Scott Miller wrote:
Hello all - I have freeradius with mysql up and running perfectly. I recently "upgraded" from icradius because it seems to have dropped off
the
face of the earth. Anyways - there was a feature in icradius where I
could
poll the log file to get customers authentication status. I created a
link
to a php file which referenced this log file for our techs to help with troubleshooting. The file looks like this:
<?php
include ('header.php'); $file ="/var/log/radius.log"; $limit="60";
$fp = popen("/usr/bin/tail -$limit $file", 'r'); if (! $fp ) { echo 'unable to pipe command'; }
while (!feof($fp) ) { $line = fgets($fp, 4096); print $line."<br>";
}
include ('footer.php'); ?>
But - there doesn't seem to be any log file I can poll this type of info from. Here's an excerpt of what I was able to get with the above:
Wed Jun 28 13:22:13 2006: Auth: Login OK: [sshort] (from nas
CiscoAS5300/S0)
socket 0 (0 sec) Wed Jun 28 13:22:56 2006: Auth: Login OK: [lilia] (from nas Cisco
AS5300/S0)
socket 0 (0 sec) Wed Jun 28 13:23:03 2006: Auth: Login OK: [eaglesight] (from nas CiscoAS5300/S0) socket 0 (0 sec) Wed Jun 28 13:23:56 2006: Auth: Login OK: [dierman] (from nas CiscoAS5300/S0) socket 0 (0 sec) Wed Jun 28 13:23:58 2006: Auth: Login OK: [rprice] (from nas
CiscoAS5300/S0)
socket 0 (0 sec) Wed Jun 28 13:25:32 2006: Auth: Login OK: [hafens] (from nas
CiscoAS5300/S0)
socket 0 (0 sec) Wed Jun 28 13:25:43 2006: Auth: Login OK: [edie_a] (from nas
CiscoAS5300/S0)
socket 0 (0 sec) Wed Jun 28 13:26:09 2006: Auth: Login OK: [megameg] (from nas CiscoAS5300/S0) socket 0 (0 sec) Wed Jun 28 13:26:35 2006: Auth: Login OK: [stinger] (from nas CiscoAS5300/S0) socket 0 (0 sec) Wed Jun 28 13:26:39 2006: Auth: Login OK: [inahat] (from nas
CiscoAS5300/S0)
socket 0 (0 sec) Wed Jun 28 14:26:57 2006: Auth: Login OK: [cafe] (from nascore219.interbel.net/S10101001) socket 0 (0 sec)
Do we have a log file we can poll this type of info from, or does it
store
it in the mysql database somewhere?
Thanks, Scott Miller
------------------------------
Additional Information:
I did find in the radiusd.conf file:
# allowed values: {no, yes} # log_stripped_names = yes
# Log authentication requests to the log file. # # allowed values: {no, yes} # log_auth = yes
# Log passwords with the authentication requests. # log_auth_badpass - logs password if it's rejected # log_auth_goodpass - logs password if it's correct # # allowed values: {no, yes} # log_auth_badpass = yes log_auth_goodpass = yes
But have not found where this log file resides.
Thanks, Scott Miller
- List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
hi,
in the radius.conf there must be on the top the path variables of radius... something like following : See 'doc/variables.txt' for more information.
23 prefix = /usr/local 24 exec_prefix = ${prefix} 25 sysconfdir = /etc/ 26 localstatedir = ${prefix}/var 27 sbindir = ${exec_prefix}/sbin 28 logdir = ${localstatedir}/log/radius 29 raddbdir = ${sysconfdir}/raddb 30 radacctdir = ${logdir}/radacct 31 32 # Location of config and logfiles. 33 confdir = ${raddbdir} 34 run_dir = ${localstatedir}/run/radiusd 35 36 # 37 # The logging messages for the server are appended to the 38 # tail of this file. 39 # 40 log_file = ${logdir}/radius.log
bye -
<>
[Scott Miller] I have verified my radius.conf file contains the following:
prefix = /usr/local exec_prefix = ${prefix} sysconfdir = ${prefix}/etc localstatedir = ${prefix}/var sbindir = ${exec_prefix}/sbin logdir = ${localstatedir}/log/radius raddbdir = ${sysconfdir}/raddb radacctdir = ${logdir}/radacct
There was no log file in /usr/local/log/radius/
<> So I created the file radius.log in that directory - change the permissions to 777, but still nothing gets written to it.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
<> the log file will be created in /usr/local/var/log/radius/radius.log NOT in /usr/local/log/radius/radius.log you can check if the radius.log file will be created by writing in the cli: /etc/init.d/freeradius stop /etc/init.d/freeradius start now the radius.log file must be otherwise i dont know bye