Hi, I'm trying to figure out how to merge log messages when T(T)LS is in use. Right now both the outer (anonymous) identity and the inner (real) identity are logged: Oct 14 09:35:14 siteone.some.edu: radiusd[28928]: Login OK: [hhoffman] (from client wifi-ap port 0 via TLS tunnel) Oct 14 09:35:15 siteone.some.edu: radiusd[28928]: Login OK: [anonymous] (from client wifi-ap port 0 cli 02-00-00-00-00-01) So, the hhoffman is the actual user name and the 02-00-00-00-00-01 is the mac address that is passed along from the ap. I'd like to be able to combine this as I don't need to know the outer (anonymous) id. I'm looking at modules/{linelog,detail.lgo} but neither look like they produce what is being logging via syslog to the file. radiusd.conf contains a logging section that point to log_* but I don't see how to configure the auth messages in a different way. Cheers, Harry
Hi,
Right now both the outer (anonymous) identity and the inner (real) identity are logged:
Oct 14 09:35:14 siteone.some.edu: radiusd[28928]: Login OK: [hhoffman] (from client wifi-ap port 0 via TLS tunnel) Oct 14 09:35:15 siteone.some.edu: radiusd[28928]: Login OK: [anonymous] (from client wifi-ap port 0 cli 02-00-00-00-00-01)
those logs are from the log successful auth part of radiusd.conf what you probably want is the log module - just take the current default log config and make you own - and then log what you want into whatever file you want. if you care about real user etc then just call that logging module in the inner-tunnel virtual server. alan
participants (2)
-
Alan Buxey -
Harry Hoffman