request log line items

[Matthew Newton]

On Thu, May 12, 2016 at 12:41:06PM +0200, Betibeteka Beranduetxea wrote:
> We are using FreeRADIUS Version 2.1.12 and PEAP auth for wifi clients
> since a quite long time.

That is very old; you should really upgrade.

> Could you explain what the lines in the log means? i.e, I'm getting
> lines like this one:
> 
> Thu May 12 11:56:39 2016 : Auth: Login OK: [xxx.xxx] (from client
> xxxx08 port 0 cli C0-38-96-26-37-B3)

OK.

> Which obviously means that user has sucessful logon and comes from NAS xxxx08.

Yes.

> I guess the "port" part means the port at NAS, but this is less clear
> for me, since we use freeradius exclusively for wifi access and I'm
> getting some log lines with other ports.

The port doesn't really mean much in a wireless context. It's
whatever the the NAS sends in the NAS-Port attribute, so look at
your NAS documentation to see what it means.

> But the main problem for me is the "cli" part, I guessed this would be
> some MAC address, may be the user's device one, may be NAS one, maybe
> some NATing router's one, but none of these possibilities are yet
> confirmed.

Calling-Station-Id attribute.

> After logging from my own laptop, that logged "MAC addres" is not my
> laptop's one, nor NAS or router one so I'm now quite puzzled

Most likely laptop wifi adapter MAC address, though depends on
what the NAS sends.

For more flexible logging than the built-in logging you should
look at the "linelog" module. It can write logs out with whatever
attributes you want.

Cheers,

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at le.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>