Thank you for answer. As you can see log_proxy_reply (instance of the linelog module) doesn't print Packet-Type attribute. But: (0) log_proxy_reply: EXPAND /app_log/radius/auth/radius.log (0) log_proxy_reply: --> /app_log/radius/auth/radius.log (0) log_proxy_reply: EXPAND %t : Info PROXY-REPLY(%{User-Name}): %{pairs:proxy-reply:} (0) log_proxy_reply: --> Thu Jun 18 13:24:00 2015 : Info PROXY-REPLY(421905725408@proxy.corp): Proxy-State = 0x313838 (0) [log_proxy_reply] = ok (0) if (proxy-reply:Packet-Type == Access-Reject) { (0) ERROR: Failed retrieving values required to evaluate condition (0) } # post-proxy = ok (0) Login incorrect (Home Server says so): [421905725408@proxy.corp/<via Auth-Type = CHAP>] (from client localhost port 385 cli 421905725408) Thx. On Thu, Jun 18, 2015 at 12:48 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jun 18, 2015, at 5:51 AM, Peter Balsianok <balsianok.peter@gmail.com> wrote:
I want to log proxy request in the case of Access-Reject from proxy server
In the conf file (site-enables/default):
post-proxy { log_proxy_reply Post-Proxy-Type Fail-Authentication {
That's for "failed to get a reply the request". Not "the reply was Access-Reject".
You want:
post-proxy { ... if (proxy-reply:Packet-Type == Access-Reject) { log_proxy_request log_control } ... }
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html