post-proxy section ( 3.0.9 bump )
Peter Balsianok
balsianok.peter at gmail.com
Thu Jun 18 13:27:31 CEST 2015
Thank you for answer. As you can see log_proxy_reply (instance of the
linelog module) doesn't print Packet-Type attribute.
But:
(0) log_proxy_reply: EXPAND /app_log/radius/auth/radius.log
(0) log_proxy_reply: --> /app_log/radius/auth/radius.log
(0) log_proxy_reply: EXPAND %t : Info PROXY-REPLY(%{User-Name}):
%{pairs:proxy-reply:}
(0) log_proxy_reply: --> Thu Jun 18 13:24:00 2015 : Info
PROXY-REPLY(421905725408 at proxy.corp): Proxy-State = 0x313838
(0) [log_proxy_reply] = ok
(0) if (proxy-reply:Packet-Type == Access-Reject) {
(0) ERROR: Failed retrieving values required to evaluate condition
(0) } # post-proxy = ok
(0) Login incorrect (Home Server says so): [421905725408 at proxy.corp/<via
Auth-Type = CHAP>] (from client localhost port 385 cli 421905725408)
Thx.
On Thu, Jun 18, 2015 at 12:48 PM, Alan DeKok <aland at deployingradius.com>
wrote:
> On Jun 18, 2015, at 5:51 AM, Peter Balsianok <balsianok.peter at gmail.com>
> wrote:
> > I want to log proxy request in the case of Access-Reject from proxy
> server
> >
> > In the conf file (site-enables/default):
> >
> > post-proxy {
> > log_proxy_reply
> > Post-Proxy-Type Fail-Authentication {
>
> That's for "failed to get a reply the request". Not "the reply was
> Access-Reject".
>
> You want:
>
> post-proxy {
> ...
> if (proxy-reply:Packet-Type == Access-Reject) {
> log_proxy_request
> log_control
> }
> ...
> }
>
> Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list