getting Freeradius to recorde login failure, etc

Duane Cox duanec at mail.illicom.net
Wed May 17 19:14:05 CEST 2006


Guys, it's pretty easy...  The only things that need to be done is to have
an sql statement like so...

        postauth_query = "insert into ${postauth_table} (UserName, Password,
RadReply, NASIPAddress, NASIdentifier, NASPort, NASPort
Type, CalledStationId, CallingStationId) values ('%{User-Name}',
'%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%{NAS-I
P-Address}', '%{NAS-Identifier}', '%{NAS-Port}', '%{NAS-Port-Type}',
'%{Called-Station-Id}', '%{Calling-Station-Id}')"

and also a line in the postauth section like so...

post-auth {
        sql

        Post-Auth-Type REJECT {
                sql
        }
}

That will log both success and failures.


Alan, Is there any way to have a conditional statement in the post-auth
section, something like:  if NASIPAddress == '1.1.1.1' then don't process
postauth?


----- Original Message ----- 
From: "Christopher Carver" <ccarver at pennswoods.net>
To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Sent: Wednesday, May 17, 2006 11:51 AM
Subject: Re: getting Freeradius to recorde login failure, etc


> I appreciate the dialogue we have here.  I have been interested in doing
> this as well, and have been tinkering with some code outside of
> Freeradius to insert logins into a seperate table by reading the
> radius.log file.  I've been doing it this way because I didn't know it
> was within Freeradius's capabilities.  So, I too am interested in
> hearing the specifics on how this can be done.  If someone can point me
> to the right direction, I would be very appreciative.  Perhaps I could
> even explore it to its fullest and submit some documentation to the
> developers to include with the software to make things a bit more clear.
>
> Thanks in advance,
>
> Chris Carver
> Pennswoods.Net
> Network Engineer
>
> Jeremy ohara wrote:
> > there is no sign of any of this in the documentation if you can show
> > me where it "shows" what and how to do it and code, by all means show
me!
> >
> > Jeremy
> >
> >
> >     -----Original Message-----
> >     From: "Alan DeKok" <aland at nitros9.org>
> >     To: FreeRadius users mailing list
> >     <freeradius-users at lists.freeradius.org>
> >     Date: Wed, 17 May 2006 10:33:43 -0400
> >     Subject: Re: getting Freeradius to recorde login failure, etc
> >
> >     "Jeremy ohara" <Admin at jemisp.com> wrote:
> >     > i dont want to sound rude, etc but your not really answering my
> >     question.
> >     > you only  answered half of it
> >
> >       At some point you *do* have to read the documentation.  While
people
> >     may be kind enough to answer your questions on the list, most of
those
> >     answers are cut & pasted from the existing documentation.
> >
> >       Alan DeKok.
> >     -
> >     List info/subscribe/unsubscribe? See
> >     http://www.freeradius.org/list/users.html
> >
> >
>
> --------------------------------------------------------------------------
--
> > This email has been scanned for Virus by MDaemon AntiVirus part of
> > MDaemon.
> > Updated daily to keep up-to-date with all new and old viruses.
>
> --------------------------------------------------------------------------
--
> > ------------------------------------------------------------------------
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>




More information about the Freeradius-Users mailing list