FreeRadius Auth Method variables

Alan DeKok aland at
Wed Nov 20 13:23:31 CET 2019

On Nov 20, 2019, at 4:35 AM, Sep0lkit <sep0lkit at> wrote:
> I want to log user auth-method(PAP/CHAP/EAP-TLS/EAP-PEAP),  i search the
> freeradius website and google, but there is nothing.
> i think this variables is very useful,  may this features add in future?

  There is no variable which holds the authentication method.

  The logic is basically this:

	if User-Password exists
		it's PAP
	else if CHAP-Password exists
		then it's CHAP
	else if MS-CHAP-* attributes exist
		then it's MS-CHAP
	else if EAP-Message exists
		then the EAP-Type attribute contains the EAP type
		the packet is likely rejected

  Alan DeKok.

More information about the Freeradius-Users mailing list