How to see username from inner tunnel
Brian C. Huffman
bhuffman at etinternational.com
Thu Oct 30 20:56:23 CET 2014
All,
So I've got a wireless NAS doing WPA/Enterprise (PEAP). It's working,
but now I'm looking at the accounting. Users on this list explained the
difference between the outer ID and inner ID and I believe I have it
working correctly.
However for logging purposes, I can't seem to find anywhere that the
inner ID is logged. I tested this by connecting from my phone (Android)
and specified a username and an "anonymous" username of "blah". I'm
assuming that when I put something in "anonymous", that's what shows up
in the outer ID.
At any rate, it goes through the authentication and even the LDAP group
check so I figure it must be getting my real username somewhere, but
when I look in the accounting logs, I don't see it:
[root at auth01 radius]# radlast
blah 000:unifi-ap Thu Oct 30 15:38 - 15:45 (00:06)
from detail-20141030:
<snip>
Thu Oct 30 15:38:46 2014
Acct-Session-Id = "54526229-00000019"
Acct-Status-Type = Start
Acct-Authentic = RADIUS
User-Name = "blah"
NAS-IP-Address = 192.168.40.23
NAS-Identifier = "dc9fdb924033"
NAS-Port = 0
Called-Station-Id = "C2-9F-DB-93-40-33:ETI-I"
Calling-Station-Id = "F8-F1-B6-39-99-69"
NAS-Port-Type = Wireless-802.11
Connect-Info = "CONNECT 0Mbps 802.11b"
Acct-Unique-Session-Id = "ca2f16affb23b969"
Timestamp = 1414697926
<snip>
blah is NOT my real username....but that's what I'm seeing logged.
Is there any way to see the real username?
Thanks,
Brian
More information about the Freeradius-Users
mailing list