Log NAS IP rather than Shortname - PLEASE
I have about 50 routers that are accessing my radius server and I setup the clients.conf with CIDR and left shortnames blank so now it logs the ip address and cidr. What I really need it to do is just report the ip in which the requests came from rather than the shortname... thoughts? Jason Frawley
Huh? It sounds like you already have it reporting the NAS IP. Are you saying you want it to report the "client" IP? Doesn't it already to that in radiusd.log? ________________________________ From: freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org] On Behalf Of Jason Frawley Sent: Friday, June 03, 2011 12:50 PM To: freeradius-users@lists.freeradius.org Subject: Log NAS IP rather than Shortname - PLEASE I have about 50 routers that are accessing my radius server and I setup the clients.conf with CIDR and left shortnames blank so now it logs the ip address and cidr. What I really need it to do is just report the ip in which the requests came from rather than the shortname... thoughts? Jason Frawley <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
Sorry I meant to say log the client ip and not the subnet in which its in ....eg. log shows request from 207.32.194.0/23 but I need it to show the actual ip in which the request came from. Eg. 207.32.194.4 On Jun 3, 2011 10:57 AM, "Gary Gatten" <Ggatten@waddell.com> wrote:
Huh? It sounds like you already have it reporting the NAS IP. Are you
saying you want it to report the “client” IP? Doesn’t it already to that in radiusd.log?
________________________________
From: freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org[mailto:
freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org] On Behalf Of Jason Frawley
Sent: Friday, June 03, 2011 12:50 PM To: freeradius-users@lists.freeradius.org Subject: Log NAS IP rather than Shortname - PLEASE
I have about 50 routers that are accessing my radius server and I setup the clients.conf with CIDR and left shortnames blank so now it logs the ip address and cidr. What I really need it to do is just report the ip in which the requests came from rather than the shortname...
thoughts?
Jason Frawley
"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sat, Jun 4, 2011 at 2:19 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
Sorry I meant to say log the client ip and not the subnet in which its in ....eg. log shows request from 207.32.194.0/23 but I need it to show the actual ip in which the request came from. Eg. 207.32.194.4
There was a post sometime ago about custom log format, search the list archive if you're interested in the complete responses. Basically you can either: - ADD what information logged (look at radiusd.conf, look for msg) - log to a NEW file, with another format altogether (see linelog module) Whichever path you choose, looks like you can use NAS-IP-Address or Client-IP-Address attribute as the extra information. -- Fajar
There may be some confusion, I am currently logging auth and accounting information in seperate folders that are labeled by client ip addresses, but those are the detail auth logs, I am working with just the radius.log file. Below is a sample of what I get in the radius log file, notice the from client 207.32.194.0/23 is the subnet which is in the clients.conf file also attached below. So rather than manually entering all my router ips is there a shorter way to edit the way the radius.log file is built? *SAMPLE from Radius.log Fri Jun 3 12:39:17 2011 : Auth: Login incorrect: [00:60:B3:3C:A2:3C/] (from cli ent 207.32.194.0/23 port 2207252597) *SAMPLE from clients.conf file client 207.32.194.0/23 { secret = nottellin shortname = } I did browse thru some of the previous posts but never really saw any answers... I have a feeling I will need to do what the clients.conf file recommends and that is to manually enter each one of my routers :( a script would be nice to do that but I am not very educated in scripting etc... thanks for any additional help! Jason Frawley www.sm-email.com 208-740-3290 On Fri, Jun 3, 2011 at 12:31 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sat, Jun 4, 2011 at 2:19 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
Sorry I meant to say log the client ip and not the subnet in which its in ....eg. log shows request from 207.32.194.0/23 but I need it to show the actual ip in which the request came from. Eg. 207.32.194.4
There was a post sometime ago about custom log format, search the list archive if you're interested in the complete responses. Basically you can either: - ADD what information logged (look at radiusd.conf, look for msg) - log to a NEW file, with another format altogether (see linelog module)
Whichever path you choose, looks like you can use NAS-IP-Address or Client-IP-Address attribute as the extra information.
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sat, Jun 4, 2011 at 2:46 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
There may be some confusion, I am currently logging auth and accounting information in seperate folders that are labeled by client ip addresses, but those are the detail auth logs, I am working with just the radius.log file. Below is a sample of what I get in the radius log file, notice the from client 207.32.194.0/23 is the subnet which is in the clients.conf file also attached below.
No confusion here.
So rather than manually entering all my router ips is there a shorter way to edit the way the radius.log file is built?
Did you read up on the two options I sent eariler? -- Fajar
- ADD what information logged (look at radiusd.conf, look for msg) -- unable to find msg in radiusd.conf file - log to a NEW file, with another format altogether (see linelog module) -- unable to find anything on linelog module with option one I do see where I can create the detail logs, and they are being created, should I just change the directory and the file name to radius.log or is that going to conflict with other opertations? option2- I am not finding any files etc referring to linelog modules :( Jason On Fri, Jun 3, 2011 at 3:34 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sat, Jun 4, 2011 at 2:46 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
There may be some confusion, I am currently logging auth and accounting information in seperate folders that are labeled by client ip addresses, but those are the detail auth logs, I am working with just the radius.log file. Below is a sample of what I get in the radius log file, notice the from client 207.32.194.0/23 is the subnet which is in the clients.conf file also attached below.
No confusion here.
So rather than manually entering all my router ips is there a shorter way to edit the way the radius.log file is built?
Did you read up on the two options I sent eariler?
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
it may help to note- I am using windows version of FreeRadius ver 1.1.7 r2 On Fri, Jun 3, 2011 at 3:45 PM, Jason Frawley <jfrawley81@gmail.com> wrote:
- ADD what information logged (look at radiusd.conf, look for msg) -- unable to find msg in radiusd.conf file - log to a NEW file, with another format altogether (see linelog module) -- unable to find anything on linelog module with option one I do see where I can create the detail logs, and they are being created, should I just change the directory and the file name to radius.log or is that going to conflict with other opertations?
option2- I am not finding any files etc referring to linelog modules :(
Jason
On Fri, Jun 3, 2011 at 3:34 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sat, Jun 4, 2011 at 2:46 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
There may be some confusion, I am currently logging auth and accounting information in seperate folders that are labeled by client ip addresses, but those are the detail auth logs, I am working with just the radius.log file. Below is a sample of what I get in the radius log file, notice the from client 207.32.194.0/23 is the subnet which is in the clients.conf file also attached below.
No confusion here.
So rather than manually entering all my router ips is there a shorter way to edit the way the radius.log file is built?
Did you read up on the two options I sent eariler?
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Sat, Jun 4, 2011 at 5:48 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
it may help to note- I am using windows version of FreeRadius ver 1.1.7 r2
The usual reponse would be "upgrade".
On Fri, Jun 3, 2011 at 3:45 PM, Jason Frawley <jfrawley81@gmail.com> wrote:
- ADD what information logged (look at radiusd.conf, look for msg) -- unable to find msg in radiusd.conf file
See http://wiki.freeradius.org/radiusd.conf for example from 2.1.x
- log to a NEW file, with another format altogether (see linelog module) -- unable to find anything on linelog module
https://github.com/alandekok/freeradius-server/blob/v2.1.x/raddb/modules/lin... Basically with that you can create additional log files anywhere, using any format you choose. -- Fajar
Yeah, that version may help ;). Lots has changed since then, if you can upgrade I would. Else..... If you run it in debug mode does it spew what info you want? Maybe you can somehow wrap it with a "tee" process and then massage that output as you wish. From: Jason Frawley [mailto:jfrawley81@gmail.com] Sent: Friday, June 03, 2011 05:48 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Log NAS IP rather than Shortname - PLEASE it may help to note- I am using windows version of FreeRadius ver 1.1.7 r2 On Fri, Jun 3, 2011 at 3:45 PM, Jason Frawley <jfrawley81@gmail.com<mailto:jfrawley81@gmail.com>> wrote: - ADD what information logged (look at radiusd.conf, look for msg) -- unable to find msg in radiusd.conf file - log to a NEW file, with another format altogether (see linelog module) -- unable to find anything on linelog module with option one I do see where I can create the detail logs, and they are being created, should I just change the directory and the file name to radius.log or is that going to conflict with other opertations? option2- I am not finding any files etc referring to linelog modules :( Jason On Fri, Jun 3, 2011 at 3:34 PM, Fajar A. Nugraha <list@fajar.net<mailto:list@fajar.net>> wrote: On Sat, Jun 4, 2011 at 2:46 AM, Jason Frawley <jfrawley81@gmail.com<mailto:jfrawley81@gmail.com>> wrote:
There may be some confusion, I am currently logging auth and accounting information in seperate folders that are labeled by client ip addresses, but those are the detail auth logs, I am working with just the radius.log file. Below is a sample of what I get in the radius log file, notice the from client 207.32.194.0/23<http://207.32.194.0/23> is the subnet which is in the clients.conf file also attached below.
No confusion here.
So rather than manually entering all my router ips is there a shorter way to edit the way the radius.log file is built?
Did you read up on the two options I sent eariler? -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
it appears I wont be able to easily upgrade because of the fact its windows based and was downloaded from freeradius.net and their site is not exactly working again but when I was able to get to parts of the page it looks as if they only released one version, so I have and extra rack mount computer here I may just have to dump linux on to and I been meaning to do that anyways for a secondary dns server and for additional websites etc.. debug mode does not show the info I want last I checked, but my syslog does have the correct info from all of the routers so I will train dad how to look at both files and search them depending on what info he needs... I am basically just tryin to make my dads life easier so when I am not in town he can still manage things. I greatly appreciate all your help! Jason On Fri, Jun 3, 2011 at 3:58 PM, Gary Gatten <Ggatten@waddell.com> wrote:
Yeah, that version may help ;). Lots has changed since then, if you can upgrade I would. Else..... If you run it in debug mode does it spew what info you want? Maybe you can somehow wrap it with a "tee" process and then massage that output as you wish.
*From*: Jason Frawley [mailto:jfrawley81@gmail.com] *Sent*: Friday, June 03, 2011 05:48 PM *To*: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
*Subject*: Re: Log NAS IP rather than Shortname - PLEASE
it may help to note- I am using windows version of FreeRadius ver 1.1.7 r2
On Fri, Jun 3, 2011 at 3:45 PM, Jason Frawley <jfrawley81@gmail.com>wrote:
- ADD what information logged (look at radiusd.conf, look for msg) -- unable to find msg in radiusd.conf file - log to a NEW file, with another format altogether (see linelog module) -- unable to find anything on linelog module with option one I do see where I can create the detail logs, and they are being created, should I just change the directory and the file name to radius.log or is that going to conflict with other opertations?
option2- I am not finding any files etc referring to linelog modules :(
Jason
On Fri, Jun 3, 2011 at 3:34 PM, Fajar A. Nugraha <list@fajar.net> wrote:
On Sat, Jun 4, 2011 at 2:46 AM, Jason Frawley <jfrawley81@gmail.com> wrote:
There may be some confusion, I am currently logging auth and accounting information in seperate folders that are labeled by client ip addresses, but those are the detail auth logs, I am working with just the radius.log file. Below is a sample of what I get in the radius log file, notice the from client 207.32.194.0/23 is the subnet which is in the clients.conf file also attached below.
No confusion here.
So rather than manually entering all my router ips is there a shorter way to edit the way the radius.log file is built?
Did you read up on the two options I sent eariler?
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
it may help to note-� I am using windows version of FreeRadius ver 1.1.7 r2
from your previous message I could gues you were running an old version. 1.1.x is ead. upgrade to 2.1.x - this has all the features that you are looking for - certainly adjusting LOG file stuff is already there.... code changes to 1.1.x to do this? i doubt it would ever happen alan
participants (4)
-
Alan Buxey -
Fajar A. Nugraha -
Gary Gatten -
Jason Frawley