On Thu, May 12, 2016 at 12:41:06PM +0200, Betibeteka Beranduetxea wrote:
We are using FreeRADIUS Version 2.1.12 and PEAP auth for wifi clients since a quite long time.
That is very old; you should really upgrade.
Could you explain what the lines in the log means? i.e, I'm getting lines like this one:
Thu May 12 11:56:39 2016 : Auth: Login OK: [xxx.xxx] (from client xxxx08 port 0 cli C0-38-96-26-37-B3)
OK.
Which obviously means that user has sucessful logon and comes from NAS xxxx08.
Yes.
I guess the "port" part means the port at NAS, but this is less clear for me, since we use freeradius exclusively for wifi access and I'm getting some log lines with other ports.
The port doesn't really mean much in a wireless context. It's whatever the the NAS sends in the NAS-Port attribute, so look at your NAS documentation to see what it means.
But the main problem for me is the "cli" part, I guessed this would be some MAC address, may be the user's device one, may be NAS one, maybe some NATing router's one, but none of these possibilities are yet confirmed.
Calling-Station-Id attribute.
After logging from my own laptop, that logged "MAC addres" is not my laptop's one, nor NAS or router one so I'm now quite puzzled
Most likely laptop wifi adapter MAC address, though depends on what the NAS sends. For more flexible logging than the built-in logging you should look at the "linelog" module. It can write logs out with whatever attributes you want. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>