Logging configuration

Ivan Kalik tnt at kalik.net
Tue Sep 29 20:25:24 CEST 2009


> What we need is logging all the real FINAL messages that RADIUS sends to
> the
> client Access-Rejects/Access-Accept in one line with simple detail about
> NAS
> and UserName:
>
> Something like:
> Time,Access-Reject(or Accept),NAS-IP-Address,User-Name
>
>
> I looked into "modules/detail.log" module and I have a couple of questions
> because apparently I have problem using it:
>
> 1. In post-auth I need to put it many places depending on unlang logic

Why? Only two - uncomment one that is already there and add one to REJECT.

> 2. In post-auth reply_log does not log "User-Name" for PAP requests with
> Kerberos authentication
>
> In my case I have something like that
> Tue Sep 29 13:38:46 2009
>         Packet-Type = Access-Accept
>         Attr1 = Val1
>         Attr2 = Val2
> But User-Name is not logged. Is the a way to log it?

update reply {
     User-Name = "%{User-Name}
}

> 3)
> If I do not want to use a separate file for every Client-Ip-Address
> detailfile = ${radacctdir}/%{Client-IP-Address}/auth-detail-%Y%m%d
> Is there a way to force it to log Client-IP-Address/NAS-Ip address into
> one
> file as prt of log message line?
> detailfile = ${radacctdir}/auth-detail-%Y%m%d

That will do it.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list