Logging inner user name instead of anonymous
On ourfFront end server, I set up the following linelog module to record snapshot status of authentication requests (Accepted or Rejected). I have however observed that for users who specify anonymous names, it's their anonymous names that get recorded instead of their real names. How can I ensure that it's the real user name that gets recorded instead of anonymous names: linelog f_ticks { filename = ${radacctdir}/%Y%m%d/linelog format = " Log Message for %{User-Name}" reference = "f_ticks.%{%{reply:Packet-Type}:-format}" f_ticks { Access-Accept = "Access accepted for %{User-Name} at %{NAS-IP-Address} received from %{Packet-Src-IP-Address} proxied to %{home_server:ipaddr} # CSI=%{Calling-Station-Id} # Time = %t " Access-Reject = "Access rejected for %{User-Name} at %{NAS-IP-Address} received from %{Packet-Src-IP-Address} proxied to %{home_server:ipaddr} # CSI=%{Calling-Station-Id} # Time = %t " } } Clement
On Fri, Mar 27, 2015 at 02:29:41PM +0000, Clement Ogedengbe wrote:
On ourfFront end server, I set up the following linelog module to record snapshot status of authentication requests (Accepted or Rejected). I have however observed that for users who specify anonymous names, it's their anonymous names that get recorded instead of their real names. How can I ensure that it's the real user name that gets recorded instead of anonymous names:
Easiest way is to call linelog from the inner-tunnel rather than the default (outer) server. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
The inner tunnelling takes place at the back end whereas I want the logging to take place on the front end server Clement -----Original Message----- From: Freeradius-Users [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk@lists.freeradius.org] On Behalf Of Matthew Newton Sent: 27 March 2015 14:46 To: FreeRadius users mailing list Subject: Re: Logging inner user name instead of anonymous On Fri, Mar 27, 2015 at 02:29:41PM +0000, Clement Ogedengbe wrote:
On ourfFront end server, I set up the following linelog module to record snapshot status of authentication requests (Accepted or Rejected). I have however observed that for users who specify anonymous names, it's their anonymous names that get recorded instead of their real names. How can I ensure that it's the real user name that gets recorded instead of anonymous names:
Easiest way is to call linelog from the inner-tunnel rather than the default (outer) server. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mar 27, 2015, at 10:31 AM, Clement Ogedengbe <c.ogedengbe@worc.ac.uk> wrote:
The inner tunnelling takes place at the back end whereas I want the logging to take place on the front end server
Then the back-end server has to forward the real User-Name in to the front-end server. Alan DeKok.
participants (4)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Clement Ogedengbe -
Matthew Newton