is there a way to identify the very first ACCESS-REQUEST
Hi there, I want to improve our logging and want to keep track of authentication attempts that do not complete. I was thinking of logging the very first ACCESS-REQUEST and then later on the result. Is there a good way to identify the very first ACCESS-REQUEST from the client with unlang? Maybe by checking the contents of the session-state list or some such? Any ideas? Thanks! - Michael
On Mon, May 22, 2017 at 01:04:59PM -0400, Michael Hocke wrote:
I want to improve our logging and want to keep track of authentication attempts that do not complete. I was thinking of logging the very first ACCESS-REQUEST and then later on the result. Is there a good way to identify the very first ACCESS-REQUEST from the client with unlang? Maybe by checking the contents of the session-state list or some such? Any ideas?
I look to see if it's an EAP identity. Which works OK if you're doing EAP. if (&EAP-Message =~ /^0x02......01/) { detail } eap -- Matthew
On May 22, 2017, at 2:20 PM, Matthew Newton <matthew@newtoncomputing.co.uk> wrote:
On Mon, May 22, 2017 at 01:04:59PM -0400, Michael Hocke wrote:
I want to improve our logging and want to keep track of authentication attempts that do not complete. I was thinking of logging the very first ACCESS-REQUEST and then later on the result. Is there a good way to identify the very first ACCESS-REQUEST from the client with unlang? Maybe by checking the contents of the session-state list or some such? Any ideas?
I look to see if it's an EAP identity. Which works OK if you're doing EAP.
if (&EAP-Message =~ /^0x02......01/) { detail } eap
That looks good. I’ll give it a try. Follow-up question: is there a way to get a hold of the request number from within unlang? I don’t think I see it anywhere in the source code but I want to ask anyway. If not, is this something planned for a future release or is there a better way to correlate different log lines to the same request? Thanks again! - Michael
On 22 May 2017 20:32:00 BST, Michael Hocke <mh103@nyu.edu> wrote:
That looks good. I’ll give it a try. Follow-up question: is there a way to get a hold of the request number from within unlang? I don’t think I see it anywhere in the source code but I want to ask anyway.
http://wiki.freeradius.org/config/run_time_variables %n, in v3 onwards. -- Matthew
On May 22, 2017, at 3:49 PM, Matthew Newton <matthew@newtoncomputing.co.uk> wrote:
On 22 May 2017 20:32:00 BST, Michael Hocke <mh103@nyu.edu> wrote:
That looks good. I’ll give it a try. Follow-up question: is there a way to get a hold of the request number from within unlang? I don’t think I see it anywhere in the source code but I want to ask anyway.
http://wiki.freeradius.org/config/run_time_variables
%n, in v3 onwards.
Awesome. Thank you very much. - Michael
On May 22, 2017, at 4:00 PM, Michael Hocke <mh103@nyu.edu> wrote:
On May 22, 2017, at 3:49 PM, Matthew Newton <matthew@newtoncomputing.co.uk> wrote:
On 22 May 2017 20:32:00 BST, Michael Hocke <mh103@nyu.edu> wrote:
That looks good. I’ll give it a try. Follow-up question: is there a way to get a hold of the request number from within unlang? I don’t think I see it anywhere in the source code but I want to ask anyway.
http://wiki.freeradius.org/config/run_time_variables
%n, in v3 onwards.
Not %I ?
Awesome. Thank you very much.
- Michael
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wow, raising threads from the dead. On Fri, 2018-03-16 at 11:14 -0400, Mark Williams wrote:
On 22 May 2017 20:32:00 BST, Michael Hocke <mh103@nyu.edu> wrote:
That looks good. I’ll give it a try. Follow-up question: is there a way to get a hold of the request number from within unlang? I don’t think I see it anywhere in the source code but I want to ask anyway.
http://wiki.freeradius.org/config/run_time_variables
%n, in v3 onwards.
Not %I ?
No. https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/src/main/xl at.c#L2169 %I is the request ID from the packet. -- Matthew
participants (4)
-
Mark Williams -
Matthew Newton -
Matthew Newton -
Michael Hocke