getting Freeradius to recorde login failure, etc
Duane Cox
duanec at mail.illicom.net
Wed May 17 19:14:05 CEST 2006
Guys, it's pretty easy... The only things that need to be done is to have
an sql statement like so...
postauth_query = "insert into ${postauth_table} (UserName, Password,
RadReply, NASIPAddress, NASIdentifier, NASPort, NASPort
Type, CalledStationId, CallingStationId) values ('%{User-Name}',
'%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%{NAS-I
P-Address}', '%{NAS-Identifier}', '%{NAS-Port}', '%{NAS-Port-Type}',
'%{Called-Station-Id}', '%{Calling-Station-Id}')"
and also a line in the postauth section like so...
post-auth {
sql
Post-Auth-Type REJECT {
sql
}
}
That will log both success and failures.
Alan, Is there any way to have a conditional statement in the post-auth
section, something like: if NASIPAddress == '1.1.1.1' then don't process
postauth?
----- Original Message -----
From: "Christopher Carver" <ccarver at pennswoods.net>
To: "FreeRadius users mailing list" <freeradius-users at lists.freeradius.org>
Sent: Wednesday, May 17, 2006 11:51 AM
Subject: Re: getting Freeradius to recorde login failure, etc
> I appreciate the dialogue we have here. I have been interested in doing
> this as well, and have been tinkering with some code outside of
> Freeradius to insert logins into a seperate table by reading the
> radius.log file. I've been doing it this way because I didn't know it
> was within Freeradius's capabilities. So, I too am interested in
> hearing the specifics on how this can be done. If someone can point me
> to the right direction, I would be very appreciative. Perhaps I could
> even explore it to its fullest and submit some documentation to the
> developers to include with the software to make things a bit more clear.
>
> Thanks in advance,
>
> Chris Carver
> Pennswoods.Net
> Network Engineer
>
> Jeremy ohara wrote:
> > there is no sign of any of this in the documentation if you can show
> > me where it "shows" what and how to do it and code, by all means show
me!
> >
> > Jeremy
> >
> >
> > -----Original Message-----
> > From: "Alan DeKok" <aland at nitros9.org>
> > To: FreeRadius users mailing list
> > <freeradius-users at lists.freeradius.org>
> > Date: Wed, 17 May 2006 10:33:43 -0400
> > Subject: Re: getting Freeradius to recorde login failure, etc
> >
> > "Jeremy ohara" <Admin at jemisp.com> wrote:
> > > i dont want to sound rude, etc but your not really answering my
> > question.
> > > you only answered half of it
> >
> > At some point you *do* have to read the documentation. While
people
> > may be kind enough to answer your questions on the list, most of
those
> > answers are cut & pasted from the existing documentation.
> >
> > Alan DeKok.
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> >
>
> --------------------------------------------------------------------------
--
> > This email has been scanned for Virus by MDaemon AntiVirus part of
> > MDaemon.
> > Updated daily to keep up-to-date with all new and old viruses.
>
> --------------------------------------------------------------------------
--
> > ------------------------------------------------------------------------
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
More information about the Freeradius-Users
mailing list