auth = yes logs too much, auth = no too little

Hans-Christian Esperer hc at hcesperer.org
Thu Sep 27 14:55:19 CEST 2018


On Thu, Sep 27, 2018 at 07:08:50AM -0400, Alan DeKok wrote:
> > So basically, I'd like to see lines like this one:
> >    Mon Sep 24 13:24:16 2018 : Auth: (34876)   Login incorrect (mschap: FAILED: No NT/LM-Password.  Cannot perform authentication): [username/<via Auth-Type = eap>] (from client unifi port 0 via TLS tunnel)
> > 
> > but not
> >    Mon Sep 24 13:15:03 2018 : Auth: (34866) Login OK: [username] (from client unifi port 123456789 cli 00-00-11-22-33-44)
> > 
> > Any suggestions on how to achieve this or something similar would be much appreciated.
> 
>   Source code changes.

Would you accept a patch for that?

Deprecate the auth= setting in favor of auth_successful, auth_failure?

Cheers
 HC


More information about the Freeradius-Users mailing list