Re: auth = yes logs too much, auth = no too little

On Thu, 2018-09-27 at 08:59 +0200, Hans-Christian Esperer wrote:

I would like to log failed login attempts, so I can see the username that was tried. Is there a simple way to do this? Setting auth=yes in radiusd.conf also logs all successful attempts.

You could configure linelog to log details you want and call it in the Post-Auth-Type REJECT section. It'll get login attempts that complete but fail. It won't log attempts where e.g. the EAP process stops half way through. -- Matthew