Packet-Src-IP-Address in logs
Brantley Padgett
brantleyp1 at yahoo.com
Fri Sep 16 15:24:18 UTC 2022
I think what I'm seeing is just differences in versions, but wanted to get some expert opinions.
I have an old Solaris system running
radiusd: FreeRADIUS Version 3.0.11, for host sparc-sun-solaris2.11, built on Jul 14 2016 at 00:32:22
And a newly built Ubuntu system running the repo version
radiusd: FreeRADIUS Version 3.0.20, for host x86_64-pc-linux-gnu, built on Apr 14 2022 at 20:32:00
On the Solaris, in the logs, I see logs that look more or less like
```
Fri Sep 16 15:16:03 2022 : Auth: (2303098) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [jimmy] (from client all_ipv4 port 9910 cli 112.217.164.107)
Fri Sep 16 15:16:12 2022 : Auth: (2303099) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [gemeaux] (from client all_ipv4 port 13949 cli 184.168.126.75)
Fri Sep 16 15:16:14 2022 : Auth: (2303100) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [root] (from client all_ipv4 port 13932 cli 209.141.59.116)
```
On Ubuntu, I see less detail
```
Fri Sep 16 08:49:02 2022 : Auth: (0) Login OK: [bpadgett] (from client all_ipv4 port 0)
Fri Sep 16 09:15:01 2022 : Auth: (1) Login OK: [bpadgett] (from client all_ipv4 port 0)
Fri Sep 16 09:15:06 2022 : Auth: (2) Login incorrect (No Auth-Type found: rejecting the user via Post-Auth-Type = Reject): [bpadgett] (from client all_ipv4 port 0)
Fri Sep 16 09:15:10 2022 : Auth: (3) Login incorrect (ldap: Bind credentials incorrect: Invalid credentials): [bpadgett] (from client all_ipv4 port 0)
```
(those last two were me testing wrong info or blank)
I am able to get the Packet-Src-IP-Address in msg_goodpass or msg_badpass, but I'm curious if there is a configuration I'm missing otherwise.
The radiusd.conf used on Ubuntu is almost line for line identical since I used the Solaris config to build on. They both appear to have the same mods enabled and on the mods-available/detail and detail.log I don't see any differences.
I know I can go with the msg_good/badpass option, I just want to make sure I'm not missing some crucial but simple option.
The logging section of radiusd.conf:
```
log {
destination = files
colourise = yes
file = ${logdir}/${name}.log
syslog_facility = daemon
# Log the full User-Name attribute, as it was found in the request.
#
# allowed values: {no, yes}
#
stripped_names = no
# Log authentication requests to the log file.
#
# allowed values: {no, yes}
#
auth = yes
# Log passwords with the authentication requests.
# auth_badpass - logs password if it's rejected
# auth_goodpass - logs password if it's correct
#
# allowed values: {no, yes}
#
auth_badpass = no
auth_goodpass = no
# The message when the user exceeds the Simultaneous-Use limit.
#
msg_denied = "You are already logged in - access denied"
#msg_badpass = "testbad:%{Packet-Src-IP-Address}"
#msg_goodpass = "testgood:%{Packet-Src-IP-Address}"
}
```
Brantley Padgett
The question is not how far. The question is,
do you possess the constitution,
the depth of faith, to go as far as is needed?
-Boondock Saints
More information about the Freeradius-Users
mailing list