Is there a way log EAP NAK reason with linelog?
Alan DeKok
aland at deployingradius.com
Thu Jul 11 16:21:43 UTC 2024
On Jul 11, 2024, at 6:36 AM, Rahman DURAN via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> I only support EAP-PEAP and EAP-TTLS for EAP types. Is there a way to log
> the reason for EAP NAK while using "linelog"? For now, "%{EAP-Type}"
> attribute prints "NAK" but could not find any additional attribute for the
> NAK reason? If there is no default attribute, I can set a custom one with
> "unlang" somewhere, so I can use it in "linelog" template?
If the client sends NAK, my $0.02 is to just log the EAP-Message from the request. The trailing bytes of EAP-Message are the various EAP types that the client is trying to use.
Actually decoding the NAK values will be a bit more work.
Alan DeKok.
More information about the Freeradius-Users
mailing list