I have FreeRadius 12.1.12 on Ubuntu 14.04 LTS and we have it configured for our Wireless network. We have a normal internal wireless network configured for AD authenticated users and we also use Eduroam. I am using a Linelog module to record logins and for Eduroam entries,, I would like it to log the eduroma name instead of the Switch the user it authenticated to e.g. Mon Jul 18 08:38:00 2016 : Auth : [U1234567@hud.ac.uk] (from client roaming0.ja.net port 0 via TLS tunnel). Instead of Mon Jul 18 08:38:00 2016 : Auth : [U1234567@hud.ac.uk] (from client qsa.n2k-mc01 port 0 via TLS tunnel). The date and time is provided by variable %t, user name by %{username} and the client by %{client:shortname}. The names are provided in the clients.conf e.g. Client ipaddress { Secret = secret-string Shortname = switch-name Virtual_server = switches } Client roaming0.ja.net { Secret = secret-string Shortname = roaming0.ja.net Nastype = other Virtual_Server = eduroam Shortname = eduroam } Any ideas how to update logging config to record what I need? Peter Hutchison MCP Senior Network Systems Specialist * 01484 473716 Infrastructure Team University of Huddersfield | Queensgate | Huddersfield | HD1 3DH University of Huddersfield inspiring tomorrow's professionals. [http://marketing.hud.ac.uk/_HOSTED/EmailSig2014/EmailSigFooter.jpg] This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail and remove it from your system. If the content of this e-mail does not relate to the business of the University of Huddersfield, then we do not endorse it and will accept no liability.
Hi,
We have a normal internal wireless network configured for AD authenticated users and we also use Eduroam. I am using a Linelog module to record logins and for Eduroam entries,, I would like it to log the eduroma name instead of the Switch the user it authenticated to
right
e.g. Mon Jul 18 08:38:00 2016 : Auth : [U1234567@hud.ac.uk] (from client roaming0.ja.net port 0 via TLS tunnel). Instead of Mon Jul 18 08:38:00 2016 : Auth : [U1234567@hud.ac.uk] (from client qsa.n2k-mc01 port 0 via TLS tunnel).
umm, the only difference there is the NAS client name and this doesnt look like linelog - this looks like the default FreeRADIUS log file (in terms of layout and format - ie /var/log/radius/radius.log or whereever your debian/ubuntu variant logs to/from. yuor question seems to have a level of confusion with it...the former entry could appear if a user logged in from a remote site (ie requests came from one of the national proxies). the later would be a local login...in which case what do you currently see? for custom logging, use line log module, ensure the strings contain the things you need and call it where needed in the config as required. if you need several types of logging formats, use named modules eg instead of linelog { stuff here } do linelog internal-log { stuff here } and call internal-log in whichever virtual server you needed that to be called (perhaps eg inner-tunnel post-auth section). alan
participants (2)
-
A.L.M.Buxey＠lboro.ac.uk -
Peter Hutchison