Re: failed login (log_badlogins script)
On Fri, 14 Nov 2003, apellido jr., wilfredo p wrote: > dialup_admin failed login doesnt show any report > > -- > sql debug > - > > # login time server terminate cause callerid > DEBUG(SQL,MYSQL DRIVER): Query: SELECT > AcctStopTime,UserName,NASIPAddress,NASPortId,AcctTerminateCause,CallingStationId > FROM radacct WHERE AcctStopTime <= '2003-11-14 > 20:20:24' AND AcctStopTime >= '2003-11-14 19:50:24' ^^ Isn't it clear? The failed logins page will by default only show the last 30 minutes (or as many as you configure it through the general_most_recent_fl configuration directive as IS described in admin.conf) > AND (AcctTerminateCause LIKE 'Login-Incorrect%' OR > AcctTerminateCause LIKE 'Invalid-User%' OR > AcctTerminateCause LIKE 'Multiple-Logins%') ORDER BY > AcctStopTime desc LIMIT 10; > DEBUG(SQL,MYSQL DRIVER): Query Result: > > - > > when i tried to run log_badlogins, it take so long to > end. any suggestion, comment? thanks That's what it is supposed to do. It does the equivalent of a tail -f radius.log and logs the failed logins in the database. It should run all the time. > > > = > wilfredo pahilanga apellido jr. > technical support > mactan online > bacolod city, philippines > +63 34 4348311 > > If you can't hear me, it's because i'm in parentheses. > > __ > Do you Yahoo!? > Protect your identity with Yahoo! Mail AddressGuard > http://antispam.yahoo.com/whatsnewfree > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
failed login (log_badlogins script)
dialup_admin failed login doesnt show any report -- sql debug - # login time server terminate cause callerid DEBUG(SQL,MYSQL DRIVER): Query: SELECT AcctStopTime,UserName,NASIPAddress,NASPortId,AcctTerminateCause,CallingStationId FROM radacct WHERE AcctStopTime <= '2003-11-14 20:20:24' AND AcctStopTime >= '2003-11-14 19:50:24' AND (AcctTerminateCause LIKE 'Login-Incorrect%' OR AcctTerminateCause LIKE 'Invalid-User%' OR AcctTerminateCause LIKE 'Multiple-Logins%') ORDER BY AcctStopTime desc LIMIT 10; DEBUG(SQL,MYSQL DRIVER): Query Result: - radacct table mysql> select * from radacct; +---+---+--+--+---++---+-+-+-+-+---+---+--+-+--+-+--+--+-++-++---+ | RadAcctId | AcctSessionId | AcctUniqueId | UserName | Realm | NASIPAddress | NASPortId | NASPortType | AcctStartTime | AcctStopTime| AcctSessionTime | AcctAuthentic | ConnectInfo_start | ConnectInfo_stop | AcctInputOctets | AcctOutputOctets | CalledStationId | CallingStationId | AcctTerminateCause | ServiceType | FramedProtocol | FramedIPAddress | AcctStartDelay | AcctStopDelay | +---+---+--+--+---++---+-+-+-+-+---+---+--+-+--+-+--+--+-++-++---+ | 1 | | 235cd91b0ffaca7b433075696d487b93 | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:02:03 | 2003-11-13 22:02:03 | 0 | NULL | NULL | NULL | 0 |0 | | | Login-Incorrect | NULL| NULL | | NULL | NULL | | 2 | | 2f1a4527f658172f1be13fb44f7f0589 | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:03:06 | 2003-11-13 22:03:06 | 0 | NULL | NULL | NULL | 0 |0 | | | Invalid-User (rlm_counter: Maxim | NULL| NULL | | NULL | NULL | | 3 | | 70f79c55f8ecac877d7e68ca72c9c871 | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:05:18 | 2003-11-13 22:05:18 | 0 | NULL | NULL | NULL | 0 |0 | | | Outside allowed timespan (time a | NULL| NULL | | NULL | NULL | | 4 | | f123f3b60856f7247c8faa92c1c771ab | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:19:25 | 2003-11-13 22:19:25 | 0 | NULL | NULL | NULL | 0 |0 | | | Outside allowed timespan (time a | NULL| NULL | | NULL | NULL | | 5 | 0316 | | cache| | 203.177.29.204 | 6 | Async | 2003-11-14 00:00:53 | 2003-11-14 00:11:54 | 661 | | 33600 V42bis | 33600 V42bis |8352 | 5246 | | | | Framed-User | PPP | 203.177.29.211 | 0 | 0 | | 6 | 0317 | | cache| | 203.177.29.204 | 6 | Async | 2003-11-14 00:14:23 | 2003-11-14 00:38:28 | 0 | | 33600 V42bis | | 0 | 0 | | | | Framed-User | PPP | 203.177.29.211 | 0 | 0 | | 7 | 0318 | | cache| | 203.177.29.204 | 6 | Async | 2003-11-14 00:41:22 | 2003-11-14 00:51:23 | 601 | | 33600 V42bis | 33600 V42bis |8235 | 5692 | |
