Log final reply packet including any VSA's
Hi , Just wanted to check if their are any ways of logging the final reply sent to NAS. By this I mean this bit from radiusd -X (10) Sent Access-Accept Id 10 from 172.21.8.201:1812 to 172.20.0.76:39604 length 0 (10) Aruba-User-Role = "authenticated" (10) MS-MPPE-Recv-Key = 0xf2af9bba1de508511fa7ed2d41fdcef297593e51a2901c8d90e64889345c4190 (10) MS-MPPE-Send-Key = 0xf522b78b422d7a5a23302b3370fce4a080e8cad27e83391f220645ca8f269f46 (10) EAP-Message = 0x030a0004 (10) Message-Authenticator = 0x00000000000000000000000000000000 (10) Finished request In this its sending back an Aruba VSA. I can get all of the above by doing %{reply:[*]} but it doesnt log the actual VSA in it. Just checking if there is an easy way of doing. I need both the name of the attribute and the actual attribute value returned like its showing up on this debug. Many Thanks Arnab
Hi,
Just wanted to check if their are any ways of logging the final reply sent to NAS. By this I mean this bit from radiusd -X
(10) Sent Access-Accept Id 10 from 172.21.8.201:1812 to 172.20.0.76:39604 length 0 (10) Aruba-User-Role = "authenticated" (10) MS-MPPE-Recv-Key = 0xf2af9bba1de508511fa7ed2d41fdcef297593e51a2901c8d90e64889345c4190 (10) MS-MPPE-Send-Key = 0xf522b78b422d7a5a23302b3370fce4a080e8cad27e83391f220645ca8f269f46 (10) EAP-Message = 0x030a0004 (10) Message-Authenticator = 0x00000000000000000000000000000000 (10) Finished request
In this its sending back an Aruba VSA.
I can get all of the above by doing %{reply:[*]} but it doesnt log the actual VSA in it. Just checking if there is an easy way of doing. I need both the name of the attribute and the actual attribute value returned like its showing up on this debug.
sure - 'reply_log' - just enable it in the post-auth section of the virtual server, read the detail.log module file for more info. alan
Just wanted to check if their are any ways of logging the final reply sent to NAS. By this I mean this bit from radiusd -X
(10) Sent Access-Accept Id 10 from 172.21.8.201:1812 to 172.20.0.76:39604 length 0 (10) Aruba-User-Role = "authenticated" (10) MS-MPPE-Recv-Key = 0xf2af9bba1de508511fa7ed2d41fdcef297593e51a2901c8d90e64889345c4190 (10) MS-MPPE-Send-Key = 0xf522b78b422d7a5a23302b3370fce4a080e8cad27e83391f220645ca8f269f46 (10) EAP-Message = 0x030a0004 (10) Message-Authenticator = 0x00000000000000000000000000000000 (10) Finished request
In this its sending back an Aruba VSA.
I can get all of the above by doing %{reply:[*]} but it doesnt log the actual VSA in it. Just checking if there is an easy way of doing. I need both the name of the attribute and the actual attribute value returned like its showing up on this debug. sure - 'reply_log' - just enable it in the post-auth section of the virtual server, read the detail.log module file for more info. alan
Thanks Alan, any chance I can change the output formating of that , I need the fields comma separated. Sent: Wednesday, February 08, 2017 at 10:32 PM From: A.L.M.Buxey@lboro.ac.uk To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Subject: Re: Log final reply packet including any VSA's Hi, - List info/subscribe/unsubscribe? See [1]http://www.freeradius.org/list/users.html References 1. http://www.freeradius.org/list/users.html
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Arnab Roy