different user names for the same session
Dajul Goa
goa
Thu Nov 13 09:05:12 PST 2008
Hello, I've setup hostapd 0.5.10-1(with bridge) + freeradius 2.1.1(with mysql). Everything works fine except one thing: when windows(vista sp1) users turn their machine off, the user name of the session is changed from user ("goa" in my debug log) into his machine name ("host/filteria"). If users disconnect manually from AP, it works fine.
Ubuntu machines seems to work perfectly even they turn their machine off.
I don't know why this is happening.
Thanks.
----------------
Example where radacct table is messing up:
----------------
Client IP Address Download Login Time Logout Time NAS IP Address NAS Port Session Time Upload User Name
- 7.16 MBs 2008-11-13 05:04:05 - 127.0.0.1 0 10 minutes 0.84 MBs goa
- 9.93 MBs 2008-11-13 05:04:05 2008-11-13 05:15:09 127.0.0.1 0 11 minutes, 4 seconds 1.03 MBs host/filteria
------------------
hostapd -ddt /etc/hostapd/hostapd.conf: (stripped because 25k limit)
------------------
Configuration file: hostapd.conf
1226549015.334624: ctrl_interface_group=0
Configure bridge br0 for EAPOL traffic.
1226549015.338826: madwifi_set_iface_flags: dev_up=0
madwifi_set_privacy: enabled=0
BSS count 1, BSSID mask ff:ff:ff:ff:ff:ff (0 bits)
1226549015.338887: SIOCGIWRANGE: WE(compiled)=22 WE(source)=13 enc_capa=0xf
1226549015.338912: wlan0: IEEE 802.11 Fetching hardware channel/rate support not supported.
1226549015.338922: Flushing old station entries
madwifi_sta_deauth: addr=ff:ff:ff:ff:ff:ff reason_code=3
1226549015.339370: madwifi_sta_deauth: Failed to deauth STA (addr ff:ff:ff:ff:ff:ff reason 3)
Could not connect to kernel driver.
1226549015.339386: Deauthenticate all stations
madwifi_set_privacy: enabled=0
Mode: IEEE 802.11g Channel: 8 Frequency: 0 MHz
madwifi_del_key: addr=00:00:00:00:00:00 key_idx=0
madwifi_del_key: addr=00:00:00:00:00:00 key_idx=1
madwifi_del_key: addr=00:00:00:00:00:00 key_idx=2
madwifi_del_key: addr=00:00:00:00:00:00 key_idx=3
Using interface wlan0 with hwaddr 00:13:f7:27:52:ee and ssid 'Debian Lenny'
1226549015.354465: wlan0: RADIUS Authentication server 127.0.0.1:1812
1226549015.369292: wlan0: RADIUS Accounting server 127.0.0.1:1813
madwifi_set_ieee8021x: enabled=1
madwifi_configure_wpa: group key cipher=1
madwifi_configure_wpa: pairwise key ciphers=0x2
madwifi_configure_wpa: key management algorithms=0x1
madwifi_configure_wpa: rsn capabilities=0x0
madwifi_configure_wpa: enable WPA=0x1
1226549015.372338: WPA: group state machine entering state GTK_INIT (VLAN-ID 0)
1226549015.372354: GMK - hexdump(len=32): [REMOVED]
1226549015.372357: GTK - hexdump(len=32): [REMOVED]
1226549015.372361: WPA: group state machine entering state SETKEYSDONE (VLAN-ID 0)
madwifi_set_key: alg=TKIP addr=00:00:00:00:00:00 key_idx=1
madwifi_set_privacy: enabled=1
1226549015.372459: wlan0: RADIUS Sending RADIUS message to accounting server
1226549015.372572: wlan0: RADIUS Next RADIUS client retransmit in 3 seconds
1226549015.372988: madwifi_set_iface_flags: dev_up=1
1226549015.385687: wlan0: Setup of interface done.
Wireless event: cmd=0x8b1a len=21
1226549018.372741: wlan0: STA 00:00:00:00:00:00 RADIUS: Resending RADIUS message (id=0)
1226549018.375062: wlan0: RADIUS Next RADIUS client retransmit in 6 seconds
1226549018.375102: wlan0: RADIUS Received 20 bytes from RADIUS server
1226549018.375111: wlan0: RADIUS Received RADIUS message
1226549018.375119: wlan0: STA 00:00:00:00:00:00 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Wireless event: cmd=0x8c03 len=20
1226549044.845492: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.11: associated
New STA
1226549044.845857: wlan0: STA 00:60:b3:fe:3e:57 WPA: event 1 notification
madwifi_del_key: addr=00:60:b3:fe:3e:57 key_idx=0
1226549044.845886: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: start authentication
1226549044.845895: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state INITIALIZE
1226549044.845901: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state INITIALIZE
1226549044.845906: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.845910: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_KEY_TX entering state NO_KEY_TRANSMIT
1226549044.845913: IEEE 802.1X: 00:60:b3:fe:3e:57 KEY_RX entering state NO_KEY_RECEIVE
1226549044.845917: IEEE 802.1X: 00:60:b3:fe:3e:57 CTRL_DIR entering state IN_OR_BOTH
1226549044.845921: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state INITIALIZE
1226549044.845924: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state IDLE
1226549044.845927: IEEE 802.1X: 00:60:b3:fe:3e:57 KEY_RX entering state NO_KEY_RECEIVE
1226549044.845931: IEEE 802.1X: 00:60:b3:fe:3e:57 CTRL_DIR entering state FORCE_BOTH
1226549044.845934: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state INITIALIZE
1226549044.845937: IEEE 802.1X: 00:60:b3:fe:3e:57 KEY_RX entering state NO_KEY_RECEIVE
1226549044.845947: wlan0: STA 00:60:b3:fe:3e:57 WPA: start authentication
1226549044.845950: WPA: 00:60:b3:fe:3e:57 WPA_PTK entering state INITIALIZE
madwifi_del_key: addr=00:60:b3:fe:3e:57 key_idx=0
1226549044.845962: WPA: 00:60:b3:fe:3e:57 WPA_PTK_GROUP entering state IDLE
1226549044.846043: WPA: 00:60:b3:fe:3e:57 WPA_PTK entering state AUTHENTICATION
1226549044.846048: WPA: 00:60:b3:fe:3e:57 WPA_PTK entering state AUTHENTICATION2
1226549044.846064: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state DISCONNECTED
madwifi_set_sta_authorized: addr=00:60:b3:fe:3e:57 authorized=0
1226549044.846082: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: unauthorizing port
1226549044.846085: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846089: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state RESTART
IEEE 802.1X: station 00:60:b3:fe:3e:57 - new auth session, clearing State
IEEE 802.1X: Generated EAP Request-Identity for 00:60:b3:fe:3e:57 (identifier 0, timeout 30)
1226549044.846099: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846103: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state CONNECTING
1226549044.846106: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846109: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state AUTHENTICATING
1226549044.846113: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state REQUEST
IEEE 802.1X: Sending EAP Packet to 00:60:b3:fe:3e:57 (identifier 0)
1226549044.846121: TX EAPOL - hexdump(len=23): 00 60 b3 fe 3e 57 00 13 f7 27 52 ee 88 8e 02 00 00 05 01 00 00 05 01
1226549044.846160: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846165: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846175: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846183: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846191: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.846198: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 5 bytes from 00:60:b3:fe:3e:57
IEEE 802.1X: version=1 type=1 length=0
ignoring 1 extra octets after IEEE 802.1X packet
1226549044.903299: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: received EAPOL-Start from STA
1226549044.903313: wlan0: STA 00:60:b3:fe:3e:57 WPA: event 5 notification
1226549044.903317: WPA: 00:60:b3:fe:3e:57 WPA_PTK entering state AUTHENTICATION2
1226549044.903337: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state ABORTING
1226549044.903342: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state INITIALIZE
1226549044.903350: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: aborting authentication
1226549044.903354: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.903359: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state RESTART
IEEE 802.1X: station 00:60:b3:fe:3e:57 - new auth session, clearing State
IEEE 802.1X: Generated EAP Request-Identity for 00:60:b3:fe:3e:57 (identifier 1, timeout 30)
1226549044.903372: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state IDLE
1226549044.903375: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.903378: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state CONNECTING
1226549044.903382: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.903385: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state AUTHENTICATING
1226549044.903389: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state REQUEST
IEEE 802.1X: Sending EAP Packet to 00:60:b3:fe:3e:57 (identifier 1)
1226549044.903398: TX EAPOL - hexdump(len=23): 00 60 b3 fe 3e 57 00 13 f7 27 52 ee 88 8e 02 00 00 05 01 01 00 05 01
1226549044.903450: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.903454: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 12 bytes from 00:60:b3:fe:3e:57
IEEE 802.1X: version=1 type=0 length=8
EAP: code=2 identifier=0 length=8 (response)
1226549044.952346: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: EAP Identifier of the Response-Identity does not match (was 0, expected 1) - ignored
1226549044.952364: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
IEEE 802.1X: 12 bytes from 00:60:b3:fe:3e:57
IEEE 802.1X: version=1 type=0 length=8
EAP: code=2 identifier=1 length=8 (response)
1226549044.956161: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: received EAP packet (code=2 id=1 len=8) from STA: EAP Response-Identity (1)
1226549044.956168: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: STA identity 'goa'
1226549044.956178: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state RESPONSE
Encapsulating EAP message into a RADIUS packet
1226549044.956231: wlan0: RADIUS Sending RADIUS message to authentication server
1226549044.956313: wlan0: RADIUS Next RADIUS client retransmit in 3 seconds
1226549044.956316: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.956321: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549044.988128: wlan0: RADIUS Received 64 bytes from RADIUS server
1226549044.988145: wlan0: RADIUS Received RADIUS message
1226549044.988154: wlan0: STA 00:60:b3:fe:3e:57 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.03 sec
RADIUS packet matching with station 00:60:b3:fe:3e:57
1226549044.988182: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: using EAP timeout of 30 seconds
1226549044.988192: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: decapsulated EAP packet (code=1 id=2 len=6) from RADIUS server: EAP-Request-TTLS (21)
1226549044.988209: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state REQUEST
IEEE 802.1X: Sending EAP Packet to 00:60:b3:fe:3e:57 (identifier 2)
1226549045.273632: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549045.273636: IEEE 802.1X: 00:60:b3:fe:3e:57 REAUTH_TIMER entering state INITIALIZE
1226549045.311748: wlan0: RADIUS Received 165 bytes from RADIUS server
1226549045.311766: wlan0: RADIUS Received RADIUS message
1226549045.311775: wlan0: STA 00:60:b3:fe:3e:57 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.03 sec
RADIUS packet matching with station 00:60:b3:fe:3e:57
1226549045.311808: MS-MPPE-Send-Key - hexdump(len=32): [REMOVED]
1226549045.311811: MS-MPPE-Recv-Key - hexdump(len=32): [REMOVED]
1226549045.311821: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: old identity 'goa' updated with User-Name from Access-Accept 'goa'
1226549045.311829: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: decapsulated EAP packet (code=3 id=11 len=4) from RADIUS server: EAP Success
1226549045.311845: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state SUCCESS
IEEE 802.1X: Sending EAP Packet to 00:60:b3:fe:3e:57 (identifier 11)
1226549645.335558: wlan0: RADIUS Received 20 bytes from RADIUS server
1226549645.335564: wlan0: RADIUS Received RADIUS message
1226549645.335573: wlan0: STA 00:60:b3:fe:3e:57 RADIUS: Received RADIUS packet matched with a pending request, round trip time 0.00 sec
Wireless event: cmd=0x8c02 len=77
Custom wireless event: 'MLME-REPLAYFAILURE.indication(keyid=5 unicast addr=00:13:f7:27:52:ee)'
IEEE 802.1X: 5 bytes from 00:60:b3:fe:3e:57
IEEE 802.1X: version=1 type=1 length=0
ignoring 1 extra octets after IEEE 802.1X packet
1226549709.251477: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: received EAPOL-Start from STA
1226549709.251491: wlan0: STA 00:60:b3:fe:3e:57 WPA: event 5 notification
1226549709.251495: WPA: 00:60:b3:fe:3e:57 WPA_PTK entering state AUTHENTICATION2
1226549709.251514: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state RESTART
IEEE 802.1X: station 00:60:b3:fe:3e:57 - new auth session, clearing State
IEEE 802.1X: Generated EAP Request-Identity for 00:60:b3:fe:3e:57 (identifier 12, timeout 30)
1226549709.251532: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state CONNECTING
1226549709.251647: IEEE 802.1X: 00:60:b3:fe:3e:57 AUTH_PAE entering state AUTHENTICATING
1226549709.251652: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state REQUEST
IEEE 802.1X: Sending EAP Packet to 00:60:b3:fe:3e:57 (identifier 12)
1226549709.251661: TX EAPOL - hexdump(len=23): 00 60 b3 fe 3e 57 00 13 f7 27 52 ee 88 8e 02 00 00 05 01 0c 00 05 01
IEEE 802.1X: 22 bytes from 00:60:b3:fe:3e:57
IEEE 802.1X: version=1 type=0 length=18
EAP: code=2 identifier=12 length=18 (response)
1226549709.255650: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: received EAP packet (code=2 id=12 len=18) from STA: EAP Response-Identity (1)
1226549709.255657: wlan0: STA 00:60:b3:fe:3e:57 IEEE 802.1X: STA identity 'host/filteria'
1226549709.255666: IEEE 802.1X: 00:60:b3:fe:3e:57 BE_AUTH entering state RESPONSE
Encapsulating EAP message into a RADIUS packet
1226549709.255707: wlan0: RADIUS Sending RADIUS message to authentication server
1226549709.255768: wlan0: RADIUS Next RADIUS client retransmit in 3 seconds
--------------
hostapd.conf:
--------------
interface=wlan0
bridge=br0
driver=madwifi
logger_syslog=-1
logger_syslog_level=2
logger_stdout=-1
logger_stdout_level=2
debug=0
dump_file=/tmp/hostapd.dump
ctrl_interface=/var/run/hostapd
ctrl_interface_group=0
ssid=Debian Lenny
hw_mode=g
channel=8
beacon_int=100
dtim_period=2
max_num_sta=255
rts_threshold=2347
fragm_threshold=2346
macaddr_acl=0
auth_algs=3
ignore_broadcast_ssid=0
wme_enabled=0
wme_ac_bk_cwmin=4
wme_ac_bk_cwmax=10
wme_ac_bk_aifs=7
wme_ac_bk_txop_limit=0
wme_ac_bk_acm=0
wme_ac_be_aifs=3
wme_ac_be_cwmin=4
wme_ac_be_cwmax=10
wme_ac_be_txop_limit=0
wme_ac_be_acm=0
wme_ac_vi_aifs=2
wme_ac_vi_cwmin=3
wme_ac_vi_cwmax=4
wme_ac_vi_txop_limit=94
wme_ac_vi_acm=0
wme_ac_vo_aifs=2
wme_ac_vo_cwmin=2
wme_ac_vo_cwmax=3
wme_ac_vo_txop_limit=47
wme_ac_vo_acm=0
ieee8021x=1
eapol_key_index_workaround=0
eap_reauth_period=3600
eap_server=0
own_ip_addr=127.0.0.1
auth_server_addr=127.0.0.1
auth_server_port=1812
auth_server_shared_secret=secret
acct_server_addr=127.0.0.1
acct_server_port=1813
acct_server_shared_secret=secret
radius_acct_interim_interval=300
wpa=1
wpa_key_mgmt=WPA-EAP
wpa_pairwise=TKIP
wpa_group_rekey=600
wpa_strict_rekey=1
wpa_gmk_rekey=86400
More information about the Hostap
mailing list