syslog patch to rlm_detail in 1.1.0

Alan DeKok aland at ox.org
Mon Feb 27 23:19:45 CET 2006


Geoff Silver <geoff+freeradius at uslinux.net> wrote:
> I had to patch rlm_detail.c so that our auth and accounting logs are
> sent to a central syslog server.  We have about two dozen radius
> servers around the world, so auditing their access is painful.

  radrelay?  Have a central RADIUS server that does nothing but
accounting, and use radrelay to send the data there.  That server can
be made to do syslog (if you care).

  But I wouldn't suggest anyone use syslog like this.

> In order to avoid duplicating code, rlm_detail now builds a string and then
> prints it or syslog's it, rather than printing as it goes along.

  Many syslog servers have size limitations on the strings they can
handle.  They may not be able to take a full RADIUS attribute, much
less a list of RADIUS attributes in one string.

  Alan DeKok.




More information about the Freeradius-Devel mailing list