Lowyat.NET: Latest topics by wcpon

[WTS] SAMSUNG Microwave Oven (MG23T5018CN) [SOLD]

wcpon — Thu, 04 Mar 2021 16:22:10 +0800

Item(s): SAMSUNG Microwave Oven (MG23T5018CN)

Package includes: Refer to this link https://www.samsung.com/my/microwave-ovens/...3t5018cn/#specs

Price: RM 500

Warranty: 1 Year

Dealing method: COD

Location: Cheras, Subang Jaya

Contact method/details: Anyone interest can leave message here

Item(s) conditions: NEW

Picture:

Reason for sale: Not Using It.

[WTS] Sharp 42" FUll HD LED TV

wcpon — Tue, 08 Dec 2020 13:27:51 +0800

Item(s): Sharp 42" Full HD LED TV (2TC42BD1X)

Package includes: New

Price: RM 750

Warranty: 2 Years

Dealing method: COD

Location: CHERAS, SUBANG JAYA

Contact method/details: Leave message here or PM
---

Item(s) conditions: New in Sealed Box

Picture:

Reason for sale: TV from UniFi Campaign

[WTS] iPhone 7 Plus Amazing H Tempered Glass

wcpon — Wed, 07 Dec 2016 14:34:54 +0800

Item(s): iPhone 7 Plus Amazing H Tempered Glass

Package includes: Tempered Glass & Film Paste Tool (lens wiping cloth+de-dusting film+lens moist wipes+replacement adhesive tape+graphic instruction)

Price: RM 22

Warranty: None

Dealing method: COD

Location: Cheras, KL, Cyberjaya, PJ

Contact method/details: WhatsApp, SMS

Item(s) conditions: New

Picture:

Reason for sale: Want to get another type of Tempered Glass

[WTS] Microsoft Designer Bluetooth Mouse

wcpon — Wed, 26 Oct 2016 15:46:58 +0800

Item(s): Microsoft Designer Bluetooth Mouse

Package includes: Microsoft Designer Bluetooth Mouse + 2 x AAA Batteries

Price: RM 85 (Nego)

Warranty: 1 Year Warranty

Dealing method: COD

Location: KL, Cheras, PJ

Contact method/details: WhatsApp (PM for My Contact Number)
---

Item(s) conditions: Open Box, New Unit. Used not more than 1 week.

Picture:

Reason for sale: Not suitable for my hand to use

[Review] Sony HT-CT370 & Philips HTL3140B/12

wcpon — Tue, 25 Nov 2014 21:55:53 +0800

Any ideas which soundbar should I go for? If my budget below 1.5k..
any suggestion?

Tested Sony HT-CT370 & Philips HTL3140B/12, any reviews on this two soundbars?

FreeRadius + LDAP+ EAP,Client Authentication Fail

wcpon — Wed, 11 Dec 2013 15:17:29 +0800

Hi Guys,

I'm trying to implement the connection from Cisco WLC5508 to FreeRadius server using EAP..
The FreeRadius Server connected to LDAP for authenticate the users.

But I got some issue between the FreeRadius and the LDAP in client authentication progress..
Please find the log below,

» Click to show Spoiler - click again to hide... «

CODE

Ready to process requests.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=37, length=266
User-Name = "host/pc.abc.com.my"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0201001d01686f73742f7763706f6e70632e696773622e636f6d2e6d79
Message-Authenticator = 0xcffbc4e362861e4507b8c2f235a5de3e
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for host/pc.abc.com.my
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> host/pc.abc.com.my
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=host/pc.abc.com.my)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] attempting LDAP reconnection
[ldap] (re)connect to MYFNDS001.fng.fnf.local:636, authentication 0
[ldap] setting TLS mode to 1
[ldap] bind as uid=evening,ou=People,dc=fng,dc=fnf,dc=local/P@ssw0rd1 to MYFNDS001.fng.fnf.local:636
[ldap] waiting for bind result ...
[ldap] Bind was successful
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=host/pc.abc.com.my)
[ldap] object not found
[ldap] search failed
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns notfound
[eap] EAP packet type response id 1 length 29
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type tls
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 37 to 10.201.65.241 port 32769
EAP-Message = 0x010200061920
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x06ac06ac06ae1f6b26c7a67071073432
Finished request 0.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=38, length=364
User-Name = "host/pc.abc.com.my"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0202006d198000000063160301005e0100005a030152a800ab59c480c9b83619813aaf21155de3cd8ed16d1c46eea4571fd3624c5a000018002f00350005000ac013c014c009c00a003200380013000401000019ff01000100000a0006000400170018000b0002010000230000
State = 0x06ac06ac06ae1f6b26c7a67071073432
Message-Authenticator = 0x00c6166c28ad3c380003b8e312403944
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for host/pc.abc.com.my
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> host/pc.abc.com.my
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=host/pc.abc.com.my)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=host/pc.abc.com.my)
[ldap] object not found
[ldap] search failed
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns notfound
[eap] EAP packet type response id 2 length 109
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
TLS Length 99
[peap] Length Included
[peap] eaptls_verify returned 11
[peap] (other): before/accept initialization
[peap] TLS_accept: before/accept initialization
[peap] <<< TLS 1.0 Handshake [length 005e], ClientHello
[peap] TLS_accept: SSLv3 read client hello A
[peap] >>> TLS 1.0 Handshake [length 0031], ServerHello
[peap] TLS_accept: SSLv3 write server hello A
[peap] >>> TLS 1.0 Handshake [length 085e], Certificate
[peap] TLS_accept: SSLv3 write certificate A
[peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
[peap] TLS_accept: SSLv3 write server done A
[peap] TLS_accept: SSLv3 flush data
[peap] TLS_accept: Need to read more data: SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 38 to 10.201.65.241 port 32769
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 0xa90004ab308204a73082038f
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x06ac06ac07af1f6b26c7a67071073432
Finished request 1.
Going to the next request
Waking up in 4.8 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=39, length=261
User-Name = "host/pc.abc.com.my"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x020300061900
State = 0x06ac06ac07af1f6b26c7a67071073432
Message-Authenticator = 0x2a5de98e38fb129b4d9606ca8b7239ff
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for host/pc.abc.com.my
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> host/pc.abc.com.my
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=host/pc.abc.com.my)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=host/pc.abc.com.my)
[ldap] object not found
[ldap] search failed
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns notfound
[eap] EAP packet type response id 3 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake fragment handler
[peap] eaptls_verify returned 1
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 39 to 10.201.65.241 port 32769
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 0x06900bb44ac54c04
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x06ac06ac04a81f6b26c7a67071073432
Finished request 2.
Ready to process requests.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=42, length=232
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0201000c016576656e696e67
Message-Authenticator = 0x9863db38da6bc7d1d8c85d91483a7fd0
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 1 length 12
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type tls
[tls] Initiate
[tls] Start returned 1
++[eap] returns handled
Sending Access-Challenge of id 42 to 10.201.65.241 port 32769
EAP-Message = 0x010200061920
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc687cc7e54f86227a46e7e9850a
Finished request 5.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=43, length=347
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0202006d198000000063160301005e0100005a030152a800b88f1e012f2101a50fc0b5ff1c7a8e249114a34e0e9374b2450072b43f000018002f00350005000ac013c014c009c00a003200380013000401000019ff01000100000a0006000400170018000b0002010000230000
State = 0x7cc5fc687cc7e54f86227a46e7e9850a
Message-Authenticator = 0xd17323c51c076207e750886cf53b9ded
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 2 length 109
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
TLS Length 99
[peap] Length Included
[peap] eaptls_verify returned 11
[peap] (other): before/accept initialization
[peap] TLS_accept: before/accept initialization
[peap] <<< TLS 1.0 Handshake [length 005e], ClientHello
[peap] TLS_accept: SSLv3 read client hello A
[peap] >>> TLS 1.0 Handshake [length 0031], ServerHello
[peap] TLS_accept: SSLv3 write server hello A
[peap] >>> TLS 1.0 Handshake [length 085e], Certificate
[peap] TLS_accept: SSLv3 write certificate A
[peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone
[peap] TLS_accept: SSLv3 write server done A
[peap] TLS_accept: SSLv3 flush data
[peap] TLS_accept: Need to read more data: SSLv3 read client certificate A
In SSL Handshake Phase
In SSL Accept mode
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 43 to 10.201.65.241 port 32769
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 0xa90004ab308204a73082038f
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc687dc6e54f86227a46e7e9850a
Finished request 6.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=44, length=244
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x020300061900
State = 0x7cc5fc687dc6e54f86227a46e7e9850a
Message-Authenticator = 0xa680df69324888bb0cb20a7c7a843fcd
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 3 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake fragment handler
[peap] eaptls_verify returned 1
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 44 to 10.201.65.241 port 32769
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 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
EAP-Message = 0x06900bb44ac54c04
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc687ec1e54f86227a46e7e9850a
Finished request 7.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=45, length=244
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x020400061900
State = 0x7cc5fc687ec1e54f86227a46e7e9850a
Message-Authenticator = 0x82818b32707987ab467291b7b73c6b9e
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 4 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake fragment handler
[peap] eaptls_verify returned 1
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 45 to 10.201.65.241 port 32769
EAP-Message = 0x010500bc1900420a258fdb7865dd1f83ca7afb664e404a03a03eadec8d65ace02f9fb857d45c5f55d02043750aa9702ac2c437716be8eb3c00f3c5655bd8c8c1279fb3b8676c5853943832a70bfef1a2642767cb9b8e5387b695d0b740aa114aaa2e9298d8c6c9a8f6e89bc1ed8c1ee9a8744dae3943eab2bd359e5b91c6a029490bcfca6eef365707693102a4ac64fe82ed772729b86b872f5737c43eb6591e768bc1bfb35e5c111b13247ae053792749293516030100040e000000
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc687fc0e54f86227a46e7e9850a
Finished request 8.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=46, length=576
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 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
EAP-Message = 0xbfab32a23af4cb5220e899a20c8a5a292db653b015c5230114030100010116030100302332b254668ede3ffa7f6db69417139df0fe58fcf3f722fd026039b7b72bb7fa1d548d8d04002c95ba89002e37f874e7
State = 0x7cc5fc687fc0e54f86227a46e7e9850a
Message-Authenticator = 0x1867a53fe023bbd637607571cad7870c
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 5 length 253
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
TLS Length 326
[peap] Length Included
[peap] eaptls_verify returned 11
[peap] <<< TLS 1.0 Handshake [length 0106], ClientKeyExchange
[peap] TLS_accept: SSLv3 read client key exchange A
[peap] <<< TLS 1.0 ChangeCipherSpec [length 0001]
[peap] <<< TLS 1.0 Handshake [length 0010], Finished
[peap] TLS_accept: SSLv3 read finished A
[peap] >>> TLS 1.0 ChangeCipherSpec [length 0001]
[peap] TLS_accept: SSLv3 write change cipher spec A
[peap] >>> TLS 1.0 Handshake [length 0010], Finished
[peap] TLS_accept: SSLv3 write finished A
[peap] TLS_accept: SSLv3 flush data
[peap] (other): SSL negotiation finished successfully
SSL Connection Established
[peap] eaptls_process returned 13
[peap] EAPTLS_HANDLED
++[eap] returns handled
Sending Access-Challenge of id 46 to 10.201.65.241 port 32769
EAP-Message = 0x01060041190014030100010116030100301268d387a0815ade3c66520417eae6d5a0da9d02a27d20169b00c1092b11d432becedd2c4c7d62f06b31299e3079adaa
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc6878c3e54f86227a46e7e9850a
Finished request 9.
Going to the next request
Waking up in 4.8 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=47, length=244
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x020600061900
State = 0x7cc5fc6878c3e54f86227a46e7e9850a
Message-Authenticator = 0x2202d5814ae1033e3baa4bcd11d3d5c8
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 6 length 6
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] Received TLS ACK
[peap] ACK handshake is finished
[peap] eaptls_verify returned 3
[peap] eaptls_process returned 3
[peap] EAPTLS_SUCCESS
[peap] Session established. Decoding tunneled attributes.
[peap] Peap state TUNNEL ESTABLISHED
++[eap] returns handled
Sending Access-Challenge of id 47 to 10.201.65.241 port 32769
EAP-Message = 0x0107002b190017030100200ca05278d4064298da7e7bfaddec83737b109d5f4b9002e10d665e9ccfbdd2fc
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc6879c2e54f86227a46e7e9850a
Finished request 10.
Going to the next request
Waking up in 0.8 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=48, length=281
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0207002b19001703010020ad5c9eff3434a3f5f20da7a64dee86c2e43387000d9cde18a8d96e0a3920c640
State = 0x7cc5fc6879c2e54f86227a46e7e9850a
Message-Authenticator = 0x21e351fc525ae5dad886032e884029dc
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 7 length 43
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established. Decoding tunneled attributes.
[peap] Peap state WAITING FOR INNER IDENTITY
[peap] Identity - evening
[peap] Got inner identity 'evening'
[peap] Setting default EAP type for tunneled EAP session.
[peap] Got tunneled request
EAP-Message = 0x0207000c016576656e696e67
server {
[peap] Setting User-Name to evening
Sending tunneled request
EAP-Message = 0x0207000c016576656e696e67
FreeRADIUS-Proxied-To = 127.0.0.1
User-Name = "evening"
server inner-tunnel {
# Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 7 length 12
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/inner-tunnel
+- entering group authenticate {...}
[eap] EAP Identity
[eap] processing type mschapv2
rlm_eap_mschapv2: Issuing Challenge
++[eap] returns handled
} # server inner-tunnel
[peap] Got tunneled reply code 11
EAP-Message = 0x010800211a0108001c100d5bf68572731fc7cb6bdda508104e216576656e696e67
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x45758234457d98b53738240f8fce8217
[peap] Got tunneled reply RADIUS code 11
EAP-Message = 0x010800211a0108001c100d5bf68572731fc7cb6bdda508104e216576656e696e67
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x45758234457d98b53738240f8fce8217
[peap] Got tunneled Access-Challenge
++[eap] returns handled
Sending Access-Challenge of id 48 to 10.201.65.241 port 32769
EAP-Message = 0x0108004b1900170301004091d71a94ba53c0a88f09ec4e29142accc40360201a6c9716acfea0c901112fb5a79c1fb78f18bc67c1865b379f2f8408527c1c53b92e19ef4662260e612b4d0d
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc687acde54f86227a46e7e9850a
Finished request 11.
Going to the next request
Waking up in 0.7 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=49, length=345
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0208006b190017030100604945d321fd8f9aa5d05152a8576ea370efc474cedb5eac91ccf61f250ea14e9f36ad6da448ddc11c0aa1ad0613555e5dfe5ab97adb371509efd9110e6771f0aaadcdfcad5789424f4e1052cfa77166b8841fcf6b349788d1d8f1ea438c03b08f
State = 0x7cc5fc687acde54f86227a46e7e9850a
Message-Authenticator = 0xcf780f573d2c56e2423dfaf6c9ce2ed8
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 8 length 107
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established. Decoding tunneled attributes.
[peap] Peap state phase2
[peap] EAP type mschapv2
[peap] Got tunneled request
EAP-Message = 0x020800421a0208003d314df78699d3e648b527f8429521c24a0200000000000000007a51b6bd414fe2971a237145d97b7d442f07a963813ead9e006576656e696e67
server {
[peap] Setting User-Name to evening
Sending tunneled request
EAP-Message = 0x020800421a0208003d314df78699d3e648b527f8429521c24a0200000000000000007a51b6bd414fe2971a237145d97b7d442f07a963813ead9e006576656e696e67
FreeRADIUS-Proxied-To = 127.0.0.1
User-Name = "evening"
State = 0x45758234457d98b53738240f8fce8217
server inner-tunnel {
# Executing section authorize from file /etc/raddb/sites-enabled/inner-tunnel
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 8 length 66
[eap] No EAP Start, assuming it's an on-going EAP conversation
++[eap] returns updated
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/inner-tunnel
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/mschapv2
[eap] processing type mschapv2
[mschapv2] WARNING: Unknown value specified for Auth-Type. Cannot perform requested action.
[mschapv2] # Executing group from file /etc/raddb/sites-enabled/inner-tunnel
[eap] Freeing handler
++[eap] returns reject
Failed to authenticate the user.
} # server inner-tunnel
[peap] Got tunneled reply code 3
EAP-Message = 0x04080004
Message-Authenticator = 0x00000000000000000000000000000000
[peap] Got tunneled reply RADIUS code 3
EAP-Message = 0x04080004
Message-Authenticator = 0x00000000000000000000000000000000
[peap] Tunneled authentication was rejected.
[peap] FAILURE
++[eap] returns handled
Sending Access-Challenge of id 49 to 10.201.65.241 port 32769
EAP-Message = 0x0109002b19001703010020e2241f6c451707a77d7de2c45bd5126292c2922e7a67d261c9e7dc72e152b0bb
Message-Authenticator = 0x00000000000000000000000000000000
State = 0x7cc5fc687bcce54f86227a46e7e9850a
Finished request 12.
Going to the next request
Waking up in 0.7 seconds.
rad_recv: Access-Request packet from host 10.201.65.241 port 32769, id=50, length=281
User-Name = "evening"
Calling-Station-Id = "00-23-12-11-6f-c5"
Called-Station-Id = "ec-c8-82-ab-03-10:FNTest"
NAS-Port = 1
Cisco-AVPair = "audit-session-id=0ac941f10001e8e452a801a6"
NAS-IP-Address = 10.201.65.241
NAS-Identifier = "F&N_COM_WLC5508_2"
Airespace-Wlan-Id = 3
Service-Type = Framed-User
Framed-MTU = 1300
NAS-Port-Type = Wireless-802.11
Tunnel-Type:0 = VLAN
Tunnel-Medium-Type:0 = IEEE-802
Tunnel-Private-Group-Id:0 = "10"
EAP-Message = 0x0209002b19001703010020ef0cf7ec33f7474ca43d8e773081d426960bf9cb47d27701208fa10eab86c9de
State = 0x7cc5fc687bcce54f86227a46e7e9850a
Message-Authenticator = 0xd2668f7395953403bac4ab0d59048ff6
# Executing section authorize from file /etc/raddb/sites-enabled/default
+- entering group authorize {...}
[ldap] performing user authorization for evening
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> evening
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=evening)
[ldap] expand: dc=fng,dc=fnf,dc=local -> dc=fng,dc=fnf,dc=local
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=fng,dc=fnf,dc=local, with filter (uid=evening)
[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?
[ldap] user evening authorized to use remote access
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns ok
[eap] EAP packet type response id 9 length 43
[eap] Continuing tunnel setup.
++[eap] returns ok
Found Auth-Type = EAP
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group authenticate {...}
[eap] Request found, released from the list
[eap] EAP/peap
[eap] processing type peap
[peap] processing EAP-TLS
[peap] eaptls_verify returned 7
[peap] Done initial handshake
[peap] eaptls_process returned 7
[peap] EAPTLS_OK
[peap] Session established. Decoding tunneled attributes.
[peap] Peap state send tlv failure
[peap] Received EAP-TLV response.
[peap] The users session was previously rejected: returning reject (again.)
[peap] *** This means you need to read the PREVIOUS messages in the debug output
[peap] *** to find out the reason why the user was rejected.
[peap] *** Look for "reject" or "fail". Those earlier messages will tell you.
[peap] *** what went wrong, and how to fix the problem.
[eap] Handler failed in EAP/peap
[eap] Failed in EAP select
++[eap] returns invalid
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/raddb/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject] expand: %{User-Name} -> evening
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 13 for 1 seconds
Going to the next request
Waking up in 0.7 seconds.
Cleaning up request 5 ID 42 with timestamp +20
Waking up in 0.1 seconds.
Sending delayed reject for request 13
Sending Access-Reject of id 50 to 10.201.65.241 port 32769
EAP-Message = 0x04090004
Message-Authenticator = 0x00000000000000000000000000000000
Waking up in 3.9 seconds.
Cleaning up request 10 ID 47 with timestamp +25

Ready to process requests.

If I'm trying to test in localhost and connect locally, it is working fine without any problems
If I'm trying to test with the Cisco WLC to FreeRadius + LDAP, its given me errors...
Anyone got any ideas??? Hope someone can assist me on this..

Thanks ~

[WTS] Cisco Cables, Cisco Router & Firewall

wcpon — Wed, 05 Jun 2013 10:35:14 +0800

Item(s): Cisco V.35 DTE Cable, Cisco 1600/1700 Series Router & Netscreen 5GT/5XT Firewall

Dealing method: COD

Location of Seller: Jaya One, PJ

Contact method/details: +6016 228 7336

Age of item: Used Before & Brand New

ORIGINAL CISCO cable: CAB-V35MT, V.35 DTE MALE to Smart Serial, (10 Feet)- Qty 8- RM 50 (Negotiable)

Cisco 1601 Router - RM 100 (Negotiable)

Cisco 1721 Router - RM 100 (Negotiable)

Netscreen 5GT - Qty 2 - RM 100 (Negotiable)

Netscreen 5XT - Qty 2 - RM 100 (Negotiable)

Having Trouble Send Email to Yahoo Mail

wcpon — Mon, 19 Dec 2011 18:15:56 +0800

Hi guys, need you guys advices regarding my issues here.
My email server (Qmail), having the trouble to send email to Yahoo Mail.
Every time I send the email to Yahoo Mail, I can get the error message from the email server.
Please find the error message below,

QUOTE

Hi. This is the qmail-send program at mail.xxx.com.my.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<hsceeus@yahoo.com>:
Sorry, I wasn't able to establish an SMTP connection. (#4.4.1)
I'm not going to try again; this message has been in the queue too long.

Previously send to Yahoo Mail do not have any problems..
Just get this trouble last week, I'm trying to solve it but also fail to do that...
Wish can get some expert advice to solve this issues..

Very appreciate for your guidance.

Thanks.

Upgrade OpenSSH 4.3 to OpenSSH 5.3 Problem

wcpon — Tue, 06 Dec 2011 18:12:06 +0800

Hi, I'm planning to upgrade the openssh 4.3 to openssh 5.3
But having the error below, any idea to upgrade the dependencies?

My machine is CentOS 5.7 64 bit,

CODE

rpm -Uvh openssh-*rpm
warning: openssh-5.3p1-20.el6.x86_64.rpm: Header V3 RSA/SHA256 signature: NOKEY, key ID c105b9de
error: Failed dependencies:
libc.so.6(GLIBC_2.8)(64bit) is needed by openssh-5.3p1-20.el6.x86_64
libcrypto.so.10()(64bit) is needed by openssh-5.3p1-20.el6.x86_64
rpmlib(FileDigests) <= 4.6.0-1 is needed by openssh-5.3p1-20.el6.x86_64
rpmlib(PayloadIsXz) <= 5.2-1 is needed by openssh-5.3p1-20.el6.x86_64
libc.so.6(GLIBC_2.11)(64bit) is needed by openssh-clients-5.3p1-20.el6.x86_64
libc.so.6(GLIBC_2.8)(64bit) is needed by openssh-clients-5.3p1-20.el6.x86_64
libcrypto.so.10()(64bit) is needed by openssh-clients-5.3p1-20.el6.x86_64
libedit.so.0()(64bit) is needed by openssh-clients-5.3p1-20.el6.x86_64
rpmlib(FileDigests) <= 4.6.0-1 is needed by openssh-clients-5.3p1-20.el6.x86_64
rpmlib(PayloadIsXz) <= 5.2-1 is needed by openssh-clients-5.3p1-20.el6.x86_64
libaudit.so.1()(64bit) is needed by openssh-server-5.3p1-20.el6.x86_64
libc.so.6(GLIBC_2.8)(64bit) is needed by openssh-server-5.3p1-20.el6.x86_64
libcrypto.so.10()(64bit) is needed by openssh-server-5.3p1-20.el6.x86_64
pam >= 1.0.1-3 is needed by openssh-server-5.3p1-20.el6.x86_64
rpmlib(FileDigests) <= 4.6.0-1 is needed by openssh-server-5.3p1-20.el6.x86_64
rpmlib(PayloadIsXz) <= 5.2-1 is needed by openssh-server-5.3p1-20.el6.x86_64

Wish to get some expert advice.

How to Jail the Home Directory via SFTP Login

wcpon — Tue, 08 Nov 2011 19:18:06 +0800

Hi, I have a question here...

Anyone know how to jail the home directory via SFTP Login?
If let say FTP login, I can jail the home directory by using the vsftpd.conf and enable the "chroot_local_user=YES"
But how about SFTP?

Blackberry Bold 9780 Screen Cracked

wcpon — Wed, 02 Nov 2011 23:51:30 +0800

Hi, Just fell the Blackberry on the floor today... and inside the LCD screen is having some lines inside the liquid..
Not sure this condition will getting serious later on or not...

Anyone know if I want to repair Blackberry Bold 9780 Screen will cost how much?
Any suggestion place to repair Blackberry handphone?

Mount NFS on CentOS

wcpon — Tue, 11 Oct 2011 12:31:25 +0800

Hi guys,
Got some question want to get help from here..

I'm trying to mount to NFS volume from centOS, but I getting this error,

QUOTE

mount -t nfs 10.10.10.10:/volume1/abc /mnt/abc/

mount: 10.10.10.10:/volume1/abc/ failed, reason given by server: Permission denied

Any advice?

Not able to start MySQL service on CentOS

wcpon — Fri, 07 Oct 2011 15:35:08 +0800

Hi guys, I'm facing an error in CentOS, when I 'm trying to start MySQL service.

This is the result from "rpm -qa | grep -i mysql"

mysql-5.0.45-7.el5
perl-DBD-MySQL-3.0007-1.fc6
mysql-server-5.0.45-7.el5
mysql-connector-odbc-3.51.12-2.2
MySQL-python-1.2.1-1

It is running in CentOS 5.6 64bit

Below are the error when I start the services.

QUOTE

» Click to show Spoiler - click again to hide... «

Hope someone can assist me on that..

running SSH rsync on CentOS

wcpon — Wed, 05 Oct 2011 17:48:46 +0800

I'm facing a problem that everytime run rsync to synchronize the local file to other machine..
It is require to insert the SSH password to start the sync.
Can I every time trigger rsync and do not require to insert the password??

Please advice.

Innacomm W3100 Port Forwarding.

wcpon — Mon, 15 Mar 2010 17:34:33 +0800

How to set port forwarding in Innacomm W3100?
I tried many times, failed.....
Haih...
any one can help ??

Modem research.

wcpon — Wed, 10 Mar 2010 18:26:30 +0800

I need to find a modem that has half bridge features...
Anyone know about it?

[addedon]March 11, 2010, 9:16 am[/addedon]anyone can reply me?

Looking for half bridge Modem.

wcpon — Tue, 02 Mar 2010 17:51:13 +0800

I'm looking for half-bridge modem, which able to do the bridging for PPPoA to the Firewall...
Anyone can recommend to me which brand is good, and where can I get it?

PPPoA on Modem to Firewall

wcpon — Thu, 28 Jan 2010 02:42:18 +0800

Broadband provider
ISP/package: Streamyx Business Broadband (One Static IP)

Personal equipment
Modem: D-Link ADSL Modem/Router
Firewall used: SonicWall NSA 2400

Problem details
Question description:

My environment got one Modem + Firewall + Switch
I want to use the PPPoA, whether i need to use Firewall to dial up or use Modem to dial up?
Which is the best practise on that? Anyone can help?

[addedon]January 28, 2010, 1:27 pm[/addedon]is there any one can answer my question ?

Cisco ACL and VACL

wcpon — Mon, 18 Jan 2010 19:14:17 +0800

Problem details
Problem description:
I'm facing problem and not so clear about the ACL.
And which is the best practice to use the ACL.

Basically, my environment have many VLAN. And i'm using Cisco 3560

For example,
VLAN 1
VLAN 2
VLAN 3

I don't want VLAN 2 and VLAN 3 talk to VLAN 1
But VLAN 1 able to talk to VLAN 2 and VLAN 3

What is the best practise that I'm using the ACL or VACL to control this features?

[addedon]January 19, 2010, 9:40 am[/addedon]hi..
is there anyone can assist me ?

Cisco Switch Command

wcpon — Fri, 08 Jan 2010 10:52:35 +0800

Is anyone able to explain what does the command mean?

QUOTE

switchport priority extend cos 0
switchport priority extend cos 1
switchport priority extend cos 2

switchport priority extend trust

[addedon]January 8, 2010, 6:36 pm[/addedon]is there anyone can help me?