User-Name in the Accounting log is being stripped

Clement Ogedengbe c.ogedengbe at worc.ac.uk
Tue Apr 15 16:27:19 CEST 2014


Thanks.

I am actually not using the detail file. I am using a customized "detail" section "accounting_log" defined in detail.log file. My detail.log file has the following sections:

detail auth_log {
        detailfile = ${radacctdir}/%Y%m%d/request-detail-%H:00
        header = "%{Packet-Src-IP-Address} - %t"
        log_packet_header = yes
        detailperm = 0600
        suppress {
                User-Password
        }
}

detail reply_log {
        detailfile = ${radacctdir}/%Y%m%d/reply-detail
        header = "%{Packet-Src-IP-Address} Returned from %{home_server:ipaddr} for User %{User-Name} - %t"
        detailperm = 0600
}

detail accounting_log {
  detailfile = ${radacctdir}/%Y%m%d/accounting-detail
  header = "%{Packet-Src-IP-Address} - %t"
  detailperm = 0600
}

Below is extract of the accounting section in sites-enabled/default file
accounting {
#       detail
        accounting_log
        radutmp
        attr_filter.accounting_response
}

Below is extract from reply_log for a particular user
10.255.252.248 Returned from roaming0.ja.net for User xxxxx at live.ucl.ac.uk - Tue Apr 15 10:49:59 2014
        Packet-Type = Access-Accept
        Tunnel-Private-Group-Id:0 = "222"
        User-Name = "xxxxx at live.">>>>>>>>> "The user-name here is not the same as the one in the header."

Below is extract from accounting-detail for the same user
10.255.252.248 - Tue Apr 15 10:50:36 2014
        User-Name = "xxxxx at live."
        NAS-Port = 13
        NAS-IP-Address = 10.255.252.248
        Framed-IP-Address = 172.21.30.255

Many Thanks

Clement 


-----Original Message-----
From: freeradius-users-bounces+c.ogedengbe=worc.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: 15 April 2014 14:00
To: FreeRadius users mailing list
Subject: Re: User-Name in the Accounting log is being stripped

Clement Ogedengbe wrote:
> I configured my detail reply_log file with the following:
> 
> header = "%{Packet-Src-IP-Address} Returned from %{home_server:ipaddr} 
> for User %{User-Name} - %t"

  OK.

> The reply log captured shows the records below: The User-Name in the 
> header for the reply_log shows the complete user-name whereas the 
> user-name in the reply log record is being stripped for some reasons. 
> As a result of this, the accounting log is showing the “stripped” 
> user-name instead of the complete user name.

  This is why we say to read the debug output.  It would tell you what's going on.

  In this case, you've edited the "reply_log" version of the detail module to add the header.  You have NOT edited the "detail" module which is used by the accounting section.

  Do that, and the problem will be fixed.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4569 / Virus Database: 3882/7340 - Release Date: 04/13/14


More information about the Freeradius-Users mailing list