Hello again,
I'm still fighting my little battle in copying attributes from the inner
to the outer tunnel etc. I have now gotten as far that logging
access-accepts is working as I want, but I'm now struggling logging
access-rejects. Here's my SQL from dialup.conf:
postauth_query = "INSERT INTO ${postauth_table} \
(username, pass, reply, authdate)
VALUES \
('%{reply:SQL-User-Name}',
'%{reply:Packet-Type}', \
'%{reply:Calling-Station-Id}', '%S');"
From a rejected session, I get this:
Fri Jan 28 09:48:05 2011 : Info: (5) [ttls] Got tunneled reply code 3
Filter-Id = "OBFUSCATED"
SQL-User-Name = "OBFUSCATED"
Calling-Station-Id = "OBFUSCATED"
MS-CHAP-Error = "\226E=691 R=1"
....
Fri Jan 28 09:48:05 2011 : Info: (5) +- entering group REJECT {...}
Fri Jan 28 09:48:05 2011 : Info: (5) [sql] expand:
%{Stripped-User-Name} -> {am=1}OBFUSCATED
Fri Jan 28 09:48:05 2011 : Info: (5) [sql] expand:
%{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> {am=1}OBFUSCATED
Fri Jan 28 09:48:05 2011 : Info: (5) [sql] sql_set_user escaped user -->
'{am=1}OBFUSCATED'
Fri Jan 28 09:48:05 2011 : Info: (5) [sql] expand: INSERT INTO
radpostauth (username, pass, reply,
authdate) VALUES
('%{reply:SQL-User-Name}', '%{reply:Packet-Type}',
'%{reply:Calling-Station-Id}', '%S'); -> INSERT INTO
radpostauth (username, pass, reply,
authdate) VALUES ('',
'Access-Reject', '', '2011-01-28 09:48:05');
Fri Jan 28 09:48:05 2011 : Debug: rlm_sql (sql) in sql_postauth: query
is INSERT INTO radpostauth (username,
pass, reply, authdate) VALUES ('',
'Access-Reject', '', '2011-01-28 09:48:05');
From an accepted session, everything works fine and the SQL-User-Name
and Calling-Station-Id are logged as expected. How come the attributes
are empty, even though they are in the reply, only when an access-reject
is given?
- Kristoffer
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
