Tracing access request chain

Morris, Andi amorris at cardiffmet.ac.uk
Fri Mar 9 10:08:12 CET 2012


Cheers Alan, I'll investigate that.  I don't know why accounting wouldn't be turned on as I didn't set this server up initially.

Andi

-----Original Message-----
From: freeradius-users-bounces+amorris=cardiffmet.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+amorris=cardiffmet.ac.uk at lists.freeradius.org] On Behalf Of Alan Buxey
Sent: 08 March 2012 22:49
To: FreeRadius users mailing list
Subject: Re: Tracing access request chain

Hi,

>    I can see by grepping the logs in the radacct folder that the user sent
>    the access-request.  The results are in both the auth-detail and the
>    pre-proxy-detail logs.  From there I can see in my internal radius servers
>    that the access was accepted, but I cannot find any reference to the user,
>    or the any of the incoming conversation in the outgoing logs like
>    post-proxy, or reply.  I was hoping I’d see a reference to the username
>    and Access-Accept or similar.

you're not doing any accounting?  the accounting packets would have the user-name, IP address, MAC address etc in the accounting packets - the present of these shows tha the client is online and doing things.

the reply-detail log should have the user-name alongside the Access-Accept

for basic success/fail, the basic "auth = yes" in the log [] section of radiusd.conf will show the 'Login OK' and 'Invalid user' messages for each user-name

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
________________________________

From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>



More information about the Freeradius-Users mailing list