detail logging not logging?
Brad Clemmons Jr
brad.clemmons at gmail.com
Fri Jan 16 18:25:51 CET 2009
Hi all.
I seem to be missing something somewhere. I'm new to freeradius but I
managed to get a system up and running.
Here's a copy of my stripped down radiusd.conf. I'm only doing accounting
right now so no auth stuff. I know radius itself is working because I can
change the secret in the client.conf and I get the errors in the radius.log
when the client sends.
The issue I'm having now though is that I can't seem to get the detail
logging to work so the only time I get any logs is if I purposefully foul
something up to cause it to error. Right now I have the detail statement at
the bottom of the file. I've tried moving it into the modules section but
that didn't make any different. I also tried manually specifying the fully
qualified path for the log file as well to no avail.
I verified user and group permissions in the necessary directories, but I
must still be missing something. Anyone able to point out what's wrong but
right under my nose?
Also it's worth noting this is running on Solaris10x86 under a zone.
############################################################
## radiusd.conf -- FreeRADIUS server configuration file.
##
## http://www.freeradius.org/
## $Id$
##
prefix = /opt/freeradius
exec_prefix = ${prefix}
instance_prefix = /opt/voip/freeradius
sysconfdir = ${instance_prefix}/etc
localstatedir = ${instance_prefix}/var
sbindir = ${exec_prefix}/sbin
logdir = ${instance_prefix}/logs
raddbdir = ${instance_prefix}/etc
radacctdir = ${instance_prefix}/var/radacct
#
# name of the running server. See also the "-n" command-line option.
name = radiusd
# Location of config and logfiles.
confdir = ${raddbdir}
run_dir = ${localstatedir}/run
# Should likely be ${localstatedir}/lib/radiusd
db_dir = ${raddbdir}
#
# libdir: Where to find the rlm_* modules.
#
#
libdir = ${exec_prefix}/lib
# pidfile: Where to place the PID of the RADIUS server.
#
pidfile = ${run_dir}/${name}.pid
# user/group: The name (or #number) of the user/group to run radiusd as.
#
user = ******
group = ******
# max_request_time: The maximum time (in seconds) to handle a request.
#
max_request_time = 30
# cleanup_delay: The time to wait (in seconds) before cleaning up
cleanup_delay = 5
# max_requests: The maximum number of requests which the server keeps
max_requests = 1024
# listen: Make the server listen on a particular IP address, and send
listen {
type = acct
ipaddr = *
port = 1813
}
# hostname_lookups: Log the names of clients or just their IP addresses
hostname_lookups = no
# Core dumps are a bad thing. This should only be set to 'yes'
allow_core_dumps = no
# Regular expressions
regular_expressions = yes
extended_expressions = yes
#
# Logging section. The various "log_*" configuration items
log {
destination = files
file = ${logdir}/radius.log
syslog_facility = daemon
# Log the full User-Name attribute, as it was found in the request.
stripped_names = no
# Log authentication requests to the log file.
auth = no
# Log passwords with the authentication requests.
auth_badpass = no
auth_goodpass = no
}
# The program to execute to do concurrency checks.
checkrad = ${sbindir}/checkrad
# SECURITY CONFIGURATION
security {
max_attributes = 200
reject_delay = 1
status_server = yes
}
# PROXY CONFIGURATION
#
# proxy_requests: Turns proxying of RADIUS requests on or off.
proxy_requests = no
#$INCLUDE proxy.conf
# CLIENTS CONFIGURATION
$INCLUDE clients.conf
# THREAD POOL CONFIGURATION
thread pool {
# Number of servers to start initially --- should be a reasonable
# ballpark figure.
start_servers = 5
max_servers = 32
min_spare_servers = 3
max_spare_servers = 10
max_requests_per_server = 0
}
# MODULE CONFIGURATION
modules {
#
$INCLUDE ${confdir}/modules/
$INCLUDE eap.conf
$INCLUDE sql.conf
$INCLUDE sql/mysql/counter.conf
#$INCLUDE sql/postgresql/counter.conf
}
# Instantiation
instantiate {
exec
expr
expiration
logintime
}
######################################################################
#
# Policies that can be applied in multiple places are listed
# globally. That way, they can be defined once, and referred
# to multiple times.
#
######################################################################
$INCLUDE policy.conf
#$INCLUDE sites-enabled/
detail {
detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d
#detailfile = ${radacctdir}/%{NAS-IP-Address}/detail-%Y%m%d
#detailfile = ${radacctdir}/detail.log
detailperm = 0600
}
########################################################################
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20090116/9dd523c1/attachment.html>
More information about the Freeradius-Devel
mailing list