User-Name in the Accounting log is being stripped
Clement Ogedengbe
c.ogedengbe at worc.ac.uk
Tue Apr 15 16:27:19 CEST 2014
Thanks.
I am actually not using the detail file. I am using a customized "detail" section "accounting_log" defined in detail.log file. My detail.log file has the following sections:
detail auth_log {
detailfile = ${radacctdir}/%Y%m%d/request-detail-%H:00
header = "%{Packet-Src-IP-Address} - %t"
log_packet_header = yes
detailperm = 0600
suppress {
User-Password
}
}
detail reply_log {
detailfile = ${radacctdir}/%Y%m%d/reply-detail
header = "%{Packet-Src-IP-Address} Returned from %{home_server:ipaddr} for User %{User-Name} - %t"
detailperm = 0600
}
detail accounting_log {
detailfile = ${radacctdir}/%Y%m%d/accounting-detail
header = "%{Packet-Src-IP-Address} - %t"
detailperm = 0600
}
Below is extract of the accounting section in sites-enabled/default file
accounting {
# detail
accounting_log
radutmp
attr_filter.accounting_response
}
Below is extract from reply_log for a particular user
10.255.252.248 Returned from roaming0.ja.net for User xxxxx at live.ucl.ac.uk - Tue Apr 15 10:49:59 2014
Packet-Type = Access-Accept
Tunnel-Private-Group-Id:0 = "222"
User-Name = "xxxxx at live.">>>>>>>>> "The user-name here is not the same as the one in the header."
Below is extract from accounting-detail for the same user
10.255.252.248 - Tue Apr 15 10:50:36 2014
User-Name = "xxxxx at live."
NAS-Port = 13
NAS-IP-Address = 10.255.252.248
Framed-IP-Address = 172.21.30.255
Many Thanks
Clement
-----Original Message-----
From: freeradius-users-bounces+c.ogedengbe=worc.ac.uk at lists.freeradius.org [mailto:freeradius-users-bounces+c.ogedengbe=worc.ac.uk at lists.freeradius.org] On Behalf Of Alan DeKok
Sent: 15 April 2014 14:00
To: FreeRadius users mailing list
Subject: Re: User-Name in the Accounting log is being stripped
Clement Ogedengbe wrote:
> I configured my detail reply_log file with the following:
>
> header = "%{Packet-Src-IP-Address} Returned from %{home_server:ipaddr}
> for User %{User-Name} - %t"
OK.
> The reply log captured shows the records below: The User-Name in the
> header for the reply_log shows the complete user-name whereas the
> user-name in the reply log record is being stripped for some reasons.
> As a result of this, the accounting log is showing the “stripped”
> user-name instead of the complete user name.
This is why we say to read the debug output. It would tell you what's going on.
In this case, you've edited the "reply_log" version of the detail module to add the header. You have NOT edited the "detail" module which is used by the accounting section.
Do that, and the problem will be fixed.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2014.0.4569 / Virus Database: 3882/7340 - Release Date: 04/13/14
More information about the Freeradius-Users
mailing list