is there a way to identify the very first ACCESS-REQUEST
Matthew Newton
matthew at newtoncomputing.co.uk
Mon May 22 20:20:52 CEST 2017
On Mon, May 22, 2017 at 01:04:59PM -0400, Michael Hocke wrote:
> I want to improve our logging and want to keep track of
> authentication attempts that do not complete. I was thinking of
> logging the very first ACCESS-REQUEST and then later on the
> result. Is there a good way to identify the very first
> ACCESS-REQUEST from the client with unlang? Maybe by checking
> the contents of the session-state list or some such? Any ideas?
I look to see if it's an EAP identity. Which works OK if you're
doing EAP.
if (&EAP-Message =~ /^0x02......01/) {
detail
}
eap
--
Matthew
More information about the Freeradius-Users
mailing list