is there a way to identify the very first ACCESS-REQUEST

Matthew Newton matthew at newtoncomputing.co.uk
Mon May 22 20:20:52 CEST 2017


On Mon, May 22, 2017 at 01:04:59PM -0400, Michael Hocke wrote:
> I want to improve our logging and want to keep track of
> authentication attempts that do not complete. I was thinking of
> logging the very first ACCESS-REQUEST and then later on the
> result. Is there a good way to identify the very first
> ACCESS-REQUEST from the client with unlang? Maybe by checking
> the contents of the session-state list or some such? Any ideas?

I look to see if it's an EAP identity. Which works OK if you're
doing EAP.

  if (&EAP-Message =~ /^0x02......01/) {
    detail
  }
  eap

-- 
Matthew


More information about the Freeradius-Users mailing list