Ok I went back, looked at the config, and used some common sense to figure part of it out. I have it now logging replys for rejects using the reply_log section of ./modules/detail.log (I also enabled copy tunneled reply to the outer tunnel in eap.conf). In the logged rejections Im not getting the user-name though. I tried disabling the attr_filter.access_reject line in ./sites-enabled/default to see if the attributes were getting filtered but that didnt do anything as I expected.<br>
I know that Access-Reject logs are only supposed to have certain info (per attr_filter.access_reject doc). Is there a way to modify the reply_log to include the User-Name in the rejection or should I be using something other than reply_log?<br>
<br>Thanks!<br>-Josh<br><br><div class="gmail_quote">On Fri, Mar 16, 2012 at 4:58 PM, Alan DeKok <span dir="ltr">&lt;<a href="mailto:aland@deployingradius.com">aland@deployingradius.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">Josh Hiner wrote:<br>
&gt; Hello. Im running freeradius 2.1.6 and logging to /var/log/radius in<br>
&gt; file/detail format. Currently connection logging is working if the user<br>
&gt; authenticates correctly. I cant get access rejects to log though. Ive<br>
&gt; turned on reply detail but that is only showing successful attempts too.<br>
<br>
</div>  Read raddb/sites-available/default.  Look for Post-Auth-Type Reject.<br>
<br>
  This is documented.<br>
<span class="HOEnZb"><font color="#888888"><br>
  Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</font></span></blockquote></div><br>