auth = yes logs too much, auth = no too little

[Matthew Newton]

On Thu, 2018-09-27 at 08:59 +0200, Hans-Christian Esperer wrote:
> I would like to log failed login attempts, so I can see the username
> that was
> tried. Is there a simple way to do this? Setting auth=yes in
> radiusd.conf also
> logs all successful attempts.

You could configure linelog to log details you want and call it in the
Post-Auth-Type REJECT section.

It'll get login attempts that complete but fail. It won't log attempts
where e.g. the EAP process stops half way through.

-- 
Matthew