tue May 29 15:58:01 2018: Debug:         update request {
857(95) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
858(95) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
859(95) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
860(95) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
861(95) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
862(95) Tue May 29 15:58:01 2018: Debug:            --> 
863(95) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
864(95) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
865(95) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
866(95) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
867(95) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
868(95) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
869(95) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
870(95) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
871(95) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
872(95) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
873(95) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
874(95) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
875(95) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
876(95) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
877(95) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
878(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
879(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
880(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
881(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
882(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
883(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
884(95) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
885(95) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
886(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
887(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
888(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
889(95) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
890(95) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
891(95) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
892(95) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
893(95) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
894(95) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
895(95) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
896(95) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
897(95) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
898(95) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
899(95) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
900(95) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
901(95) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
902(95) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
903(95) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
904(95) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
905(95) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
906(95) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
907(95) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 219 length 6
908(95) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
909(95) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
910(95) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
911(95) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
912(95) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
913(95) Tue May 29 15:58:01 2018: Debug:   authenticate {
914(95) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f99836d8a
915(95) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f99836d8a
916(95) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f99836d8a, released from the list
917(95) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
918(95) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
919(95) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
920(95) Tue May 29 15:58:01 2018: Debug: eap_peap: Peer ACKed our handshake fragment
921(95) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = request
922(95) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = handled
923(95) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 220 length 689
924(95) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f98846d8a
925(95) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
926(95) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
927(95) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
928(95) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
929(95) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
930(95) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 171 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
931(95) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01dc02b119000530030101ff30360603551d1f042f302d302ba029a0278625687474703a2f2f7777772e6578616d706c652e6f72672f6578616d706c655f63612e63726c300d06092a864886f70d01010b050003820101000bd8d2799bc940a20f2b0370672f4cdb9062c056bfab93dde5646770707b9f
932(95) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
933(95) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f98846d8a362781b0ef5e3ccf
934(95) Tue May 29 15:58:01 2018: Debug: Finished request
935(96) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 172 from 172.31.1.167:1812 to 172.31.1.130:1812 length 488
936(96) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
937(96) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
938(96) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
939(96) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
940(96) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
941(96) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
942(96) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
943(96) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
944(96) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
945(96) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
946(96) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
947(96) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
948(96) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
949(96) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
950(96) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
951(96) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f98846d8a362781b0ef5e3ccf
952(96) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02dc00901980000000861603010046100000424104e99a4e3d50253f607664c98c92381a9f02b2dc516e8e50f04154ce683fcdda391d90117b1dbec3eadf6fb7e616269d1106357a3fd108638837ead1247a6f8d0e1403010001011603010030a20218922910c613bb50d262a12095cb3e6265f3b58299
953(96) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x12c46199d6cc5668fe7b603f48f6d12e
954(96) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
955(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
956(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
957(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
958(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
959(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
960(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
961(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
962(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
963(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
964(96) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
965(96) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
966(96) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
967(96) Tue May 29 15:58:01 2018: Debug:   authorize {
968(96) Tue May 29 15:58:01 2018: Debug:     update {
969(96) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
970(96) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
971(96) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
972(96) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
973(96) Tue May 29 15:58:01 2018: Debug:     } # update = noop
974(96) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
975(96) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
976(96) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
977(96) Tue May 29 15:58:01 2018: Debug:          --> 0
978(96) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
979(96) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
980(96) Tue May 29 15:58:01 2018: Debug:         update control {
981(96) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
982(96) Tue May 29 15:58:01 2018: Debug:              --> alex
983(96) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
984(96) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
985(96) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
986(96) Tue May 29 15:58:01 2018: Debug:              --> 1
987(96) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
988(96) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
989(96) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
990(96) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
991(96) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
992(96) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
993(96) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
994(96) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
995(96) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
996(96) Tue May 29 15:58:01 2018: Debug:         update request {
997(96) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
998(96) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
999(96) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1000(96) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1001(96) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
1002(96) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1003(96) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
1004(96) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
1005(96) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
1006(96) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
1007(96) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
1008(96) Tue May 29 15:58:01 2018: Debug:         update request {
1009(96) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1010(96) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
1011(96) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1012(96) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
1013(96) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
1014(96) Tue May 29 15:58:01 2018: Debug:            --> 
1015(96) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
1016(96) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
1017(96) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1018(96) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
1019(96) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
1020(96) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
1021(96) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1022(96) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1023(96) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
1024(96) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1025(96) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
1026(96) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
1027(96) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
1028(96) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
1029(96) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
1030(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
1031(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
1032(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
1033(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
1034(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
1035(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
1036(96) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
1037(96) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
1038(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
1039(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
1040(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
1041(96) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
1042(96) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
1043(96) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
1044(96) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
1045(96) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
1046(96) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
1047(96) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
1048(96) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
1049(96) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
1050(96) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
1051(96) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
1052(96) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
1053(96) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
1054(96) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
1055(96) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
1056(96) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
1057(96) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
1058(96) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
1059(96) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 220 length 144
1060(96) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
1061(96) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
1062(96) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
1063(96) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
1064(96) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1065(96) Tue May 29 15:58:01 2018: Debug:   authenticate {
1066(96) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f98846d8a
1067(96) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f98846d8a
1068(96) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f98846d8a, released from the list
1069(96) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
1070(96) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
1071(96) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
1072(96) Tue May 29 15:58:01 2018: Debug: eap_peap: Peer indicated complete TLS record size will be 134 bytes
1073(96) Tue May 29 15:58:01 2018: Debug: eap_peap: Got complete TLS record (134 bytes)
1074(96) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = length included
1075(96) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
1076(96) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
1077(96) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
1078(96) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
1079(96) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
1080(96) Tue May 29 15:58:01 2018: Debug: eap_peap: TLS_accept: unknown state
1081(96) Tue May 29 15:58:01 2018: Debug: eap_peap: (other): SSL negotiation finished successfully
1082(96) Tue May 29 15:58:01 2018: Debug: eap_peap: SSL Connection Established
1083(96) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = handled
1084(96) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 221 length 65
1085(96) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f9f856d8a
1086(96) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
1087(96) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
1088(96) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
1089(96) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
1090(96) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1091(96) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 172 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
1092(96) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01dd0041190014030100010116030100306f2d48b00818c07968aee228b856a503bc3546a690a2ef63ab5652e26f5ecff703d5173859f71ba33cf8919e663922f5
1093(96) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
1094(96) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9f856d8a362781b0ef5e3ccf
1095(96) Tue May 29 15:58:01 2018: Debug: Finished request
1096(97) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 173 from 172.31.1.167:1812 to 172.31.1.130:1812 length 350
1097(97) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
1098(97) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
1099(97) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
1100(97) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
1101(97) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
1102(97) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
1103(97) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
1104(97) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
1105(97) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
1106(97) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
1107(97) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
1108(97) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1109(97) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
1110(97) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
1111(97) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
1112(97) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9f856d8a362781b0ef5e3ccf
1113(97) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02dd00061900
1114(97) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x4ac4c3e19e05721cec66ccf4f8cebe34
1115(97) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
1116(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
1117(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
1118(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
1119(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
1120(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
1121(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
1122(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
1123(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
1124(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
1125(97) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
1126(97) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
1127(97) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
1128(97) Tue May 29 15:58:01 2018: Debug:   authorize {
1129(97) Tue May 29 15:58:01 2018: Debug:     update {
1130(97) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
1131(97) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
1132(97) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
1133(97) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
1134(97) Tue May 29 15:58:01 2018: Debug:     } # update = noop
1135(97) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
1136(97) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
1137(97) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
1138(97) Tue May 29 15:58:01 2018: Debug:          --> 0
1139(97) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
1140(97) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
1141(97) Tue May 29 15:58:01 2018: Debug:         update control {
1142(97) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
1143(97) Tue May 29 15:58:01 2018: Debug:              --> alex
1144(97) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
1145(97) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
1146(97) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
1147(97) Tue May 29 15:58:01 2018: Debug:              --> 1
1148(97) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
1149(97) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
1150(97) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
1151(97) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
1152(97) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
1153(97) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
1154(97) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
1155(97) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
1156(97) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
1157(97) Tue May 29 15:58:01 2018: Debug:         update request {
1158(97) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1159(97) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
1160(97) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1161(97) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1162(97) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
1163(97) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1164(97) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
1165(97) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
1166(97) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
1167(97) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
1168(97) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
1169(97) Tue May 29 15:58:01 2018: Debug:         update request {
1170(97) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1171(97) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
1172(97) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1173(97) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
1174(97) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
1175(97) Tue May 29 15:58:01 2018: Debug:            --> 
1176(97) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
1177(97) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
1178(97) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1179(97) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
1180(97) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
1181(97) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
1182(97) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1183(97) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1184(97) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
1185(97) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1186(97) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
1187(97) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
1188(97) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
1189(97) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
1190(97) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
1191(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
1192(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
1193(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
1194(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
1195(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
1196(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
1197(97) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
1198(97) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
1199(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
1200(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
1201(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
1202(97) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
1203(97) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
1204(97) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
1205(97) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
1206(97) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
1207(97) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
1208(97) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
1209(97) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
1210(97) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
1211(97) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
1212(97) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
1213(97) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
1214(97) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
1215(97) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
1216(97) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
1217(97) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
1218(97) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
1219(97) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
1220(97) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 221 length 6
1221(97) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
1222(97) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
1223(97) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
1224(97) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
1225(97) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1226(97) Tue May 29 15:58:01 2018: Debug:   authenticate {
1227(97) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f9f856d8a
1228(97) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f9f856d8a
1229(97) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f9f856d8a, released from the list
1230(97) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
1231(97) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
1232(97) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
1233(97) Tue May 29 15:58:01 2018: Debug: eap_peap: Peer ACKed our handshake fragment.  handshake is finished
1234(97) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = success
1235(97) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = success
1236(97) Tue May 29 15:58:01 2018: Debug: eap_peap: Session established.  Decoding tunneled attributes
1237(97) Tue May 29 15:58:01 2018: Debug: eap_peap: PEAP state TUNNEL ESTABLISHED
1238(97) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 222 length 43
1239(97) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f9e866d8a
1240(97) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
1241(97) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
1242(97) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
1243(97) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
1244(97) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1245(97) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 173 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
1246(97) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01de002b19001703010020db5819d527655341e464c31b18a4d0508d25a44912f669407f5475f09d530f6d
1247(97) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
1248(97) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9e866d8a362781b0ef5e3ccf
1249(97) Tue May 29 15:58:01 2018: Debug: Finished request
1250(98) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 174 from 172.31.1.167:1812 to 172.31.1.130:1812 length 387
1251(98) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
1252(98) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
1253(98) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
1254(98) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
1255(98) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
1256(98) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
1257(98) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
1258(98) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
1259(98) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
1260(98) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
1261(98) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
1262(98) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1263(98) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
1264(98) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
1265(98) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
1266(98) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9e866d8a362781b0ef5e3ccf
1267(98) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02de002b190017030100209b8391fb70b8fec866f494268ed2b9f6d2f55503164e0c49808ffb0f12df5cd4
1268(98) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x57aec5a7fc65c078e29be2864daf48b0
1269(98) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
1270(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
1271(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
1272(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
1273(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
1274(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
1275(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
1276(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
1277(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
1278(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
1279(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
1280(98) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
1281(98) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
1282(98) Tue May 29 15:58:01 2018: Debug:   authorize {
1283(98) Tue May 29 15:58:01 2018: Debug:     update {
1284(98) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
1285(98) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
1286(98) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
1287(98) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
1288(98) Tue May 29 15:58:01 2018: Debug:     } # update = noop
1289(98) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
1290(98) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
1291(98) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
1292(98) Tue May 29 15:58:01 2018: Debug:          --> 0
1293(98) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
1294(98) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
1295(98) Tue May 29 15:58:01 2018: Debug:         update control {
1296(98) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
1297(98) Tue May 29 15:58:01 2018: Debug:              --> alex
1298(98) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
1299(98) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
1300(98) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
1301(98) Tue May 29 15:58:01 2018: Debug:              --> 1
1302(98) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
1303(98) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
1304(98) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
1305(98) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
1306(98) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
1307(98) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
1308(98) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
1309(98) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
1310(98) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
1311(98) Tue May 29 15:58:01 2018: Debug:         update request {
1312(98) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1313(98) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
1314(98) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1315(98) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1316(98) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
1317(98) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1318(98) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
1319(98) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
1320(98) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
1321(98) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
1322(98) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
1323(98) Tue May 29 15:58:01 2018: Debug:         update request {
1324(98) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1325(98) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
1326(98) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1327(98) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
1328(98) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
1329(98) Tue May 29 15:58:01 2018: Debug:            --> 
1330(98) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
1331(98) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
1332(98) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1333(98) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
1334(98) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
1335(98) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
1336(98) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1337(98) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1338(98) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
1339(98) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1340(98) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
1341(98) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
1342(98) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
1343(98) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
1344(98) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
1345(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
1346(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
1347(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
1348(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
1349(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
1350(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
1351(98) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
1352(98) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
1353(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
1354(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
1355(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
1356(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
1357(98) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
1358(98) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
1359(98) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
1360(98) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
1361(98) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
1362(98) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
1363(98) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
1364(98) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
1365(98) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
1366(98) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
1367(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
1368(98) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
1369(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
1370(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
1371(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
1372(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
1373(98) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
1374(98) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 222 length 43
1375(98) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
1376(98) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
1377(98) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
1378(98) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
1379(98) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1380(98) Tue May 29 15:58:01 2018: Debug:   authenticate {
1381(98) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f9e866d8a
1382(98) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f9e866d8a
1383(98) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f9e866d8a, released from the list
1384(98) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
1385(98) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
1386(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
1387(98) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = ok
1388(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Done initial handshake
1389(98) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = ok
1390(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Session established.  Decoding tunneled attributes
1391(98) Tue May 29 15:58:01 2018: Debug: eap_peap: PEAP state WAITING FOR INNER IDENTITY
1392(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Identity - alex
1393(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Got inner identity 'alex'
1394(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Setting default EAP type for tunneled EAP session
1395(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Got tunneled request
1396(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   EAP-Message = 0x02de000901616c6578
1397(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Setting User-Name to alex
1398(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Sending tunneled request to packetfence-tunnel
1399(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   EAP-Message = 0x02de000901616c6578
1400(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   FreeRADIUS-Proxied-To = 127.0.0.1
1401(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   User-Name = "alex"
1402(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Framed-MTU = 1480
1403(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-IP-Address = 172.31.1.167
1404(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Identifier = "HP-2530-24"
1405(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Service-Type = Framed-User
1406(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Framed-Protocol = PPP
1407(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Port = 9
1408(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Port-Type = Ethernet
1409(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Port-Id = "9"
1410(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Calling-Station-Id := "78:24:af:07:fc:cf"
1411(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1412(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Tunnel-Type:0 = VLAN
1413(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Tunnel-Medium-Type:0 = IEEE-802
1414(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Tunnel-Private-Group-Id:0 = "22"
1415(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   MS-RAS-Vendor = 11
1416(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b28
1417(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b2e
1418(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b30
1419(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b3d
1420(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b18
1421(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0138
1422(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x013a
1423(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0140
1424(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0141
1425(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0151
1426(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Called-Station-Id := "9c:dc:71:31:2a:20"
1427(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Event-Timestamp = "mai 29 2018 15:58:01 CEST"
1428(98) Tue May 29 15:58:01 2018: Debug: Virtual server packetfence-tunnel received request
1429(98) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02de000901616c6578
1430(98) Tue May 29 15:58:01 2018: Debug:   FreeRADIUS-Proxied-To = 127.0.0.1
1431(98) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
1432(98) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
1433(98) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
1434(98) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
1435(98) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
1436(98) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
1437(98) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
1438(98) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
1439(98) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
1440(98) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id := "78:24:af:07:fc:cf"
1441(98) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1442(98) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
1443(98) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
1444(98) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
1445(98) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
1446(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
1447(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
1448(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
1449(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
1450(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
1451(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
1452(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
1453(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
1454(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
1455(98) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
1456(98) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id := "9c:dc:71:31:2a:20"
1457(98) Tue May 29 15:58:01 2018: Debug:   Event-Timestamp = "mai 29 2018 15:58:01 CEST"
1458(98) Tue May 29 15:58:01 2018: WARNING: Outer and inner identities are the same.  User privacy is compromised.
1459(98) Tue May 29 15:58:01 2018: Debug: server packetfence-tunnel {
1460(98) Tue May 29 15:58:01 2018: Debug:   # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
1461(98) Tue May 29 15:58:01 2018: Debug:     authorize {
1462(98) Tue May 29 15:58:01 2018: Debug:       if ( outer.EAP-Type == TTLS) {
1463(98) Tue May 29 15:58:01 2018: Debug:       if ( outer.EAP-Type == TTLS)  -> FALSE
1464(98) Tue May 29 15:58:01 2018: Debug:       policy filter_username {
1465(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name) {
1466(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name)  -> TRUE
1467(98) Tue May 29 15:58:01 2018: Debug:         if (&User-Name)  {
1468(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ / /) {
1469(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ / /)  -> FALSE
1470(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@[^@]*@/ ) {
1471(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@[^@]*@/ )  -> FALSE
1472(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.\./ ) {
1473(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.\./ )  -> FALSE
1474(98) Tue May 29 15:58:01 2018: Debug:           if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
1475(98) Tue May 29 15:58:01 2018: Debug:           if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
1476(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.$/)  {
1477(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.$/)   -> FALSE
1478(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@\./)  {
1479(98) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@\./)   -> FALSE
1480(98) Tue May 29 15:58:01 2018: Debug:         } # if (&User-Name)  = notfound
1481(98) Tue May 29 15:58:01 2018: Debug:       } # policy filter_username = notfound
1482(98) Tue May 29 15:58:01 2018: Debug:       [mschap] = noop
1483(98) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
1484(98) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
1485(98) Tue May 29 15:58:01 2018: Debug:       [suffix] = noop
1486(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
1487(98) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
1488(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
1489(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
1490(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
1491(98) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
1492(98) Tue May 29 15:58:01 2018: Debug:       [ntdomain] = ok
1493(98) Tue May 29 15:58:01 2018: Debug:       update control {
1494(98) Tue May 29 15:58:01 2018: Debug:       } # update control = noop
1495(98) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 222 length 9
1496(98) Tue May 29 15:58:01 2018: Debug: eap: EAP-Identity reply, returning 'ok' so we can short-circuit the rest of authorize
1497(98) Tue May 29 15:58:01 2018: Debug:       [eap] = ok
1498(98) Tue May 29 15:58:01 2018: Debug:     } # authorize = ok
1499(98) Tue May 29 15:58:01 2018: WARNING:   You set Proxy-To-Realm = local, but it is a LOCAL realm!  Cancelling proxy request.
1500(98) Tue May 29 15:58:01 2018: Debug:   Found Auth-Type = eap
1501(98) Tue May 29 15:58:01 2018: Debug:   # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
1502(98) Tue May 29 15:58:01 2018: Debug:     authenticate {
1503(98) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP Identity (1)
1504(98) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_mschapv2 to process data
1505(98) Tue May 29 15:58:01 2018: Debug: eap_mschapv2: Issuing Challenge
1506(98) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 223 length 43
1507(98) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x83459d01839a872e
1508(98) Tue May 29 15:58:01 2018: Debug:       [eap] = handled
1509(98) Tue May 29 15:58:01 2018: Debug:     } # authenticate = handled
1510(98) Tue May 29 15:58:01 2018: Debug: } # server packetfence-tunnel
1511(98) Tue May 29 15:58:01 2018: Debug: Virtual server sending reply
1512(98) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01df002b1a01df002610d6bd0eb432c1d6cdd133dba873dd60c6667265657261646975732d332e302e3135
1513(98) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
1514(98) Tue May 29 15:58:01 2018: Debug:   State = 0x83459d01839a872e6e46b20fdb6f7325
1515(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Got tunneled reply code 11
1516(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   EAP-Message = 0x01df002b1a01df002610d6bd0eb432c1d6cdd133dba873dd60c6667265657261646975732d332e302e3135
1517(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   Message-Authenticator = 0x00000000000000000000000000000000
1518(98) Tue May 29 15:58:01 2018: Debug: eap_peap:   State = 0x83459d01839a872e6e46b20fdb6f7325
1519(98) Tue May 29 15:58:01 2018: Debug: eap_peap: Got tunneled Access-Challenge
1520(98) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 223 length 75
1521(98) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f9d876d8a
1522(98) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
1523(98) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
1524(98) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
1525(98) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
1526(98) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1527(98) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 174 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
1528(98) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01df004b19001703010040af044ec8aaec62ff2615386d84f7d28ddf57dcbc789fb683ee7d847cfae7ab59920b3bd97e43a2aa2c863d2f8955ab569add906677ce96e86002a5863e430fe3
1529(98) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
1530(98) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9d876d8a362781b0ef5e3ccf
1531(98) Tue May 29 15:58:01 2018: Debug: Finished request
1532(99) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 175 from 172.31.1.167:1812 to 172.31.1.130:1812 length 435
1533(99) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
1534(99) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
1535(99) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
1536(99) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
1537(99) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
1538(99) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
1539(99) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
1540(99) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
1541(99) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
1542(99) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
1543(99) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
1544(99) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1545(99) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
1546(99) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
1547(99) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
1548(99) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9d876d8a362781b0ef5e3ccf
1549(99) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02df005b190017030100503b9f1a5c03fbe8e3436b892f26cf0a35d932472fc2f0eea451f2b954c0aa892da10bcc7b844ea45572669f8e1b745bb232fb0fd45de6715729d13a665310c021389de003a823648a088cc9d90f690fdb
1550(99) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0xd07ae45c603567970338c26a1096a5db
1551(99) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
1552(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
1553(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
1554(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
1555(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
1556(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
1557(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
1558(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
1559(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
1560(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
1561(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
1562(99) Tue May 29 15:58:01 2018: Debug: session-state: No cached attributes
1563(99) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
1564(99) Tue May 29 15:58:01 2018: Debug:   authorize {
1565(99) Tue May 29 15:58:01 2018: Debug:     update {
1566(99) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
1567(99) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
1568(99) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
1569(99) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
1570(99) Tue May 29 15:58:01 2018: Debug:     } # update = noop
1571(99) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
1572(99) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
1573(99) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
1574(99) Tue May 29 15:58:01 2018: Debug:          --> 0
1575(99) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
1576(99) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
1577(99) Tue May 29 15:58:01 2018: Debug:         update control {
1578(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
1579(99) Tue May 29 15:58:01 2018: Debug:              --> alex
1580(99) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
1581(99) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
1582(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
1583(99) Tue May 29 15:58:01 2018: Debug:              --> 1
1584(99) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
1585(99) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
1586(99) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
1587(99) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
1588(99) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
1589(99) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
1590(99) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
1591(99) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
1592(99) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
1593(99) Tue May 29 15:58:01 2018: Debug:         update request {
1594(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1595(99) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
1596(99) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1597(99) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1598(99) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
1599(99) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1600(99) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
1601(99) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
1602(99) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
1603(99) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
1604(99) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
1605(99) Tue May 29 15:58:01 2018: Debug:         update request {
1606(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1607(99) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
1608(99) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
1609(99) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
1610(99) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
1611(99) Tue May 29 15:58:01 2018: Debug:            --> 
1612(99) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
1613(99) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
1614(99) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1615(99) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
1616(99) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
1617(99) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
1618(99) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1619(99) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
1620(99) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
1621(99) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
1622(99) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
1623(99) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
1624(99) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
1625(99) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
1626(99) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
1627(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
1628(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
1629(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
1630(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
1631(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
1632(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
1633(99) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
1634(99) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
1635(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
1636(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
1637(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
1638(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
1639(99) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
1640(99) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
1641(99) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
1642(99) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
1643(99) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
1644(99) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
1645(99) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
1646(99) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
1647(99) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
1648(99) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
1649(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
1650(99) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
1651(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
1652(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
1653(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
1654(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
1655(99) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
1656(99) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 223 length 91
1657(99) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
1658(99) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
1659(99) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
1660(99) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
1661(99) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
1662(99) Tue May 29 15:58:01 2018: Debug:   authenticate {
1663(99) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x83459d01839a872e
1664(99) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f9d876d8a
1665(99) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f9d876d8a, released from the list
1666(99) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
1667(99) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
1668(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
1669(99) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = ok
1670(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Done initial handshake
1671(99) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = ok
1672(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Session established.  Decoding tunneled attributes
1673(99) Tue May 29 15:58:01 2018: Debug: eap_peap: PEAP state phase2
1674(99) Tue May 29 15:58:01 2018: Debug: eap_peap: EAP method MSCHAPv2 (26)
1675(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Got tunneled request
1676(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   EAP-Message = 0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578
1677(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Setting User-Name to alex
1678(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Sending tunneled request to packetfence-tunnel
1679(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   EAP-Message = 0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578
1680(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   FreeRADIUS-Proxied-To = 127.0.0.1
1681(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   User-Name = "alex"
1682(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   State = 0x83459d01839a872e6e46b20fdb6f7325
1683(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Framed-MTU = 1480
1684(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-IP-Address = 172.31.1.167
1685(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Identifier = "HP-2530-24"
1686(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Service-Type = Framed-User
1687(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Framed-Protocol = PPP
1688(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Port = 9
1689(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Port-Type = Ethernet
1690(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   NAS-Port-Id = "9"
1691(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Calling-Station-Id := "78:24:af:07:fc:cf"
1692(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1693(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Tunnel-Type:0 = VLAN
1694(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Tunnel-Medium-Type:0 = IEEE-802
1695(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Tunnel-Private-Group-Id:0 = "22"
1696(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   MS-RAS-Vendor = 11
1697(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b28
1698(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b2e
1699(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b30
1700(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b3d
1701(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x011a0000000b18
1702(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0138
1703(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x013a
1704(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0140
1705(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0141
1706(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   HP-Capability-Advert = 0x0151
1707(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Called-Station-Id := "9c:dc:71:31:2a:20"
1708(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Event-Timestamp = "mai 29 2018 15:58:01 CEST"
1709(99) Tue May 29 15:58:01 2018: Debug: Virtual server packetfence-tunnel received request
1710(99) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578
1711(99) Tue May 29 15:58:01 2018: Debug:   FreeRADIUS-Proxied-To = 127.0.0.1
1712(99) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
1713(99) Tue May 29 15:58:01 2018: Debug:   State = 0x83459d01839a872e6e46b20fdb6f7325
1714(99) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
1715(99) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
1716(99) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
1717(99) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
1718(99) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
1719(99) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
1720(99) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
1721(99) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
1722(99) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id := "78:24:af:07:fc:cf"
1723(99) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
1724(99) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
1725(99) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
1726(99) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
1727(99) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
1728(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
1729(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
1730(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
1731(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
1732(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
1733(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
1734(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
1735(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
1736(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
1737(99) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
1738(99) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id := "9c:dc:71:31:2a:20"
1739(99) Tue May 29 15:58:01 2018: Debug:   Event-Timestamp = "mai 29 2018 15:58:01 CEST"
1740(99) Tue May 29 15:58:01 2018: WARNING: Outer and inner identities are the same.  User privacy is compromised.
1741(99) Tue May 29 15:58:01 2018: Debug: server packetfence-tunnel {
1742(99) Tue May 29 15:58:01 2018: Debug:   session-state: No cached attributes
1743(99) Tue May 29 15:58:01 2018: Debug:   # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
1744(99) Tue May 29 15:58:01 2018: Debug:     authorize {
1745(99) Tue May 29 15:58:01 2018: Debug:       if ( outer.EAP-Type == TTLS) {
1746(99) Tue May 29 15:58:01 2018: Debug:       if ( outer.EAP-Type == TTLS)  -> FALSE
1747(99) Tue May 29 15:58:01 2018: Debug:       policy filter_username {
1748(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name) {
1749(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name)  -> TRUE
1750(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name)  {
1751(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ / /) {
1752(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ / /)  -> FALSE
1753(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@[^@]*@/ ) {
1754(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@[^@]*@/ )  -> FALSE
1755(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.\./ ) {
1756(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.\./ )  -> FALSE
1757(99) Tue May 29 15:58:01 2018: Debug:           if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
1758(99) Tue May 29 15:58:01 2018: Debug:           if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
1759(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.$/)  {
1760(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /\.$/)   -> FALSE
1761(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@\./)  {
1762(99) Tue May 29 15:58:01 2018: Debug:           if (&User-Name =~ /@\./)   -> FALSE
1763(99) Tue May 29 15:58:01 2018: Debug:         } # if (&User-Name)  = notfound
1764(99) Tue May 29 15:58:01 2018: Debug:       } # policy filter_username = notfound
1765(99) Tue May 29 15:58:01 2018: Debug:       [mschap] = noop
1766(99) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
1767(99) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
1768(99) Tue May 29 15:58:01 2018: Debug:       [suffix] = noop
1769(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
1770(99) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
1771(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
1772(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
1773(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
1774(99) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
1775(99) Tue May 29 15:58:01 2018: Debug:       [ntdomain] = ok
1776(99) Tue May 29 15:58:01 2018: Debug:       update control {
1777(99) Tue May 29 15:58:01 2018: Debug:       } # update control = noop
1778(99) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 223 length 63
1779(99) Tue May 29 15:58:01 2018: Debug: eap: No EAP Start, assuming it's an on-going EAP conversation
1780(99) Tue May 29 15:58:01 2018: Debug:       [eap] = updated
1781(99) Tue May 29 15:58:01 2018: Debug: files: users: Matched entry DEFAULT at line 181
1782(99) Tue May 29 15:58:01 2018: Debug:       [files] = ok
1783(99) Tue May 29 15:58:01 2018: Debug:       policy rewrite_called_station_id {
1784(99) Tue May 29 15:58:01 2018: Debug:         if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
1785(99) Tue May 29 15:58:01 2018: Debug:         if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
1786(99) Tue May 29 15:58:01 2018: Debug:         if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
1787(99) Tue May 29 15:58:01 2018: Debug:           update request {
1788(99) Tue May 29 15:58:01 2018: Debug:             EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
1789(99) Tue May 29 15:58:01 2018: Debug:                --> 9c:dc:71:31:2a:20
1790(99) Tue May 29 15:58:01 2018: Debug:           } # update request = noop
1791(99) Tue May 29 15:58:01 2018: Debug:           if ("%{8}") {
1792(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{8}
1793(99) Tue May 29 15:58:01 2018: Debug:              --> 
1794(99) Tue May 29 15:58:01 2018: Debug:           if ("%{8}")  -> FALSE
1795(99) Tue May 29 15:58:01 2018: Debug:           elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
1796(99) Tue May 29 15:58:01 2018: Debug:           elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1797(99) Tue May 29 15:58:01 2018: Debug:           elsif (Aruba-Essid-Name) {
1798(99) Tue May 29 15:58:01 2018: Debug:           elsif (Aruba-Essid-Name)  -> FALSE
1799(99) Tue May 29 15:58:01 2018: Debug:           elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
1800(99) Tue May 29 15:58:01 2018: Debug:           elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
1801(99) Tue May 29 15:58:01 2018: Debug:           [updated] = updated
1802(99) Tue May 29 15:58:01 2018: Debug:         } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
1803(99) Tue May 29 15:58:01 2018: Debug:         ... skipping else: Preceding "if" was taken
1804(99) Tue May 29 15:58:01 2018: Debug:       } # policy rewrite_called_station_id = updated
1805(99) Tue May 29 15:58:01 2018: Debug:       policy packetfence-local-auth {
1806(99) Tue May 29 15:58:01 2018: Debug:         policy packetfence-set-tenant-id {
1807(99) Tue May 29 15:58:01 2018: Debug:           if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
1808(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
1809(99) Tue May 29 15:58:01 2018: Debug:              --> 0
1810(99) Tue May 29 15:58:01 2018: Debug:           if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
1811(99) Tue May 29 15:58:01 2018: Debug:           if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
1812(99) Tue May 29 15:58:01 2018: Debug:             update control {
1813(99) Tue May 29 15:58:01 2018: Debug:               EXPAND %{User-Name}
1814(99) Tue May 29 15:58:01 2018: Debug:                  --> alex
1815(99) Tue May 29 15:58:01 2018: Debug:               SQL-User-Name set to 'alex'
1816(99) Tue May 29 15:58:01 2018: Debug:               Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
1817(99) Tue May 29 15:58:01 2018: Debug:               EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
1818(99) Tue May 29 15:58:01 2018: Debug:                  --> 1
1819(99) Tue May 29 15:58:01 2018: Debug:             } # update control = noop
1820(99) Tue May 29 15:58:01 2018: Debug:           } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
1821(99) Tue May 29 15:58:01 2018: Debug:           if ( &control:PacketFence-Tenant-Id == 0 ) {
1822(99) Tue May 29 15:58:01 2018: Debug:           if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
1823(99) Tue May 29 15:58:01 2018: Debug:         } # policy packetfence-set-tenant-id = noop
1824(99) Tue May 29 15:58:01 2018: Debug:         update control {
1825(99) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
1826(99) Tue May 29 15:58:01 2018: Debug: pflocal: EXPAND %{User-Name}
1827(99) Tue May 29 15:58:01 2018: Debug: pflocal:    --> alex
1828(99) Tue May 29 15:58:01 2018: Debug: pflocal: SQL-User-Name set to 'alex'
1829(99) Tue May 29 15:58:01 2018: Debug: pflocal: EXPAND SELECT 1, pid, "Cleartext-Password", REPLACE(password,'{ntlm}',''), ":="           FROM password           WHERE pid = '%{SQL-User-Name}'           AND password.tenant_id = '%{control:PacketFence-Tenant-Id}'           AND NOT EXISTS (SELECT pid FROM activation WHERE pid = '%{SQL-User-Name}') 
1830(99) Tue May 29 15:58:01 2018: Debug: pflocal:    --> SELECT 1, pid, "Cleartext-Password", REPLACE(password,'{ntlm}',''), ":="           FROM password           WHERE pid = 'alex'           AND password.tenant_id = '1'           AND NOT EXISTS (SELECT pid FROM activation WHERE pid = 'alex') 
1831(99) Tue May 29 15:58:01 2018: Debug: pflocal: Executing select query: SELECT 1, pid, "Cleartext-Password", REPLACE(password,'{ntlm}',''), ":="           FROM password           WHERE pid = 'alex'           AND password.tenant_id = '1'           AND NOT EXISTS (SELECT pid FROM activation WHERE pid = 'alex') 
1832(99) Tue May 29 15:58:01 2018: Debug: pflocal: User found in radcheck table
1833(99) Tue May 29 15:58:01 2018: Debug: pflocal: Conditional check items matched, merging assignment check items
1834(99) Tue May 29 15:58:01 2018: Debug: pflocal:   Cleartext-Password := "{bcrypt}$2a$08$LjT1BFovSP2zIwa8pEz.tePPAY5PnooN0z7xqotH..yoceYoposRi"
1835(99) Tue May 29 15:58:01 2018: Debug: pflocal: EXPAND select 1
1836(99) Tue May 29 15:58:01 2018: Debug: pflocal:    --> select 1
1837(99) Tue May 29 15:58:01 2018: Debug: pflocal: Executing select query: select 1
1838(99) Tue May 29 15:58:01 2018: Debug: pflocal: User found in the group table
1839(99) Tue May 29 15:58:01 2018: Debug:         [pflocal] = ok
1840(99) Tue May 29 15:58:01 2018: Debug:         if (fail || notfound || noop) {
1841(99) Tue May 29 15:58:01 2018: Debug:         if (fail || notfound || noop)  -> FALSE
1842(99) Tue May 29 15:58:01 2018: Debug:       } # policy packetfence-local-auth = ok
1843(99) Tue May 29 15:58:01 2018: WARNING: pap: Auth-Type already set.  Not setting to PAP
1844(99) Tue May 29 15:58:01 2018: Debug:       [pap] = noop
1845(99) Tue May 29 15:58:01 2018: Debug:     } # authorize = updated
1846(99) Tue May 29 15:58:01 2018: WARNING:   You set Proxy-To-Realm = local, but it is a LOCAL realm!  Cancelling proxy request.
1847(99) Tue May 29 15:58:01 2018: Debug:   Found Auth-Type = eap
1848(99) Tue May 29 15:58:01 2018: Debug:   # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
1849(99) Tue May 29 15:58:01 2018: Debug:     authenticate {
1850(99) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x83459d01839a872e
1851(99) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x83459d01839a872e
1852(99) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x83459d01839a872e, released from the list
1853(99) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP MSCHAPv2 (26)
1854(99) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_mschapv2 to process data
1855(99) Tue May 29 15:58:01 2018: Debug: eap_mschapv2: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
1856(99) Tue May 29 15:58:01 2018: Debug: eap_mschapv2:   Auth-Type MS-CHAP {
1857(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'User-Name'} = &request:User-Name -> 'alex'
1858(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'NAS-IP-Address'} = &request:NAS-IP-Address -> '172.31.1.167'
1859(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'NAS-Port'} = &request:NAS-Port -> '9'
1860(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Service-Type'} = &request:Service-Type -> 'Framed-User'
1861(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Framed-Protocol'} = &request:Framed-Protocol -> 'PPP'
1862(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Framed-MTU'} = &request:Framed-MTU -> '1480'
1863(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'State'} = &request:State -> '0x83459d01839a872e6e46b20fdb6f7325'
1864(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Called-Station-Id'} = &request:Called-Station-Id -> '9c:dc:71:31:2a:20'
1865(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Calling-Station-Id'} = &request:Calling-Station-Id -> '78:24:af:07:fc:cf'
1866(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'NAS-Identifier'} = &request:NAS-Identifier -> 'HP-2530-24'
1867(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'NAS-Port-Type'} = &request:NAS-Port-Type -> 'Ethernet'
1868(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Tunnel-Type'} = &request:Tunnel-Type -> 'VLAN'
1869(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Tunnel-Medium-Type'} = &request:Tunnel-Medium-Type -> 'IEEE-802'
1870(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Tunnel-Private-Group-Id'} = &request:Tunnel-Private-Group-Id -> '22'
1871(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Event-Timestamp'} = &request:Event-Timestamp -> 'mai 29 2018 15:58:01 CEST'
1872(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Connect-Info'} = &request:Connect-Info -> 'CONNECT Ethernet 100Mbps Full duplex'
1873(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'EAP-Message'} = &request:EAP-Message -> '0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578'
1874(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'NAS-Port-Id'} = &request:NAS-Port-Id -> '9'
1875(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'FreeRADIUS-Proxied-To'} = &request:FreeRADIUS-Proxied-To -> '127.0.0.1'
1876(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[0] = &request:HP-Capability-Advert -> '0x011a0000000b28'
1877(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[1] = &request:HP-Capability-Advert -> '0x011a0000000b2e'
1878(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[2] = &request:HP-Capability-Advert -> '0x011a0000000b30'
1879(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[3] = &request:HP-Capability-Advert -> '0x011a0000000b3d'
1880(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[4] = &request:HP-Capability-Advert -> '0x011a0000000b18'
1881(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[5] = &request:HP-Capability-Advert -> '0x0138'
1882(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[6] = &request:HP-Capability-Advert -> '0x013a'
1883(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[7] = &request:HP-Capability-Advert -> '0x0140'
1884(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[8] = &request:HP-Capability-Advert -> '0x0141'
1885(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'HP-Capability-Advert'}[9] = &request:HP-Capability-Advert -> '0x0151'
1886(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'MS-RAS-Vendor'} = &request:MS-RAS-Vendor -> '11'
1887(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'MS-CHAP-Challenge'} = &request:MS-CHAP-Challenge -> '0xd6bd0eb432c1d6cdd133dba873dd60c6'
1888(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'MS-CHAP2-Response'} = &request:MS-CHAP2-Response -> '0xdf6c0509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d548'
1889(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'EAP-Type'} = &request:EAP-Type -> 'MSCHAPv2'
1890(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Stripped-User-Name'} = &request:Stripped-User-Name -> 'alex'
1891(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'Realm'} = &request:Realm -> 'null'
1892(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REQUEST{'MS-CHAP-User-Name'} = &request:MS-CHAP-User-Name -> 'alex'
1893(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REPLY{'Framed-Protocol'} = &reply:Framed-Protocol -> 'PPP'
1894(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_REPLY{'Framed-Compression'} = &reply:Framed-Compression -> 'Van-Jacobson-TCP-IP'
1895(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CHECK{'Auth-Type'} = &control:Auth-Type -> 'eap'
1896(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CHECK{'Proxy-To-Realm'} = &control:Proxy-To-Realm -> 'LOCAL'
1897(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CHECK{'MS-CHAP-Use-NTLM-Auth'} = &control:MS-CHAP-Use-NTLM-Auth -> 'No'
1898(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CHECK{'Cleartext-Password'} = &control:Cleartext-Password -> '{bcrypt}$2a$08$LjT1BFovSP2zIwa8pEz.tePPAY5PnooN0z7xqotH..yoceYoposRi'
1899(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CHECK{'PacketFence-Tenant-Id'} = &control:PacketFence-Tenant-Id -> '1'
1900(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CONFIG{'Auth-Type'} = &control:Auth-Type -> 'eap'
1901(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CONFIG{'Proxy-To-Realm'} = &control:Proxy-To-Realm -> 'LOCAL'
1902(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CONFIG{'MS-CHAP-Use-NTLM-Auth'} = &control:MS-CHAP-Use-NTLM-Auth -> 'No'
1903(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CONFIG{'Cleartext-Password'} = &control:Cleartext-Password -> '{bcrypt}$2a$08$LjT1BFovSP2zIwa8pEz.tePPAY5PnooN0z7xqotH..yoceYoposRi'
1904(99) Tue May 29 15:58:01 2018: Debug: packetfence:   $RAD_CONFIG{'PacketFence-Tenant-Id'} = &control:PacketFence-Tenant-Id -> '1'
1905(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Framed-MTU = $RAD_REQUEST{'Framed-MTU'} -> '1480'
1906(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:EAP-Message = $RAD_REQUEST{'EAP-Message'} -> '0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578'
1907(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:NAS-Port-Id = $RAD_REQUEST{'NAS-Port-Id'} -> '9'
1908(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Realm = $RAD_REQUEST{'Realm'} -> 'null'
1909(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:NAS-Identifier = $RAD_REQUEST{'NAS-Identifier'} -> 'HP-2530-24'
1910(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:NAS-Port = $RAD_REQUEST{'NAS-Port'} -> '9'
1911(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Stripped-User-Name = $RAD_REQUEST{'Stripped-User-Name'} -> 'alex'
1912(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:MS-CHAP-Challenge = $RAD_REQUEST{'MS-CHAP-Challenge'} -> '0xd6bd0eb432c1d6cdd133dba873dd60c6'
1913(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Tunnel-Type:0 = $RAD_REQUEST{'Tunnel-Type:0'} -> 'VLAN'
1914(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:MS-CHAP-User-Name = $RAD_REQUEST{'MS-CHAP-User-Name'} -> 'alex'
1915(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:FreeRADIUS-Proxied-To = $RAD_REQUEST{'FreeRADIUS-Proxied-To'} -> '127.0.0.1'
1916(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Framed-Protocol = $RAD_REQUEST{'Framed-Protocol'} -> 'PPP'
1917(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Tunnel-Private-Group-Id:0 = $RAD_REQUEST{'Tunnel-Private-Group-Id:0'} -> '22'
1918(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Called-Station-Id = $RAD_REQUEST{'Called-Station-Id'} -> '9c:dc:71:31:2a:20'
1919(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:NAS-Port-Type = $RAD_REQUEST{'NAS-Port-Type'} -> 'Ethernet'
1920(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:User-Name = $RAD_REQUEST{'User-Name'} -> 'alex'
1921(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:NAS-IP-Address = $RAD_REQUEST{'NAS-IP-Address'} -> '172.31.1.167'
1922(99) Tue May 29 15:58:01 2018: ERROR: packetfence: Failed to create pair - failed to parse time string "mai 29 2018 15:58:01 CEST"
1923(99) Tue May 29 15:58:01 2018: ERROR: packetfence:     &request:Event-Timestamp = $RAD_REQUEST{'Event-Timestamp'} -> 'mai 29 2018 15:58:01 CEST'
1924(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Service-Type = $RAD_REQUEST{'Service-Type'} -> 'Framed-User'
1925(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:State = $RAD_REQUEST{'State'} -> '0x83459d01839a872e6e46b20fdb6f7325'
1926(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Calling-Station-Id = $RAD_REQUEST{'Calling-Station-Id'} -> '78:24:af:07:fc:cf'
1927(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Connect-Info = $RAD_REQUEST{'Connect-Info'} -> 'CONNECT Ethernet 100Mbps Full duplex'
1928(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:EAP-Type = $RAD_REQUEST{'EAP-Type'} -> 'MSCHAPv2'
1929(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:MS-RAS-Vendor = $RAD_REQUEST{'MS-RAS-Vendor'} -> '11'
1930(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:Tunnel-Medium-Type:0 = $RAD_REQUEST{'Tunnel-Medium-Type:0'} -> 'IEEE-802'
1931(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:MS-CHAP2-Response = $RAD_REQUEST{'MS-CHAP2-Response'} -> '0xdf6c0509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d548'
1932(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b28'
1933(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b2e'
1934(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b30'
1935(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b3d'
1936(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x011a0000000b18'
1937(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0138'
1938(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x013a'
1939(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0140'
1940(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0141'
1941(99) Tue May 29 15:58:01 2018: Debug: packetfence: &request:HP-Capability-Advert += $RAD_REQUEST{'HP-Capability-Advert'} -> '0x0151'
1942(99) Tue May 29 15:58:01 2018: Debug: packetfence: &reply:Framed-Compression = $RAD_REPLY{'Framed-Compression'} -> 'Van-Jacobson-TCP-IP'
1943(99) Tue May 29 15:58:01 2018: Debug: packetfence: &reply:Framed-Protocol = $RAD_REPLY{'Framed-Protocol'} -> 'PPP'
1944(99) Tue May 29 15:58:01 2018: Debug: packetfence: &control:PacketFence-Tenant-Id = $RAD_CHECK{'PacketFence-Tenant-Id'} -> '1'
1945(99) Tue May 29 15:58:01 2018: Debug: packetfence: &control:Auth-Type = $RAD_CHECK{'Auth-Type'} -> 'eap'
1946(99) Tue May 29 15:58:01 2018: Debug: packetfence: &control:Cleartext-Password = $RAD_CHECK{'Cleartext-Password'} -> '{bcrypt}$2a$08$LjT1BFovSP2zIwa8pEz.tePPAY5PnooN0z7xqotH..yoceYoposRi'
1947(99) Tue May 29 15:58:01 2018: Debug: packetfence: &control:Proxy-To-Realm = $RAD_CHECK{'Proxy-To-Realm'} -> 'LOCAL'
1948(99) Tue May 29 15:58:01 2018: Debug: packetfence: &control:MS-CHAP-Use-NTLM-Auth = $RAD_CHECK{'MS-CHAP-Use-NTLM-Auth'} -> 'No'
1949(99) Tue May 29 15:58:01 2018: Debug:     [packetfence] = noop
1950(99) Tue May 29 15:58:01 2018: Debug:     if (&control:NT-Password && &control:NT-Password != "") {
1951(99) Tue May 29 15:58:01 2018: Debug:     if (&control:NT-Password && &control:NT-Password != "")  -> FALSE
1952(99) Tue May 29 15:58:01 2018: Debug:     else {
1953(99) Tue May 29 15:58:01 2018: Debug:       policy packetfence-mschap-authenticate {
1954(99) Tue May 29 15:58:01 2018: Debug:         if (PacketFence-Domain) {
1955(99) Tue May 29 15:58:01 2018: Debug:         if (PacketFence-Domain)  -> FALSE
1956(99) Tue May 29 15:58:01 2018: Debug:         else {
1957(99) Tue May 29 15:58:01 2018: Debug:           if ( "%{User-Name}" =~ /^host\/.*/) {
1958(99) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
1959(99) Tue May 29 15:58:01 2018: Debug:              --> alex
1960(99) Tue May 29 15:58:01 2018: Debug:           if ( "%{User-Name}" =~ /^host\/.*/)  -> FALSE
1961(99) Tue May 29 15:58:01 2018: Debug:           else {
1962(99) Tue May 29 15:58:01 2018: Debug: mschap: Found Cleartext-Password, hashing to create NT-Password
1963(99) Tue May 29 15:58:01 2018: Debug: mschap: Found Cleartext-Password, hashing to create LM-Password
1964(99) Tue May 29 15:58:01 2018: Debug: mschap: Creating challenge hash with username: alex
1965(99) Tue May 29 15:58:01 2018: Debug: mschap: Client is using MS-CHAPv2
1966(99) Tue May 29 15:58:01 2018: ERROR: mschap: MS-CHAP2-Response is incorrect
1967(99) Tue May 29 15:58:01 2018: Debug:             [mschap] = reject
1968(99) Tue May 29 15:58:01 2018: Debug:           } # else = reject
1969(99) Tue May 29 15:58:01 2018: Debug:         } # else = reject
1970(99) Tue May 29 15:58:01 2018: Debug:       } # policy packetfence-mschap-authenticate = reject
1971(99) Tue May 29 15:58:01 2018: Debug:     } # else = reject
1972(99) Tue May 29 15:58:01 2018: Debug:   } # Auth-Type MS-CHAP = reject
1973(99) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Failure (code 4) ID 223 length 4
1974(99) Tue May 29 15:58:01 2018: Debug: eap: Freeing handler
1975(99) Tue May 29 15:58:01 2018: Debug:       [eap] = reject
1976(99) Tue May 29 15:58:01 2018: Debug:     } # authenticate = reject
1977(99) Tue May 29 15:58:01 2018: Debug:   Failed to authenticate the user
1978(99) Tue May 29 15:58:01 2018: Debug:   Using Post-Auth-Type Reject
1979(99) Tue May 29 15:58:01 2018: Debug:   # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence-tunnel
1980(99) Tue May 29 15:58:01 2018: Debug:     Post-Auth-Type REJECT {
1981(99) Tue May 29 15:58:01 2018: Debug:       update {
1982(99) Tue May 29 15:58:01 2018: Debug:       } # update = noop
1983(99) Tue May 29 15:58:01 2018: Debug:       policy packetfence-audit-log-reject {
1984(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name != "dummy") {
1985(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name != "dummy")  -> TRUE
1986(99) Tue May 29 15:58:01 2018: Debug:         if (&User-Name != "dummy")  {
1987(99) Tue May 29 15:58:01 2018: Debug:           policy request-timing {
1988(99) Tue May 29 15:58:01 2018: Debug:             if (control:PacketFence-Request-Time != 0) {
1989(99) Tue May 29 15:58:01 2018: ERROR:             Failed retrieving values required to evaluate condition
1990(99) Tue May 29 15:58:01 2018: Debug:           } # policy request-timing = noop
1991(99) Tue May 29 15:58:01 2018: Debug: sql_reject: EXPAND type.reject.query
1992(99) Tue May 29 15:58:01 2018: Debug: sql_reject:    --> type.reject.query
1993(99) Tue May 29 15:58:01 2018: Debug: sql_reject: Using query template 'query'
1994(99) Tue May 29 15:58:01 2018: Debug: sql_reject: EXPAND %{User-Name}
1995(99) Tue May 29 15:58:01 2018: Debug: sql_reject:    --> alex
1996(99) Tue May 29 15:58:01 2018: Debug: sql_reject: SQL-User-Name set to 'alex'
1997(99) Tue May 29 15:58:01 2018: Debug: sql_reject: EXPAND INSERT INTO radius_audit_log               ( mac, ip, computer_name, user_name,                stripped_user_name,  realm, event_type,                switch_id, switch_mac, switch_ip_address,                radius_source_ip_address, called_station_id, calling_station_id,                nas_port_type, ssid, nas_port_id,                ifindex, nas_port, connection_type,                nas_ip_address, nas_identifier, auth_status,                reason, auth_type, eap_type,                role, node_status, profile,                source, auto_reg, is_phone,                pf_domain, uuid, radius_request,                radius_reply, request_time, tenant_id)              VALUES               ( '%{request:Calling-Station-Id}', '%{request:Framed-IP-Address}', '%{%{control:PacketFence-Computer-Name}:-N/A}', '%{request:User-Name}',                '%{request:Stripped-User-Name}', '%{request:Realm}', 'Radius-Access-Request',                '%{%{control:PacketFence-Switch-Id}:-N/A}', '%{%{control:PacketFence-Switch-Mac}:-N/A}', '%{%{control:PacketFence-Switch-Ip-Address}:-N/A}',                '%{Packet-Src-IP-Address}', '%{request:Called-Station-Id}', '%{request:Calling-Station-Id}',                '%{request:NAS-Port-Type}', '%{request:Called-Station-SSID}', '%{request:NAS-Port-Id}',                '%{%{control:PacketFence-IfIndex}:-N/A}', '%{request:NAS-Port}', '%{%{control:PacketFence-Connection-Type}:-N/A}',                '%{request:NAS-IP-Address}', '%{request:NAS-Identifier}',  'Reject',                 '%{request:Module-Failure-Message}', '%{control:Auth-Type}', '%{request:EAP-Type}',                '%{%{control:PacketFence-Role}:-N/A}', '%{%{control:PacketFence-Status}:-N/A}', '%{%{control:PacketFence-Profile}:-N/A}',                '%{%{control:PacketFence-Source}:-N/A}', '%{%{control:PacketFence-AutoReg}:-0}', '%{%{control:PacketFence-IsPhone}:-0}',                '%{request:PacketFence-Domain}', '', '%{pairs:&request:[*]}','%{pairs:&reply:[*]}', '%{%{control:PacketFence-Request-Time}:-N/A}', '%{control:PacketFence-Tenant-Id}')
1998(99) Tue May 29 15:58:01 2018: Debug: sql_reject:    --> INSERT INTO radius_audit_log               ( mac, ip, computer_name, user_name,                stripped_user_name,  realm, event_type,                switch_id, switch_mac, switch_ip_address,                radius_source_ip_address, called_station_id, calling_station_id,                nas_port_type, ssid, nas_port_id,                ifindex, nas_port, connection_type,                nas_ip_address, nas_identifier, auth_status,                reason, auth_type, eap_type,                role, node_status, profile,                source, auto_reg, is_phone,                pf_domain, uuid, radius_request,                radius_reply, request_time, tenant_id)              VALUES               ( '78:24:af:07:fc:cf', '', 'N/A', 'alex',                'alex', 'null', 'Radius-Access-Request',                'N/A', 'N/A', 'N/A',                '172.31.1.167', '9c:dc:71:31:2a:20', '78:24:af:07:fc:cf',                'Ethernet', '', '9',                'N/A', '9', 'N/A',                '172.31.1.167', 'HP-2530-24',  'Reject',                 'mschap: MS-CHAP2-Response is incorrect', 'eap', 'MSCHAPv2',                'N/A', 'N/A', 'N/A',                'N/A', '0', '0',                '', '', 'Framed-MTU =3D 1480=2C EAP-Message =3D 0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578=2C NAS-Port-Id =3D =229=22=2C Realm =3D =22null=22=2C NAS-Identifier =3D =22HP-2530-24=22=2C NAS-Port =3D 9=2C Stripped-User-Name =3D =22alex=22=2C MS-CHAP-Challenge =3D 0xd6bd0eb432c1d6cdd133dba873dd60c6=2C Tunnel-Type:0 =3D VLAN=2C MS-CHAP-User-Name =3D =22alex=22=2C FreeRADIUS-Proxied-To =3D 127.0.0.1=2C Framed-Protocol =3D PPP=2C Tunnel-Private-Group-Id:0 =3D =2222=22=2C Called-Station-Id =3D =229c:dc:71:31:2a:20=22=2C NAS-Port-Type =3D Ethernet=2C User-Name =3D =22alex=22=2C NAS-IP-Address =3D 172.31.1.167=2C Event-Timestamp =3D =22janv.  1 1970 01:00:00 CET=22=2C Service-Type =3D Framed-User=2C State =3D 0x83459d01839a872e6e46b20fdb6f7325=2C Calling-Station-Id =3D =2278:24:af:07:fc:cf=22=2C Connect-Info =3D =22CONNECT Ethernet 100Mbps Full duplex=22=2C EAP-Type =3D MSCHAPv2=2C MS-RAS-Vendor =3D 11=2C Tunnel-Medium-Type:0 =3D IEEE-802=2C MS-CHAP2-Response =3D 0xdf6c0509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d548=2C HP-Capability-Advert =3D 0x011a0000000b28=2C HP-Capability-Advert =3D 0x011a0000000b2e=2C HP-Capability-Advert =3D 0x011a0000000b30=2C HP-Capability-Advert =3D 0x011a0000000b3d=2C HP-Capability-Advert =3D 0x011a0000000b18=2C HP-Capability-Advert =3D 0x0138=2C HP-Capability-Advert =3D 0x013a=2C HP-Capability-Advert =3D 0x0140=2C HP-Capability-Advert =3D 0x0141=2C HP-Capability-Advert =3D 0x0151=2C Module-Failure-Message =3D =22mschap: MS-CHAP2-Response is incorrect=22=2C User-Password =3D =22=2A=2A=2A=2A=2A=2A=22=2C Module-Failure-Message =3D =22Failed retrieving values required to evaluate condition=22=2C SQL-User-Name =3D =22alex=22','Framed-Compression =3D Van-Jacobson-TCP-IP=2C Framed-Protocol =3D PPP=2C MS-CHAP-Error =3D =22=5C337E=3D691 R=3D0 C=3Dd8a5e42d79f7d661d23f0a264d754c7e V=3D3 M=3DAuthentication failed=22=2C EAP-Message =3D 0x04df0004=2C Message-Authenticator =3D 0x00000000000000000000000000000000', 'N/A', '1')
1999(99) Tue May 29 15:58:01 2018: Debug: sql_reject: Executing query: INSERT INTO radius_audit_log               ( mac, ip, computer_name, user_name,                stripped_user_name,  realm, event_type,                switch_id, switch_mac, switch_ip_address,                radius_source_ip_address, called_station_id, calling_station_id,                nas_port_type, ssid, nas_port_id,                ifindex, nas_port, connection_type,                nas_ip_address, nas_identifier, auth_status,                reason, auth_type, eap_type,                role, node_status, profile,                source, auto_reg, is_phone,                pf_domain, uuid, radius_request,                radius_reply, request_time, tenant_id)              VALUES               ( '78:24:af:07:fc:cf', '', 'N/A', 'alex',                'alex', 'null', 'Radius-Access-Request',                'N/A', 'N/A', 'N/A',                '172.31.1.167', '9c:dc:71:31:2a:20', '78:24:af:07:fc:cf',                'Ethernet', '', '9',                'N/A', '9', 'N/A',                '172.31.1.167', 'HP-2530-24',  'Reject',                 'mschap: MS-CHAP2-Response is incorrect', 'eap', 'MSCHAPv2',                'N/A', 'N/A', 'N/A',                'N/A', '0', '0',                '', '', 'Framed-MTU =3D 1480=2C EAP-Message =3D 0x02df003f1a02df003a310509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d54800616c6578=2C NAS-Port-Id =3D =229=22=2C Realm =3D =22null=22=2C NAS-Identifier =3D =22HP-2530-24=22=2C NAS-Port =3D 9=2C Stripped-User-Name =3D =22alex=22=2C MS-CHAP-Challenge =3D 0xd6bd0eb432c1d6cdd133dba873dd60c6=2C Tunnel-Type:0 =3D VLAN=2C MS-CHAP-User-Name =3D =22alex=22=2C FreeRADIUS-Proxied-To =3D 127.0.0.1=2C Framed-Protocol =3D PPP=2C Tunnel-Private-Group-Id:0 =3D =2222=22=2C Called-Station-Id =3D =229c:dc:71:31:2a:20=22=2C NAS-Port-Type =3D Ethernet=2C User-Name =3D =22alex=22=2C NAS-IP-Address =3D 172.31.1.167=2C Event-Timestamp =3D =22janv.  1 1970 01:00:00 CET=22=2C Service-Type =3D Framed-User=2C State =3D 0x83459d01839a872e6e46b20fdb6f7325=2C Calling-Station-Id =3D =2278:24:af:07:fc:cf=22=2C Connect-Info =3D =22CONNECT Ethernet 100Mbps Full duplex=22=2C EAP-Type =3D MSCHAPv2=2C MS-RAS-Vendor =3D 11=2C Tunnel-Medium-Type:0 =3D IEEE-802=2C MS-CHAP2-Response =3D 0xdf6c0509fe62525ae6882ae7887127fecdac00000000000000002c040781fa011fc22ad3e96cc514d710a95539be6966d548=2C HP-Capability-Advert =3D 0x011a0000000b28=2C HP-Capability-Advert =3D 0x011a0000000b2e=2C HP-Capability-Advert =3D 0x011a0000000b30=2C HP-Capability-Advert =3D 0x011a0000000b3d=2C HP-Capability-Advert =3D 0x011a0000000b18=2C HP-Capability-Advert =3D 0x0138=2C HP-Capability-Advert =3D 0x013a=2C HP-Capability-Advert =3D 0x0140=2C HP-Capability-Advert =3D 0x0141=2C HP-Capability-Advert =3D 0x0151=2C Module-Failure-Message =3D =22mschap: MS-CHAP2-Response is incorrect=22=2C User-Password =3D =22=2A=2A=2A=2A=2A=2A=22=2C Module-Failure-Message =3D =22Failed retrieving values required to evaluate condition=22=2C SQL-User-Name =3D =22alex=22','Framed-Compression =3D Van-Jacobson-TCP-IP=2C Framed-Protocol =3D PPP=2C MS-CHAP-Error =3D =22=5C337E=3D691 R=3D0 C=3Dd8a5e42d79f7d661d23f0a264d754c7e V=3D3 M=3DAuthentication failed=22=2C EAP-Message =3D 0x04df0004=2C Message-Authenticator =3D 0x00000000000000000000000000000000', 'N/A', '1')
2000(99) Tue May 29 15:58:01 2018: Debug: sql_reject: SQL query returned: success
2001(99) Tue May 29 15:58:01 2018: Debug: sql_reject: 1 record(s) updated
2002(99) Tue May 29 15:58:01 2018: Debug:           [sql_reject] = ok
2003(99) Tue May 29 15:58:01 2018: Debug:         } # if (&User-Name != "dummy")  = ok
2004(99) Tue May 29 15:58:01 2018: Debug:       } # policy packetfence-audit-log-reject = ok
2005(99) Tue May 29 15:58:01 2018: Debug: attr_filter.access_reject: EXPAND %{User-Name}
2006(99) Tue May 29 15:58:01 2018: Debug: attr_filter.access_reject:    --> alex
2007(99) Tue May 29 15:58:01 2018: Debug: attr_filter.access_reject: Matched entry DEFAULT at line 11
2008(99) Tue May 29 15:58:01 2018: Debug:       [attr_filter.access_reject] = updated
2009(99) Tue May 29 15:58:01 2018: Debug:       update outer.session-state {
2010(99) Tue May 29 15:58:01 2018: Debug:       } # update outer.session-state = noop
2011(99) Tue May 29 15:58:01 2018: Debug:     } # Post-Auth-Type REJECT = updated
2012(99) Tue May 29 15:58:01 2018: Debug: } # server packetfence-tunnel
2013(99) Tue May 29 15:58:01 2018: Debug: Virtual server sending reply
2014(99) Tue May 29 15:58:01 2018: Debug:   MS-CHAP-Error = "\337E=691 R=0 C=d8a5e42d79f7d661d23f0a264d754c7e V=3 M=Authentication failed"
2015(99) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x04df0004
2016(99) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
2017(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Got tunneled reply code 3
2018(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   MS-CHAP-Error = "\337E=691 R=0 C=d8a5e42d79f7d661d23f0a264d754c7e V=3 M=Authentication failed"
2019(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   EAP-Message = 0x04df0004
2020(99) Tue May 29 15:58:01 2018: Debug: eap_peap:   Message-Authenticator = 0x00000000000000000000000000000000
2021(99) Tue May 29 15:58:01 2018: Debug: eap_peap: Tunneled authentication was rejected
2022(99) Tue May 29 15:58:01 2018: Debug: eap_peap: FAILURE
2023(99) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Request (code 1) ID 224 length 43
2024(99) Tue May 29 15:58:01 2018: Debug: eap: EAP session adding &reply:State = 0x9b58740f9cb86d8a
2025(99) Tue May 29 15:58:01 2018: Debug:     [eap] = handled
2026(99) Tue May 29 15:58:01 2018: Debug:   } # authenticate = handled
2027(99) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Challenge
2028(99) Tue May 29 15:58:01 2018: Debug: Post-Auth-Type sub-section not found.  Ignoring.
2029(99) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
2030(99) Tue May 29 15:58:01 2018: Debug: session-state: Saving cached attributes
2031(99) Tue May 29 15:58:01 2018: Debug:   Module-Failure-Message := "mschap: MS-CHAP2-Response is incorrect"
2032(99) Tue May 29 15:58:01 2018: Debug: Sent Access-Challenge Id 175 from 172.31.1.130:1812 to 172.31.1.167:1812 length 0
2033(99) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x01e0002b19001703010020878719f6c897f270b2407722d5743646d8751e27aadb3323879bec598641d391
2034(99) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
2035(99) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9cb86d8a362781b0ef5e3ccf
2036(99) Tue May 29 15:58:01 2018: Debug: Finished request
2037(100) Tue May 29 15:58:01 2018: Debug: Received Access-Request Id 176 from 172.31.1.167:1812 to 172.31.1.130:1812 length 387
2038(100) Tue May 29 15:58:01 2018: Debug:   Framed-MTU = 1480
2039(100) Tue May 29 15:58:01 2018: Debug:   NAS-IP-Address = 172.31.1.167
2040(100) Tue May 29 15:58:01 2018: Debug:   NAS-Identifier = "HP-2530-24"
2041(100) Tue May 29 15:58:01 2018: Debug:   User-Name = "alex"
2042(100) Tue May 29 15:58:01 2018: Debug:   Service-Type = Framed-User
2043(100) Tue May 29 15:58:01 2018: Debug:   Framed-Protocol = PPP
2044(100) Tue May 29 15:58:01 2018: Debug:   NAS-Port = 9
2045(100) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Type = Ethernet
2046(100) Tue May 29 15:58:01 2018: Debug:   NAS-Port-Id = "9"
2047(100) Tue May 29 15:58:01 2018: Debug:   Called-Station-Id = "9c-dc-71-31-2a-20"
2048(100) Tue May 29 15:58:01 2018: Debug:   Calling-Station-Id = "78-24-af-07-fc-cf"
2049(100) Tue May 29 15:58:01 2018: Debug:   Connect-Info = "CONNECT Ethernet 100Mbps Full duplex"
2050(100) Tue May 29 15:58:01 2018: Debug:   Tunnel-Type:0 = VLAN
2051(100) Tue May 29 15:58:01 2018: Debug:   Tunnel-Medium-Type:0 = IEEE-802
2052(100) Tue May 29 15:58:01 2018: Debug:   Tunnel-Private-Group-Id:0 = "22"
2053(100) Tue May 29 15:58:01 2018: Debug:   State = 0x9b58740f9cb86d8a362781b0ef5e3ccf
2054(100) Tue May 29 15:58:01 2018: Debug:   EAP-Message = 0x02e0002b190017030100200cae39aed112ad77e71cbc1e0bf6f87c18c493c6329ffa44f27b8e0ba888b5dd
2055(100) Tue May 29 15:58:01 2018: Debug:   Message-Authenticator = 0x2e3d2f77cee4fd0fd64963944580070c
2056(100) Tue May 29 15:58:01 2018: Debug:   MS-RAS-Vendor = 11
2057(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b28
2058(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b2e
2059(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b30
2060(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b3d
2061(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x011a0000000b18
2062(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0138
2063(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x013a
2064(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0140
2065(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0141
2066(100) Tue May 29 15:58:01 2018: Debug:   HP-Capability-Advert = 0x0151
2067(100) Tue May 29 15:58:01 2018: Debug: Restoring &session-state
2068(100) Tue May 29 15:58:01 2018: Debug:   &session-state:Module-Failure-Message := "mschap: MS-CHAP2-Response is incorrect"
2069(100) Tue May 29 15:58:01 2018: Debug: # Executing section authorize from file /usr/local/pf/raddb/sites-enabled/packetfence
2070(100) Tue May 29 15:58:01 2018: Debug:   authorize {
2071(100) Tue May 29 15:58:01 2018: Debug:     update {
2072(100) Tue May 29 15:58:01 2018: Debug:       EXPAND %{Packet-Src-IP-Address}
2073(100) Tue May 29 15:58:01 2018: Debug:          --> 172.31.1.167
2074(100) Tue May 29 15:58:01 2018: Debug:       EXPAND %l
2075(100) Tue May 29 15:58:01 2018: Debug:          --> 1527602281
2076(100) Tue May 29 15:58:01 2018: Debug:     } # update = noop
2077(100) Tue May 29 15:58:01 2018: Debug:     policy packetfence-set-tenant-id {
2078(100) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0") {
2079(100) Tue May 29 15:58:01 2018: Debug:       EXPAND %{%{control:PacketFence-Tenant-Id}:-0}
2080(100) Tue May 29 15:58:01 2018: Debug:          --> 0
2081(100) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  -> TRUE
2082(100) Tue May 29 15:58:01 2018: Debug:       if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  {
2083(100) Tue May 29 15:58:01 2018: Debug:         update control {
2084(100) Tue May 29 15:58:01 2018: Debug:           EXPAND %{User-Name}
2085(100) Tue May 29 15:58:01 2018: Debug:              --> alex
2086(100) Tue May 29 15:58:01 2018: Debug:           SQL-User-Name set to 'alex'
2087(100) Tue May 29 15:58:01 2018: Debug:           Executing select query:  SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '172.31.1.167'), 0)
2088(100) Tue May 29 15:58:01 2018: Debug:           EXPAND %{sql: SELECT IFNULL((SELECT tenant_id FROM radius_nas WHERE nasname = '%{Packet-Src-IP-Address}'), 0)}
2089(100) Tue May 29 15:58:01 2018: Debug:              --> 1
2090(100) Tue May 29 15:58:01 2018: Debug:         } # update control = noop
2091(100) Tue May 29 15:58:01 2018: Debug:       } # if ( "%{%{control:PacketFence-Tenant-Id}:-0}" == "0")  = noop
2092(100) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 ) {
2093(100) Tue May 29 15:58:01 2018: Debug:       if ( &control:PacketFence-Tenant-Id == 0 )  -> FALSE
2094(100) Tue May 29 15:58:01 2018: Debug:     } # policy packetfence-set-tenant-id = noop
2095(100) Tue May 29 15:58:01 2018: Debug:     policy rewrite_calling_station_id {
2096(100) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i)) {
2097(100) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  -> TRUE
2098(100) Tue May 29 15:58:01 2018: Debug:       if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  {
2099(100) Tue May 29 15:58:01 2018: Debug:         update request {
2100(100) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
2101(100) Tue May 29 15:58:01 2018: Debug:              --> 78:24:af:07:fc:cf
2102(100) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
2103(100) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
2104(100) Tue May 29 15:58:01 2018: Debug:       } # if (&Calling-Station-Id && (&Calling-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})$/i))  = updated
2105(100) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
2106(100) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_calling_station_id = updated
2107(100) Tue May 29 15:58:01 2018: Debug:     policy rewrite_called_station_id {
2108(100) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i)) {
2109(100) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  -> TRUE
2110(100) Tue May 29 15:58:01 2018: Debug:       if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  {
2111(100) Tue May 29 15:58:01 2018: Debug:         update request {
2112(100) Tue May 29 15:58:01 2018: Debug:           EXPAND %{tolower:%{1}:%{2}:%{3}:%{4}:%{5}:%{6}}
2113(100) Tue May 29 15:58:01 2018: Debug:              --> 9c:dc:71:31:2a:20
2114(100) Tue May 29 15:58:01 2018: Debug:         } # update request = noop
2115(100) Tue May 29 15:58:01 2018: Debug:         if ("%{8}") {
2116(100) Tue May 29 15:58:01 2018: Debug:         EXPAND %{8}
2117(100) Tue May 29 15:58:01 2018: Debug:            --> 
2118(100) Tue May 29 15:58:01 2018: Debug:         if ("%{8}")  -> FALSE
2119(100) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i) {
2120(100) Tue May 29 15:58:01 2018: Debug:         elsif ( (Colubris-AVPair) && "%{Colubris-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
2121(100) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name) {
2122(100) Tue May 29 15:58:01 2018: Debug:         elsif (Aruba-Essid-Name)  -> FALSE
2123(100) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i) {
2124(100) Tue May 29 15:58:01 2018: Debug:         elsif ( (Cisco-AVPair)  && "%{Cisco-AVPair}" =~ /^ssid=(.*)$/i)  -> FALSE
2125(100) Tue May 29 15:58:01 2018: Debug:         [updated] = updated
2126(100) Tue May 29 15:58:01 2018: Debug:       } # if ((&Called-Station-Id) && (&Called-Station-Id =~ /^([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})[^0-9a-f]?([0-9a-f]{2})(:(.+))?$/i))  = updated
2127(100) Tue May 29 15:58:01 2018: Debug:       ... skipping else: Preceding "if" was taken
2128(100) Tue May 29 15:58:01 2018: Debug:     } # policy rewrite_called_station_id = updated
2129(100) Tue May 29 15:58:01 2018: Debug:     policy filter_username {
2130(100) Tue May 29 15:58:01 2018: Debug:       if (&User-Name) {
2131(100) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  -> TRUE
2132(100) Tue May 29 15:58:01 2018: Debug:       if (&User-Name)  {
2133(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /) {
2134(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ / /)  -> FALSE
2135(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ ) {
2136(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@[^@]*@/ )  -> FALSE
2137(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ ) {
2138(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.\./ )  -> FALSE
2139(100) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))  {
2140(100) Tue May 29 15:58:01 2018: Debug:         if ((&User-Name =~ /@/) && (&User-Name !~ /@(.+)\.(.+)$/))   -> FALSE
2141(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)  {
2142(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /\.$/)   -> FALSE
2143(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)  {
2144(100) Tue May 29 15:58:01 2018: Debug:         if (&User-Name =~ /@\./)   -> FALSE
2145(100) Tue May 29 15:58:01 2018: Debug:       } # if (&User-Name)  = updated
2146(100) Tue May 29 15:58:01 2018: Debug:     } # policy filter_username = updated
2147(100) Tue May 29 15:58:01 2018: Debug:     policy filter_password {
2148(100) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}")) {
2149(100) Tue May 29 15:58:01 2018: Debug:       if (&User-Password && 	   (&User-Password != "%{string:User-Password}"))  -> FALSE
2150(100) Tue May 29 15:58:01 2018: Debug:     } # policy filter_password = updated
2151(100) Tue May 29 15:58:01 2018: Debug:     [preprocess] = ok
2152(100) Tue May 29 15:58:01 2018: Debug: suffix: Checking for suffix after "@"
2153(100) Tue May 29 15:58:01 2018: Debug: suffix: No '@' in User-Name = "alex", skipping NULL due to config.
2154(100) Tue May 29 15:58:01 2018: Debug:     [suffix] = noop
2155(100) Tue May 29 15:58:01 2018: Debug: ntdomain: Checking for prefix before "\"
2156(100) Tue May 29 15:58:01 2018: Debug: ntdomain: No '\' in User-Name = "alex", looking up realm NULL
2157(100) Tue May 29 15:58:01 2018: Debug: ntdomain: Found realm "null"
2158(100) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Stripped-User-Name = "alex"
2159(100) Tue May 29 15:58:01 2018: Debug: ntdomain: Adding Realm = "null"
2160(100) Tue May 29 15:58:01 2018: Debug: ntdomain: Authentication realm is LOCAL
2161(100) Tue May 29 15:58:01 2018: Debug:     [ntdomain] = ok
2162(100) Tue May 29 15:58:01 2018: Debug: eap: Peer sent EAP Response (code 2) ID 224 length 43
2163(100) Tue May 29 15:58:01 2018: Debug: eap: Continuing tunnel setup
2164(100) Tue May 29 15:58:01 2018: Debug:     [eap] = ok
2165(100) Tue May 29 15:58:01 2018: Debug:   } # authorize = ok
2166(100) Tue May 29 15:58:01 2018: Debug: Found Auth-Type = eap
2167(100) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
2168(100) Tue May 29 15:58:01 2018: Debug:   authenticate {
2169(100) Tue May 29 15:58:01 2018: Debug: eap: Expiring EAP session with state 0x9b58740f9cb86d8a
2170(100) Tue May 29 15:58:01 2018: Debug: eap: Finished EAP session with state 0x9b58740f9cb86d8a
2171(100) Tue May 29 15:58:01 2018: Debug: eap: Previous EAP request found for state 0x9b58740f9cb86d8a, released from the list
2172(100) Tue May 29 15:58:01 2018: Debug: eap: Peer sent packet with method EAP PEAP (25)
2173(100) Tue May 29 15:58:01 2018: Debug: eap: Calling submodule eap_peap to process data
2174(100) Tue May 29 15:58:01 2018: Debug: eap_peap: Continuing EAP-TLS
2175(100) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls verify] = ok
2176(100) Tue May 29 15:58:01 2018: Debug: eap_peap: Done initial handshake
2177(100) Tue May 29 15:58:01 2018: Debug: eap_peap: [eaptls process] = ok
2178(100) Tue May 29 15:58:01 2018: Debug: eap_peap: Session established.  Decoding tunneled attributes
2179(100) Tue May 29 15:58:01 2018: Debug: eap_peap: PEAP state send tlv failure
2180(100) Tue May 29 15:58:01 2018: Debug: eap_peap: Received EAP-TLV response
2181(100) Tue May 29 15:58:01 2018: ERROR: eap_peap:   The users session was previously rejected: returning reject (again.)
2182(100) Tue May 29 15:58:01 2018: ERROR: eap: Failed continuing EAP PEAP (25) session.  EAP sub-module failed
2183(100) Tue May 29 15:58:01 2018: Debug: eap: Sending EAP Failure (code 4) ID 224 length 4
2184(100) Tue May 29 15:58:01 2018: Debug: eap: Failed in EAP select
2185(100) Tue May 29 15:58:01 2018: Debug:     [eap] = invalid
2186(100) Tue May 29 15:58:01 2018: Debug:   } # authenticate = invalid
2187(100) Tue May 29 15:58:01 2018: Debug: Failed to authenticate the user
2188(100) Tue May 29 15:58:01 2018: Debug: Using Post-Auth-Type Reject
2189(100) Tue May 29 15:58:01 2018: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence
2190(100) Tue May 29 15:58:01 2018: Debug:   Post-Auth-Type REJECT {
2191(100) Tue May 29 15:58:01 2018: Debug:     update {
2192(100) Tue May 29 15:58:01 2018: Debug:     } # update = noop
2193(100) Tue May 29 15:58:01 2018: Debug:     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) ) {
2194(100) Tue May 29 15:58:01 2018: Debug:     if (! EAP-Type || (EAP-Type != TTLS  && EAP-Type != PEAP) )  -> FALSE
2195(100) Tue May 29 15:58:01 2018: Debug: attr_filter.access_reject: EXPAND %{User-Name}
2196(100) Tue May 29 15:58:01 2018: Debug: attr_filter.access_reject:    --> alex
2197(100) Tue May 29 15:58:01 2018: Debug: attr_filter.access_reject: Matched entry DEFAULT at line 11
2198(100) Tue May 29 15:58:01 2018: Debug:     [attr_filter.access_reject] = updated
2199(100) Tue May 29 15:58:01 2018: Debug: attr_filter.packetfence_post_auth: EXPAND %{User-Name}
2200(100) Tue May 29 15:58:01 2018: Debug: attr_filter.packetfence_post_auth:    --> alex
2201(100) Tue May 29 15:58:01 2018: Debug: attr_filter.packetfence_post_auth: Matched entry DEFAULT at line 10
2202(100) Tue May 29 15:58:01 2018: Debug:     [attr_filter.packetfence_post_auth] = updated
2203(100) Tue May 29 15:58:01 2018: Debug:     [eap] = noop
2204(100) Tue May 29 15:58:01 2018: Debug:     policy remove_reply_message_if_eap {
2205(100) Tue May 29 15:58:01 2018: Debug:       if (&reply:EAP-Message && &reply:Reply-Message) {
2206(100) Tue May 29 15:58:01 2018: Debug:       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
2207(100) Tue May 29 15:58:01 2018: Debug:       else {
2208(100) Tue May 29 15:58:01 2018: Debug:         [noop] = noop
2209(100) Tue May 29 15:58:01 2018: Debug:       } # else = noop
2210(100) Tue May 29 15:58:01 2018: Debug:     } # policy remove_reply_message_if_eap = noop
2211(100) Tue May 29 15:58:01 2018: Debug: linelog: EXPAND messages.%{%{reply:Packet-Type}:-default}
2212(100) Tue May 29 15:58:01 2018: Debug: linelog:    --> messages.Access-Reject
2213(100) Tue May 29 15:58:01 2018: Debug: linelog: EXPAND [mac:%{Calling-Station-Id}] Rejected user: %{User-Name}
2214(100) Tue May 29 15:58:01 2018: Debug: linelog:    --> [mac:78:24:af:07:fc:cf] Rejected user: alex
2215(100) Tue May 29 15:58:01 2018: Debug:     [linelog] = ok
2216(100) Tue May 29 15:58:01 2018: Debug:   } # Post-Auth-Type REJECT = updated
2217(100) Tue May 29 15:58:01 2018: Debug: Delaying response for 1.000000 seconds
2218(100) Tue May 29 15:58:02 2018: Debug: Sending delayed response
2219(100) Tue May 29 15:58:02 2018: Debug: Sent Access-Reject Id 176 from 172.31.1.130:1812 to 172.31.1.167:1812 length 44
2220(100) Tue May 29 15:58:02 2018: Debug:   EAP-Message = 0x04e00004
2221(100) Tue May 29 15:58:02 2018: Debug:   Message-Authenticator = 0x00000000000000000000000000000000
2222(92) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 168 with timestamp +3603
2223(93) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 169 with timestamp +3603
2224(94) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 170 with timestamp +3603
2225(95) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 171 with timestamp +3603
2226(96) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 172 with timestamp +3603
2227(97) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 173 with timestamp +3603
2228(98) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 174 with timestamp +3603
2229(99) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 175 with timestamp +3603
2230(100) Tue May 29 15:58:06 2018: Debug: Cleaning up request packet ID 176 with timestamp +3603