Can TLS related errors include client identifying info?

Mohamed Lrhazi Mohamed.Lrhazi at georgetown.edu
Mon Aug 3 21:02:21 CEST 2015


Hello,

Is there a way to tweak the logging to be able to identify the users that
are causing these errors:

Aug  3 14:57:09 [daemon.debug] radiusd:  (1157717) eap_peap: ERROR:
TLS_accept: Failed in SSLv3 read client certificate A
Aug  3 14:57:09 [daemon.err] radiusd:  SSL: SSL_read failed in a system
call (-1), TLS session fails.

Ideally userids, MAC addresses... could linelog be an option?

Thanks a lot,
Mohamed.


More information about the Freeradius-Users mailing list