Is there a way log EAP NAK reason with linelog?

Alan DeKok aland at deployingradius.com
Thu Jul 11 16:21:43 UTC 2024


On Jul 11, 2024, at 6:36 AM, Rahman DURAN via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> I only support EAP-PEAP and EAP-TTLS for EAP types. Is there a way to log
> the reason for EAP NAK while using "linelog"? For now, "%{EAP-Type}"
> attribute prints "NAK" but could not find any additional attribute for the
> NAK reason? If there is no default attribute, I can set a custom one with
> "unlang" somewhere, so I can use it in "linelog" template?

  If the client sends NAK,  my $0.02 is to just log the EAP-Message from the request.  The trailing bytes of EAP-Message are the various EAP types that the client is trying to use.

  Actually decoding the NAK values will be a bit more work.

  Alan DeKok.




More information about the Freeradius-Users mailing list