how to record certificates error in radius.log?

Alan DeKok aland at deployingradius.com
Sat Jul 17 16:22:04 CEST 2010


WWF wrote:
> But no log is recorded if the certificates is wrong (which is possible
> in real scenarios).

  It should log that authentication has failed.

> I have noticed that if the certificates is wrong, the "radiusd  -Xxxxx"
> will output things like that:
> 
> Fri Jul 16 17:23:30 2010 : Info: [eap] EAP NAK
> Fri Jul 16 17:23:30 2010 : Info: [eap] EAP-NAK asked for EAP-Type/ttls
> Fri Jul 16 17:23:30 2010 : Info: [eap] processing type  askedtls

  That message has nothing to do with a wrong certificate.

  Alan DeKok.



More information about the Freeradius-Users mailing list