adding operator-name to play nice with eduroam
Hi all, We've been up and running with Eduroam for a few months now without any major issues. It was just pointed out to me that we should be sending operator-name along with our proxy requests for better logging and easier troubleshooting if we do experience problems down the line. I believe I've got things set up now to send our operator-name along with the proxied requests by adding the following to our pre-proxy section in sites-enabled/inner-tunnel update proxy-request { Operator-Name := "1simons-rock.edu" } But I would also like to be capturing operator-name on incoming proxy requests. I can't seem to find any documentation as to where I would configure this though. Any suggestions? Brian Gold System Administrator Bard College at Simon's Rock
On 24/09/12 16:39, Brian Gold wrote:
Hi all,
We've been up and running with Eduroam for a few months now without any major issues. It was just pointed out to me that we should be sending operator-name along with our proxy requests for better logging and easier troubleshooting if we do experience problems down the line.
I believe I've got things set up now to send our operator-name along with the proxied requests by adding the following to our pre-proxy section in sites-enabled/inner-tunnel update proxy-request { Operator-Name := "1simons-rock.edu" }
But I would also like to be capturing operator-name on incoming proxy requests. I can't seem to find any documentation as to where I would configure this though. Any suggestions?
Requests from other proxies are just like requests from clients - the variable is just present in the "request" list in authorize/authenticate/post-auth sections, and can be logged using "detail" or SQL or whatever. You will want to account for the fact that Operator-Name might not be present; we use an unlang policy to populate an internal attribute "Origin" conditionally based on presence and format of various thing, including Operator-Name.
Hi, On Mon, Sep 24, 2012 at 11:39:05AM -0400, Brian Gold wrote:
But I would also like to be capturing operator-name on incoming proxy requests.
By this I guess you just mean incoming requests from other sites (via your NRPS), so you can see where your users are logging in?
I can't seem to find any documentation as to where I would configure this though. Any suggestions?
The attribute should just appear in your detail logs from the default outer. Unless you've changed your logging significantly, you should already have it. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Just figured that out. Our logging is still pretty much set up with the defaults, so it looks like everything is good to go. Thanks!
-----Original Message----- From: freeradius-users-bounces+bgold=simons-rock.edu@lists.freeradius.org [mailto:freeradius-users-bounces+bgold=simons- rock.edu@lists.freeradius.org] On Behalf Of Matthew Newton Sent: Monday, September 24, 2012 12:23 PM To: FreeRadius users mailing list Subject: Re: adding operator-name to play nice with eduroam
Hi,
On Mon, Sep 24, 2012 at 11:39:05AM -0400, Brian Gold wrote:
But I would also like to be capturing operator-name on incoming proxy requests.
By this I guess you just mean incoming requests from other sites (via your NRPS), so you can see where your users are logging in?
I can't seem to find any documentation as to where I would configure this though. Any suggestions?
The attribute should just appear in your detail logs from the default outer. Unless you've changed your logging significantly, you should already have it.
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Brian Gold -
Matthew Newton -
Phil Mayers