post-proxy section ( 3.0.9 bump )

Peter Balsianok balsianok.peter at gmail.com
Thu Jun 18 13:27:31 CEST 2015


Thank you for answer. As you can see log_proxy_reply (instance of the
linelog module) doesn't print Packet-Type attribute.

But:
(0) log_proxy_reply: EXPAND /app_log/radius/auth/radius.log
(0) log_proxy_reply:    --> /app_log/radius/auth/radius.log
(0) log_proxy_reply: EXPAND %t : Info PROXY-REPLY(%{User-Name}):
%{pairs:proxy-reply:}
(0) log_proxy_reply:    --> Thu Jun 18 13:24:00 2015 : Info
PROXY-REPLY(421905725408 at proxy.corp): Proxy-State = 0x313838
(0)     [log_proxy_reply] = ok
(0)     if (proxy-reply:Packet-Type == Access-Reject) {
(0)     ERROR: Failed retrieving values required to evaluate condition
(0)   } # post-proxy = ok
(0) Login incorrect (Home Server says so): [421905725408 at proxy.corp/<via
Auth-Type = CHAP>] (from client localhost port 385 cli 421905725408)

Thx.

On Thu, Jun 18, 2015 at 12:48 PM, Alan DeKok <aland at deployingradius.com>
wrote:

> On Jun 18, 2015, at 5:51 AM, Peter Balsianok <balsianok.peter at gmail.com>
> wrote:
> > I want to log proxy request in the case of Access-Reject from proxy
> server
> >
> > In the conf file (site-enables/default):
> >
> > post-proxy {
> >  log_proxy_reply
> >  Post-Proxy-Type Fail-Authentication {
>
>   That's for "failed to get a reply the request".  Not "the reply was
> Access-Reject".
>
>   You want:
>
> post-proxy {
>         ...
>         if (proxy-reply:Packet-Type == Access-Reject) {
>                 log_proxy_request
>                 log_control
>         }
>         ...
> }
>
>   Alan DeKok.
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html


More information about the Freeradius-Users mailing list