Re: getting Freeradius to recorde login failure, etc
Hi there i dont want to sound rude, etc but your not really answering my question. you only answered half of it what do i wite for the sql statement, etc Jeremy -----Original Message----- From: "Duane Cox" <duanec@mail.illicom.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Date: Tue, 16 May 2006 22:28:12 -0500 Subject: Re: getting Freeradius to recorde login failure, etc post-auth { # # If you want to have a log of authentication replies, # un-comment the following line, and the 'detail reply_log' # section, above. # reply_log sql Post-Auth-Type REJECT { sql } } ----- Original Message ----- From: Jeremy ohara To: FreeRadius users mailing list Sent: Tuesday, May 16, 2006 9:13 PM Subject: Re: getting Freeradius to recorde login failure, etc where and how do i do it and what do i write??? jeremy -----Original Message----- From: "Duane Cox" <duanec@mail.illicom.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Date: Tue, 16 May 2006 18:17:26 -0500 Subject: Re: getting Freeradius to recorde login failure, etc yes, there is a subsection under the post_auth section for such a thing... ----- Original Message ----- From: Jeremy ohara To: FreeRadius users mailing list Sent: Tuesday, May 16, 2006 3:24 PM Subject: getting Freeradius to recorde login failure, etc hi there is there a way to get Freeradius 1.0.5 with Mysql to record login-failure, incorrect password or incorrect username into the mysql table? i can see its possbile. but when you login with wrong details it doesnt get to record the login failure, etc. and i dont knwo what code to use and how to make freeradius to record it Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ---------------------------------------------------------------------------- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ---------------------------------------------------------------------------- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------
"Jeremy ohara" <Admin@jemisp.com> wrote:
i dont want to sound rude, etc but your not really answering my question. you only answered half of it
At some point you *do* have to read the documentation. While people may be kind enough to answer your questions on the list, most of those answers are cut & pasted from the existing documentation. Alan DeKok.
there is no sign of any of this in the documentation if you can show me where it "shows" what and how to do it and code, by all means show me! Jeremy -----Original Message----- From: "Alan DeKok" <aland@nitros9.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: Wed, 17 May 2006 10:33:43 -0400 Subject: Re: getting Freeradius to recorde login failure, etc "Jeremy ohara" <Admin@jemisp.com> wrote:
i dont want to sound rude, etc but your not really answering my question. you only answered half of it
At some point you *do* have to read the documentation. While people may be kind enough to answer your questions on the list, most of those answers are cut & pasted from the existing documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------
"Jeremy ohara" <Admin@jemisp.com> wrote:
there is no sign of any of this in the documentation if you can show me where it "shows" what and how to do it and code, by all means show me!
The documentation does not describe how to configure the server for your particular location, for your local needs. Instead, it describes generally how the server works, and how to configure it. It's up to the local admin to put the pieces together. My suggestion is to hire someone to configure it for you. You can then get them to maintain it, too. If you configure it by copying instructions on this list, you won't understand what the serveris doing, and you won't be able to maintain it in the future. Alan DEKok.
would there be any reason for '%{Acct-Terminate-Cause}' to not work? Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------
Le Thu, May 18, 2006 at 02:37:57AM +1000, Jeremy ohara ecrivait:
would there be any reason for '%{Acct-Terminate-Cause}' to not work?
What do you mean by "not work" ? If you don't get it in the accounting request sent by the (NAS|Client) you just can't have it anyway. Regards, Fox.
I appreciate the dialogue we have here. I have been interested in doing this as well, and have been tinkering with some code outside of Freeradius to insert logins into a seperate table by reading the radius.log file. I've been doing it this way because I didn't know it was within Freeradius's capabilities. So, I too am interested in hearing the specifics on how this can be done. If someone can point me to the right direction, I would be very appreciative. Perhaps I could even explore it to its fullest and submit some documentation to the developers to include with the software to make things a bit more clear. Thanks in advance, Chris Carver Pennswoods.Net Network Engineer Jeremy ohara wrote:
there is no sign of any of this in the documentation if you can show me where it "shows" what and how to do it and code, by all means show me!
Jeremy
-----Original Message----- From: "Alan DeKok" <aland@nitros9.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: Wed, 17 May 2006 10:33:43 -0400 Subject: Re: getting Freeradius to recorde login failure, etc
"Jeremy ohara" <Admin@jemisp.com> wrote: > i dont want to sound rude, etc but your not really answering my question. > you only answered half of it
At some point you *do* have to read the documentation. While people may be kind enough to answer your questions on the list, most of those answers are cut & pasted from the existing documentation.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ---------------------------------------------------------------------------- ------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Christopher Carver <ccarver@pennswoods.net> wrote:
So, I too am interested in hearing the specifics on how this can be done. If someone can point me to the right direction, I would be very appreciative. Perhaps I could even explore it to its fullest and submit some documentation to the developers to include with the software to make things a bit more clear.
As always, patches are welcome. Alan DeKok.
Guys, it's pretty easy... The only things that need to be done is to have an sql statement like so... postauth_query = "insert into ${postauth_table} (UserName, Password, RadReply, NASIPAddress, NASIdentifier, NASPort, NASPort Type, CalledStationId, CallingStationId) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%{NAS-I P-Address}', '%{NAS-Identifier}', '%{NAS-Port}', '%{NAS-Port-Type}', '%{Called-Station-Id}', '%{Calling-Station-Id}')" and also a line in the postauth section like so... post-auth { sql Post-Auth-Type REJECT { sql } } That will log both success and failures. Alan, Is there any way to have a conditional statement in the post-auth section, something like: if NASIPAddress == '1.1.1.1' then don't process postauth? ----- Original Message ----- From: "Christopher Carver" <ccarver@pennswoods.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Wednesday, May 17, 2006 11:51 AM Subject: Re: getting Freeradius to recorde login failure, etc
I appreciate the dialogue we have here. I have been interested in doing this as well, and have been tinkering with some code outside of Freeradius to insert logins into a seperate table by reading the radius.log file. I've been doing it this way because I didn't know it was within Freeradius's capabilities. So, I too am interested in hearing the specifics on how this can be done. If someone can point me to the right direction, I would be very appreciative. Perhaps I could even explore it to its fullest and submit some documentation to the developers to include with the software to make things a bit more clear.
Thanks in advance,
Chris Carver Pennswoods.Net Network Engineer
Jeremy ohara wrote:
there is no sign of any of this in the documentation if you can show me where it "shows" what and how to do it and code, by all means show me!
Jeremy
-----Original Message----- From: "Alan DeKok" <aland@nitros9.org> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Date: Wed, 17 May 2006 10:33:43 -0400 Subject: Re: getting Freeradius to recorde login failure, etc
"Jeremy ohara" <Admin@jemisp.com> wrote: > i dont want to sound rude, etc but your not really answering my question. > you only answered half of it
At some point you *do* have to read the documentation. While people may be kind enough to answer your questions on the list, most of those answers are cut & pasted from the existing documentation.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-------------------------------------------------------------------------- --
This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses.
-------------------------------------------------------------------------- --
------------------------------------------------------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"Duane Cox" <duanec@mail.illicom.net> wrote:
Alan, Is there any way to have a conditional statement in the post-auth section, something like: if NASIPAddress == '1.1.1.1' then don't process postauth?
Not really, no. That would be very useful, but probably hard to do in the current architecture. Alan DeKok.
Christopher Carver wrote:
If someone can point me to the right direction, I would be very appreciative. Perhaps I could even explore it to its fullest and submit some documentation to the developers to include with the software to make things a bit more clear.
What exactly is unclear in the documentation? There is already an entry "How do I log failed login attempts in a SQL database?" in the FAQ. http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ -- Nicolas Baradakis
participants (6)
-
Alan DeKok -
Christopher Carver -
Duane Cox -
Francois-Xavier GAILLARD -
Jeremy ohara -
Nicolas Baradakis