post-proxy section ( 3.0.9 bump )
Peter Balsianok
balsianok.peter at gmail.com
Thu Jun 18 11:51:51 CEST 2015
Hi,
I want to log proxy request in the case of Access-Reject from proxy server
In the conf file (site-enables/default):
post-proxy {
log_proxy_reply
Post-Proxy-Type Fail-Authentication {
log_proxy_request
log_control
}
}
I've tested it with Fail or Fail-Authentication. The same result, proxy
request wasn't printed out.
Debug ouput:
....
post-proxy {
log_proxy_reply
Post-Proxy-Type Fail-AuthenticationOpening new proxy socket 'proxy
address * port 0'
Listening on proxy address * port 43154
(0) Proxying request to home server 127.0.0.1 port 10812 timeout 14.000000
(0) Sent Access-Request Id 129 from 0.0.0.0:43154 to 127.0.0.1:10812 length
182
(0) NAS-Port-Type = Virtual
(0) CHAP-Password = 0x0103d8b4385d31b89f746a2838b87fa049
(0) Service-Type = Framed-User
(0) Called-Station-Id = 'proxy.corp'
(0) Calling-Station-Id = '421905725408'
(0) Framed-Protocol = PPP
(0) CHAP-Challenge = 0xe3c6f04f3c08c6067deb9c79c060e966
(0) User-Name = '421905725408'
(0) Connect-Info = '8640000'
(0) NAS-IP-Address = 85.237.227.1
(0) NAS-Port = 385
(0) Qos-Policy-Policing = 'Uniq-Sess-ID385'
(0) Event-Timestamp = 'Jun 18 2015 11:48:41 CEST'
(0) Message-Authenticator := 0x00
(0) Proxy-State = 0x313131
Waking up in 0.3 seconds.
(0) Clearing existing &reply: attributes
(0) Received Access-Reject Id 129 from 127.0.0.1:10812 to 127.0.0.1:43154
length 25
(0) Proxy-State = 0x313131
(0) # Executing section post-proxy from file ./sites-enabled/default
(0) post-proxy {
(0) log_proxy_reply: EXPAND /app_log/radius/auth/radius.log
(0) log_proxy_reply: --> /app_log/radius/auth/radius.log
(0) log_proxy_reply: EXPAND %t : Info PROXY-REPLY(%{User-Name}):
%{pairs:proxy-reply:}
(0) log_proxy_reply: --> Thu Jun 18 11:48:41 2015 : Info
PROXY-REPLY(421905725408 at proxy.corp): Proxy-State = 0x313131
(0) [log_proxy_reply] = ok
(0) } # post-proxy = ok
(0) Login incorrect (Home Server says so): [421905725408 at proxy.corp/<via
Auth-Type = CHAP>] (from client localhost port 385 cli 421905725408)
(0) Using Post-Auth-Type Reject
(0) Post-Auth-Type sub-section not found. Ignoring.
(0) # Executing group from file ./sites-enabled/default
(0) Sent Access-Reject Id 111 from 127.0.0.1:1812 to 127.0.0.1:33136 length
0
(0) Finished request
What i am doing wrong ?
Thx.
More information about the Freeradius-Users
mailing list