Re: is there a way to identify the very first ACCESS-REQUEST

On Mon, May 22, 2017 at 01:04:59PM -0400, Michael Hocke wrote:

I want to improve our logging and want to keep track of authentication attempts that do not complete. I was thinking of logging the very first ACCESS-REQUEST and then later on the result. Is there a good way to identify the very first ACCESS-REQUEST from the client with unlang? Maybe by checking the contents of the session-state list or some such? Any ideas?

I look to see if it's an EAP identity. Which works OK if you're doing EAP. if (&EAP-Message =~ /^0x02......01/) { detail } eap -- Matthew