December 2015 - Freeradius-Users - lists.freeradius.org

Doubts about redundant { ...} section
by Jorge Pereira 01 Dec '15

01 Dec '15

Hi, Anyone know if is possible to retrieve a rcode from redundant section? e.g: redundant { sql_accounting detail_buffered_queue } if (rcode != ok) { linenlog-problems-with-redundant-acct } -- Jorge Pereira

2 2

different logs for different failures
by Stefano Zanmarchi 01 Dec '15

01 Dec '15

Hallo, we are allowing access only to users with correct password (obviously), given that some conditions based on a sql query are met: server eduroam-inner-tunnel { authorize { preprocess rewrite.calling_station_id if ("%{sql:SELECT count(*) FROM ... WHERE ... AND condition1 AND condition2 AND condition3}" >= 1) { ok update control { Auth-Type := Accept } } else { reject } auth_log eap openldap mschap } authenticate { ntlm_auth Auth-Type MS-CHAP { mschap } eap } post-auth { if ( "%{outer.request:User-Name}" != "%{User-Name}" ){ reject } reply_log Post-Auth-Type REJECT { reply_log } } I't working fine, but the logs always show "Login incorrect", without detailing what caused the failure: Nov 30 15:28:50 radius1 freeradius[2248]: Login incorrect: [myuser(a)myorg.it] (from client foobar.myorg.it port 0 cli F8450AEFD221) I'd like to have something like: Nov 30 15:28:51 radius1 freeradius[2248]: Condition1 not met: [ myuser(a)myorg.it] (from client foobar.myorg.it port 0 cli F8450AEFD221) Nov 30 15:28:52 radius1 freeradius[2248]: Login incorrect: [ youruser(a)myorg.it] (from client foobar.myorg.it port 0 cli F8450AEFD222) Nov 30 15:28:53 radius1 freeradius[2248]: Condition2 not met: [ hisuser(a)myorg.it] (from client foobar.myorg.it port 0 cli F8450AEFD223) Is it possible to achieve this? Thank you very much for your help, Stefano

8 21

Logging the home server in post_proxy logs
by Chris Taylor (chtaylo2) 01 Dec '15

01 Dec '15

Hi, I have have 4 home servers configured which radius request are proxied to using type = fail-over and would like to log which home server handle a request at any given time. In the Post proxy logs: detail post_proxy_log { detailfile = ${radacctdir}/%d/post-proxy-detail-%H:00 header = "%{NAS-IP-Address} - %t" detailperm = 0600 } Is there a way to log which server handled the proxy in this log or even the main radiusd.conf log? Thanks

3 3