Log final reply packet including any VSA's

Arnab Roy arnabroy at mail.com
Wed Feb 8 23:45:15 CET 2017

   Thanks Alan, any chance I can change the output formating of that , I
   need the fields comma separated.

   Sent: Wednesday, February 08, 2017 at 10:32 PM
   From: A.L.M.Buxey at lboro.ac.uk
   To: "FreeRadius users mailing list"
   <freeradius-users at lists.freeradius.org>
   Subject: Re: Log final reply packet including any VSA's
   > Just wanted to check if their are any ways of logging the final reply
   > sent to NAS. By this I mean this bit from radiusd -X
   > (10) Sent Access-Accept Id 10 from to
   > length 0
   > (10) Aruba-User-Role = "authenticated"
   > (10) MS-MPPE-Recv-Key =
   > 0xf2af9bba1de508511fa7ed2d41fdcef297593e51a2901c8d90e64889345c4190
   > (10) MS-MPPE-Send-Key =
   > 0xf522b78b422d7a5a23302b3370fce4a080e8cad27e83391f220645ca8f269f46
   > (10) EAP-Message = 0x030a0004
   > (10) Message-Authenticator = 0x00000000000000000000000000000000
   > (10) Finished request
   > In this its sending back an Aruba VSA.
   > I can get all of the above by doing %{reply:[*]} but it doesnt log
   > actual VSA in it. Just checking if there is an easy way of doing. I
   > need both the name of the attribute and the actual attribute value
   > returned like its showing up on this debug.
   sure - 'reply_log' - just enable it in the post-auth section of the
   virtual server,
   read the detail.log module file for more info.
   List info/subscribe/unsubscribe? See


   1. http://www.freeradius.org/list/users.html

More information about the Freeradius-Users mailing list