Enabling accounting on Freeradius 3.0.15
I intend on enabling accounting on Freeradius so I can log user sessions including username and IP address of the user device. I think it is something to do with linelog module and the default (or my eduroam) virtual server accounting section. Is this correct? Has anyone deployed accounting logging and how they did it. Some useful instructions would be useful. Thanks. Peter University of Huddersfield inspiring tomorrow's professionals. [http://marketing.hud.ac.uk/_HOSTED/EmailSig2014/EmailSigFooter.jpg] This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail and remove it from your system. If the content of this e-mail does not relate to the business of the University of Huddersfield, then we do not endorse it and will accept no liability.
On Nov 8, 2017, at 6:10 AM, Peter Hutchison <p.j.hutchison@hud.ac.uk> wrote:
I intend on enabling accounting on Freeradius so I can log user sessions including username and IP address of the user device.
I think it is something to do with linelog module and the default (or my eduroam) virtual server accounting section. Is this correct?
It depends on what you want. If you want logs with one line per entry, use linelog. If you want logs in SQL, use SQL.
Has anyone deployed accounting logging and how they did it. Some useful instructions would be useful. Thanks.
Yes, people have deployed accounting logging for 20 years. It's not hard. The server contains instructions for configuring all modules. Each module contains detailed documentation for how it's configured. The virtual servers contain documentation and examples for how the modules are used. So... what do you want to do? If you say that, we can point you to specific documentation. Alan DeKok.
what you log will be dependent on what info you sent back to the NAS on the access-accept, what the NAS can send in accounting and what stage the AAA is at - at the auth stage you wont have an IP address of the client device - that'll come through after they've received an address via DHCP/SLAAC etc and the NAS has sent an interim-update - the user-name will depend on what was sent back in access accept and what the NAS decides to do - you'll otherwise have just the outerID as the user-name (and logs filled with lots of 'anonymous@realm' entries linelog is a trivial way - just look at linelog module and see the calls for accounting...and then just enable the linelog in the accounting section of the outer server alternatively, go for SQL - enable the detail SQL module and call it in the accounting section - for performance you probably DONT want this to be syncronous so use the buffered-sql virtual server to create a file which then gets slurped into SQL when theres resources (async). alan
participants (3)
-
Alan Buxey -
Alan DeKok -
Peter Hutchison