Log final reply packet including any VSA's
Arnab Roy
arnabroy at mail.com
Wed Feb 8 23:45:15 CET 2017
Thanks Alan, any chance I can change the output formating of that , I
need the fields comma separated.
Sent: Wednesday, February 08, 2017 at 10:32 PM
From: A.L.M.Buxey at lboro.ac.uk
To: "FreeRadius users mailing list"
<freeradius-users at lists.freeradius.org>
Subject: Re: Log final reply packet including any VSA's
Hi,
> Just wanted to check if their are any ways of logging the final reply
> sent to NAS. By this I mean this bit from radiusd -X
>
> (10) Sent Access-Accept Id 10 from 172.21.8.201:1812 to
> 172.20.0.76:39604 length 0
> (10) Aruba-User-Role = "authenticated"
> (10) MS-MPPE-Recv-Key =
> 0xf2af9bba1de508511fa7ed2d41fdcef297593e51a2901c8d90e64889345c4190
> (10) MS-MPPE-Send-Key =
> 0xf522b78b422d7a5a23302b3370fce4a080e8cad27e83391f220645ca8f269f46
> (10) EAP-Message = 0x030a0004
> (10) Message-Authenticator = 0x00000000000000000000000000000000
> (10) Finished request
>
> In this its sending back an Aruba VSA.
>
> I can get all of the above by doing %{reply:[*]} but it doesnt log
the
> actual VSA in it. Just checking if there is an easy way of doing. I
> need both the name of the attribute and the actual attribute value
> returned like its showing up on this debug.
sure - 'reply_log' - just enable it in the post-auth section of the
virtual server,
read the detail.log module file for more info.
alan
-
List info/subscribe/unsubscribe? See
[1]http://www.freeradius.org/list/users.html
References
1. http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list