Hi all, i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server? Thanks Marco Aresu
On Wed, Jul 30, 2014 at 8:43 AM, Marco Aresu <marcoaresu@gmail.com> wrote:
Hi all,
i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server?
I believe FR will use the local syslog socket. You then configure (r)syslog to ship the logs wherever you'd like. I use syslog-ng and it works well for shipping logs around. I'd imagine that rsyslog will do the same. -m
Thanks Matt, could you please send me a short example of configuration ? Thanks Marco Marco Aresu On 30 July 2014 15:57, Matt Zagrabelny <mzagrabe@d.umn.edu> wrote:
On Wed, Jul 30, 2014 at 8:43 AM, Marco Aresu <marcoaresu@gmail.com> wrote:
Hi all,
i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server?
I believe FR will use the local syslog socket.
You then configure (r)syslog to ship the logs wherever you'd like. I use syslog-ng and it works well for shipping logs around.
I'd imagine that rsyslog will do the same.
-m - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Wed, Jul 30, 2014 at 9:10 AM, Marco Aresu <marcoaresu@gmail.com> wrote:
Thanks Matt, could you please send me a short example of configuration ?
I can perform a quick google, as I don't use rsyslog: rsyslog remote logging yields (the first interesting one I saw): http://www.freeklijten.nl/home/2011/08/16/A-tutorial-on-remote-logging-with-... For syslog-ng-ers that are interested in this thread. These are incomplete, but you get the idea: # client - FR system destination d_tls { syslog( "remote.syslog.server.net" transport("tls") port(6514) tls( peer-verify(required-trusted) ca_dir('/etc/syslog-ng/ssl/ca.d') key_file('/etc/syslog-ng/ssl/server.key') cert_file('/etc/syslog-ng/ssl/server.crt') ) ); }; # syslog server source s_tls { syslog( ip(0.0.0.0) port(6514) transport("tls") tls( peer-verify(required-trusted) ca_dir('/etc/syslog-ng/ssl/ca.d') key_file('/etc/syslog-ng/ssl/server.key') cert_file('/etc/syslog-ng/ssl/server.crt') ) max_connections(1000) keep_hostname(yes) ); }; source s_udp { udp( keep_hostname(yes) ); }; -mz
You need to install rsyslog daemon on radius machine. Then in /etc/rsyslog.conf # Save radius logs into file local1.* /var/log/radius/radius.log # All to syslog server *.* @ip_address_of_your_syslog_server It works fine form me -----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org] On Behalf Of Marco Aresu Sent: Wednesday, July 30, 2014 3:43 PM To: FreeRadius users mailing list Subject: Freeradius Log with Rsyslog Hi all, i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server? Thanks Marco Aresu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Puzzel, thanks for your reply, it seems to be ok. Just last question, where i will choose the log level to send in the syslog?Into Radiusd.conf file? Thanks Marco Marco Aresu On 30 July 2014 19:56, Puzzel <puzzel1982@gmail.com> wrote:
You need to install rsyslog daemon on radius machine. Then in /etc/rsyslog.conf
# Save radius logs into file
local1.* /var/log/radius/radius.log
# All to syslog server
*.* @ip_address_of_your_syslog_server
It works fine form me
-----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org] On Behalf Of Marco Aresu Sent: Wednesday, July 30, 2014 3:43 PM To: FreeRadius users mailing list Subject: Freeradius Log with Rsyslog
Hi all,
i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server?
Thanks
Marco Aresu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
You need to install rsyslog daemon on radius machine. Then in /etc/rsyslog.conf
# Save radius logs into file
local1.* /var/log/radius/radius.log
# All to syslog server
*.* @ip_address_of_your_syslog_server
It works fine form me
-----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius .org] On Behalf Of Marco Aresu Sent: Wednesday, July 30, 2014 3:43 PM To: FreeRadius users mailing list Subject: Freeradius Log with Rsyslog
Hi all,
i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server?
Thanks
Marco Aresu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes in radiusd.conf find the line "syslog_facility = local1" -----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org] On Behalf Of Marco Aresu Sent: Thursday, July 31, 2014 10:32 AM To: FreeRadius users mailing list Subject: Re: Freeradius Log with Rsyslog Hi Puzzel, thanks for your reply, it seems to be ok. Just last question, where i will choose the log level to send in the syslog?Into Radiusd.conf file? Thanks Marco Marco Aresu On 30 July 2014 19:56, Puzzel <puzzel1982@gmail.com> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Puzzel, facility is working. Do you know if i will send to syslog Radacct logs? I need them for verify authentication. Thanks Marco Marco Aresu On 31 July 2014 10:49, Puzzel <puzzel1982@gmail.com> wrote:
Yes in radiusd.conf find the line "syslog_facility = local1"
-----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org] On Behalf Of Marco Aresu Sent: Thursday, July 31, 2014 10:32 AM To: FreeRadius users mailing list Subject: Re: Freeradius Log with Rsyslog
Hi Puzzel,
thanks for your reply, it seems to be ok. Just last question, where i will choose the log level to send in the syslog?Into Radiusd.conf file?
Thanks Marco
Marco Aresu
You need to install rsyslog daemon on radius machine. Then in /etc/rsyslog.conf
# Save radius logs into file
local1.* /var/log/radius/radius.log
# All to syslog server
*.* @ip_address_of_your_syslog_server
It works fine form me
-----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius .org] On Behalf Of Marco Aresu Sent: Wednesday, July 30, 2014 3:43 PM To: FreeRadius users mailing list Subject: Freeradius Log with Rsyslog
Hi all,
i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server?
Thanks
Marco Aresu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 30 July 2014 19:56, Puzzel <puzzel1982@gmail.com> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes in radiusd.conf find the line "syslog_facility = local1"
-----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius .org] On Behalf Of Marco Aresu Sent: Thursday, July 31, 2014 10:32 AM To: FreeRadius users mailing list Subject: Re: Freeradius Log with Rsyslog
Hi Puzzel,
thanks for your reply, it seems to be ok. Just last question, where i will choose the log level to send in the syslog?Into Radiusd.conf file?
Thanks Marco
Marco Aresu
You need to install rsyslog daemon on radius machine. Then in /etc/rsyslog.conf
# Save radius logs into file
local1.* /var/log/radius/radius.log
# All to syslog server
*.* @ip_address_of_your_syslog_server
It works fine form me
-----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradiu s .org] On Behalf Of Marco Aresu Sent: Wednesday, July 30, 2014 3:43 PM To: FreeRadius users mailing list Subject: Freeradius Log with Rsyslog
Hi all,
i ve configured Freeradius on my server and i would like to forward authentication log to an external server. I saw in the forum that i have to change Logdir from file to syslog but where do i have to specify the destination server?
Thanks
Marco Aresu - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 30 July 2014 19:56, Puzzel <puzzel1982@gmail.com> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Radacct you'll have in your database (i.e. MySQL) of course if you use external DB. -----Original Message----- From: freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org [mailto:freeradius-users-bounces+puzzel1982=gmail.com@lists.freeradius.org] On Behalf Of Marco Aresu Sent: Thursday, July 31, 2014 11:13 AM To: FreeRadius users mailing list Subject: Re: Freeradius Log with Rsyslog Puzzel, facility is working. Do you know if i will send to syslog Radacct logs? I need them for verify authentication. Thanks Marco Marco Aresu On 31 July 2014 10:49, Puzzel <puzzel1982@gmail.com> wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Marco Aresu -
Matt Zagrabelny -
Puzzel