1.) Is it possible to log the home_server which proxied a connection? Log today: radiusd[22590]: (436) Login OK: [Radius-ACE-Prob@REMOTE] (from client Radius-ACE-Prob port 0) [Source: 111.111.111.111] I’d like to be able to log --> [Proxy: home_server_A]. If not possible there, how about in post-proxy { post_proxy_log } Thanks
On Feb 2, 2017, at 6:24 PM, Chris Taylor (chtaylo2) <chtaylo2@cisco.com> wrote:
1.) Is it possible to log the home_server which proxied a connection?
Log today:
radiusd[22590]: (436) Login OK: [Radius-ACE-Prob@REMOTE] (from client Radius-ACE-Prob port 0) [Source: 111.111.111.111]
See raddb/radiusd.conf. Look for "msg_goodpass" You can add %{proxy:Packet-Dest-IP-Address} there along with other text.
I’d like to be able to log --> [Proxy: home_server_A].
If not possible there, how about in
post-proxy {
post_proxy_log
You can do that with the linelog module, and %{proxy:Packet-Dest-IP-Address}. Alan DeKok.
Thanks, however I’ve tried that before and received errors. Here I’ve tried two ways, both failing: (0) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{proxy:Packet-Dest-IP-Address}] (0) ERROR: ^ Unknown module (2) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{Packet-Dest-IP-Address}] (2) ERROR: ^ Unknown attribute On 2/2/17, 6:40 PM, "Freeradius-Users on behalf of Alan DeKok" <freeradius-users-bounces+chtaylo2=cisco.com@lists.freeradius.org on behalf of aland@deployingradius.com> wrote: On Feb 2, 2017, at 6:24 PM, Chris Taylor (chtaylo2) <chtaylo2@cisco.com> wrote: > > 1.) Is it possible to log the home_server which proxied a connection? > > > Log today: > > radiusd[22590]: (436) Login OK: [Radius-ACE-Prob@REMOTE] (from client Radius-ACE-Prob port 0) [Source: 111.111.111.111] See raddb/radiusd.conf. Look for "msg_goodpass" You can add %{proxy:Packet-Dest-IP-Address} there along with other text. > I’d like to be able to log --> [Proxy: home_server_A]. > > If not possible there, how about in > > post-proxy { > > post_proxy_log You can do that with the linelog module, and %{proxy:Packet-Dest-IP-Address}. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Feb 2, 2017, at 8:05 PM, Chris Taylor (chtaylo2) <chtaylo2@cisco.com> wrote:
Thanks, however I’ve tried that before and received errors. Here I’ve tried two ways, both failing:
(0) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{proxy:Packet-Dest-IP-Address}]
It should be %{proxy:Packet-Dst-IP-Address}. The "dest" was a typo. Alan DeKok.
Hi, The line is still showing unknown module, pointing to proxy. (1) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{proxy:Packet-Dst-IP-Address}] (1) ERROR: ^ Unknown module If I try it without ‘proxy:’, it logs the current FreeRadius server, not the home_server it’s proxying to. (3) EXPAND [Source: %{NAS-IP-Address}] [Proxy: %{Packet-Dst-IP-Address}] (3) --> [Source: 69.55.XX.XX] [Proxy: 173.56.XX.XX] On 2/2/17, 8:22 PM, "Freeradius-Users on behalf of Alan DeKok" <freeradius-users-bounces+chtaylo2=cisco.com@lists.freeradius.org on behalf of aland@deployingradius.com> wrote: > On Feb 2, 2017, at 8:05 PM, Chris Taylor (chtaylo2) <chtaylo2@cisco.com> wrote: > > Thanks, however I’ve tried that before and received errors. Here I’ve tried two ways, both failing: > > (0) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{proxy:Packet-Dest-IP-Address}] It should be %{proxy:Packet-Dst-IP-Address}. The "dest" was a typo. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Was able to find it in git using your suggestion, looks good now. Thanks for your help as always Alan, much appreciated!! %{proxy-request:Packet-Dst-IP-Address} From: Chris Taylor <chtaylo2@cisco.com> Date: Friday, February 3, 2017 at 9:00 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Logging proxy server Hi, The line is still showing unknown module, pointing to proxy. (1) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{proxy:Packet-Dst-IP-Address}] (1) ERROR: ^ Unknown module If I try it without ‘proxy:’, it logs the current FreeRadius server, not the home_server it’s proxying to. (3) EXPAND [Source: %{NAS-IP-Address}] [Proxy: %{Packet-Dst-IP-Address}] (3) --> [Source: 69.55.XX.XX] [Proxy: 173.56.XX.XX] On 2/2/17, 8:22 PM, "Freeradius-Users on behalf of Alan DeKok" <freeradius-users-bounces+chtaylo2=cisco.com@lists.freeradius.org on behalf of aland@deployingradius.com> wrote: > On Feb 2, 2017, at 8:05 PM, Chris Taylor (chtaylo2) <chtaylo2@cisco.com> wrote: > > Thanks, however I’ve tried that before and received errors. Here I’ve tried two ways, both failing: > > (0) ERROR: [Source: %{NAS-IP-Address}] [Proxy: %{proxy:Packet-Dest-IP-Address}] It should be %{proxy:Packet-Dst-IP-Address}. The "dest" was a typo. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Chris Taylor (chtaylo2)