Re: radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread James Green
Nick Davis wrote: James, All of your accounting data is being written to the details files. You must not have put "sql" in the accounting section of radius.conf. You mean this?: accounting { # # Ensure that we have a semi-unique identifier for every # request, and many

Re: radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread Nick Davis
> modcall[authorize]: module "preprocess" returns ok for request 3 > radius_xlat: '/var/log/radiusd/radacct/81.20.32.130/auth-detail-20031215' > rlm_detail: > /var/log/radiusd/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands > to /var/log/radiusd/radacct/81.20.32.130/auth-detail-20031215

Re: radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread James Green
ZORBADELOS KONSTANTINOS wrote: At Mon, 15 Dec 2003 12:57:24 +, James Green wrote: ZORBADELOS KONSTANTINOS wrote: You said you used radiusd -x and not radiusd -X (case is important). Please send the output you receive from radiusd -X. See the rlm_sql and radius_xlat messages. Perhaps

Re: radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread ZORBADELOS KONSTANTINOS
ll :-( > > James > > > > > > >>Good morning all, > >> > >>We have a server with a really old copy of FreeRADIUS logging accounting > >>data to mysql 3.xx. We are now in the process of upgrading to the latest > >>stable of my

Re: radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread James Green
doesn't perform any SQL queries. I can get it to look up the user in the database even, it just refuses to log the result in the database. Its driving me up the wall :-( James Good morning all, We have a server with a really old copy of FreeRADIUS logging accounting data to mysql 3.x

Re: radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread ZORBADELOS KONSTANTINOS
At Mon, 15 Dec 2003 10:25:36 +, James Green wrote: > Use radiusd -X and see what happens with the requests. You should see the sql queries that the server tries to execute. > Good morning all, > > We have a server with a really old copy of FreeRADIUS logging accounting > dat

radius 0.9.3 / mysql 4.0.16: no logging

2003-12-15 Thread James Green
Good morning all, We have a server with a really old copy of FreeRADIUS logging accounting data to mysql 3.xx. We are now in the process of upgrading to the latest stable of mysql 4 and freeradius. We've built the system on a separate machine and it works during testing, except it doesn&

logging incomlete through daemontools (faq 3.4)

2003-11-28 Thread Sancho2k.net Lists
http://www.freeradius.org/faq/#3.4 describes setting up logging through daemontools/supervise. I am running freeradius-0.9.3 and have the following configuration as per the FAQ: $ cat /etc/radiusd/run #!/bin/sh exec 2>&1 exec /usr/local/sbin/radiusd -fyz -lstderr $ cat /etc/radiusd/

Re: Continious Account Logging

2003-11-25 Thread Alan DeKok
Arthur B Olsen <[EMAIL PROTECTED]> wrote: > Thanks, that seems to be the answer. The answer wich gives me an other > problem. The rfc says that Acct-Interim-Interval can only appear in the > Access-Accept message. So configure it like any other response attribute. Will the NAS listen to that

Re: Continious Account Logging

2003-11-24 Thread Arthur B Olsen
>Make your NAS send interim updates. You have no other choice. >Alan DeKok. Thanks, that seems to be the answer. The answer wich gives me an other problem. The rfc says that Acct-Interim-Interval can only appear in the Access-Accept message. And i have no idea where to put either of them. The

Re: Continious Account Logging

2003-11-24 Thread Alan DeKok
Arthur B Olsen <[EMAIL PROTECTED]> wrote: > My question is, is there anything i can do to get freeradius to write these > records with an interval like once a minute. Make your NAS send interim updates. You have no other choice. Alan DeKok. - List info/subscribe/unsubscribe? See http://www

Continious Account Logging

2003-11-24 Thread Arthur B Olsen
Hi, im pretty new to radius. But i hope this is the right place to ask my question. It not, please tell me, and i won't do again:) Short story: My setup is: pppoe-server->pppd->radiusclient->freeradius->postgresql. And it works just fine, and fast. But there's one thing wich troubles me. Accoun

Logging is no longer working

2003-11-21 Thread Mikael M. Hansen
as the old ones. I cannot find any info that the anything should have changed with regards to logging. I have "log_auth = yes" in radiusd.conf and I have also tried including -y on the commandline for radiusd. Does anyone have any ideas? MVH / Best regards Mikael M. Hansen IT-adm

Re: Logging realm connections

2003-09-24 Thread VCI Help Desk
    Ok, thanks. Changing "yes" to "no" for log_stripped_names did it.   Bill Dunn       - Original Message - From: Alan DeKok To: [EMAIL PROTECTED] Sent: Wednesday, September 24, 2003 9:34 AM Subject: Re: Logging realm connections

Re: Logging realm connections

2003-09-24 Thread Alan DeKok
"VCI Help Desk" <[EMAIL PROTECTED]> wrote: > The problem I'm having is that FreeRadius strips the realm name > (realm.com) and logs only the username in the radius.log file. Read 'radiusd.conf', look for 'log_stripped_names'. > And, there isn't a detail log for the realms radius server lik

Logging realm connections

2003-09-24 Thread VCI Help Desk
Hi, I currently use Cistron 1.6.6 and am in the process of switching over to FreeRadius 0.9.1. With Cistron I can view realm connections via the /var/log/radacct/radius.log file like such. Wed Sep 24 09:19:20 2003: Auth: Login OK: [EMAIL PROTECTED] (from nas xxx.xxx.xxx.xxx/S7) The

RE: [Patch] SQL authentication logging

2003-09-22 Thread Paul Hampson
> From: Nicolas Baradakis > Sent: Monday, 22 September 2003 11:48 PM > Paul Hampson wrote: > > > > I think it'd be better to have a separate patch to fix > > > sql_finish_query() usage everywhere and not only in > > > rlm_sql_postauth() > > SOunds good. Are you going to make it call it always? I

Re: [Patch] SQL authentication logging

2003-09-22 Thread Nicolas Baradakis
Paul Hampson wrote: > > I think it'd be better to have a separate patch to fix > > sql_finish_query() usage everywhere and not only in > > rlm_sql_postauth() > > SOunds good. Are you going to make it call it always? I expect > such a function would be safe to call at any time... From memory, > th

RE: [Patch] SQL authentication logging

2003-09-21 Thread Paul Hampson
> From: Nicolas Baradakis > Sent: Monday, 22 September 2003 1:30 AM > Paul Hampson wrote: > > > > > With one minor change, to call > > > > > (inst->module->sql_finish_query)(sqlsocket, inst->config); > > > > > even for failed queries. (As is done in _some_ of the other > > > > > sql_ function in

RE: [Patch] SQL authentication logging

2003-09-21 Thread Nicolas Baradakis
Paul Hampson wrote: > > > > With one minor change, to call > > > > (inst->module->sql_finish_query)(sqlsocket, inst->config); > > > > even for failed queries. (As is done in _some_ of the other > > > > sql_ function in rlm_sql.c. And PostgresSQL's docs also do > > > > it... Only postgres and Sybas

RE: [Patch] SQL authentication logging

2003-09-21 Thread Paul Hampson
> From: Nicolas Baradakis > Sent: Friday, 19 September 2003 6:28 PM > Paul Hampson wrote: > > > > > The following patch allow for SQL logging after authentication. It > > > > extends the rlm_sql module so now you can put one more query in your > > > &

Re: [Patch] SQL authentication logging

2003-09-19 Thread Nicolas Baradakis
Paul Hampson wrote: > > > The following patch allow for SQL logging after authentication. It > > > extends the rlm_sql module so now you can put one more query in your > > > sql.conf file. > > > > I'll commit this once either you tell me that it doesn

RE: [Patch] SQL authentication logging

2003-09-18 Thread Paul Hampson
> From: Paul Hampson > Sent: Friday, 19 September 2003 1:47 AM > > From: Nicolas Baradakis > > Sent: Wednesday, 17 September 2003 11:35 PM > > The following patch allow for SQL logging after authentication. It > > extends the rlm_sql module so now you can put one m

RE: [Patch] SQL authentication logging

2003-09-18 Thread Paul Hampson
> From: Nicolas Baradakis > Sent: Wednesday, 17 September 2003 11:35 PM > When you have multiple freeradius servers, you want to store > authentication attempts in a database rather than a flat file. > The following patch allow for SQL logging after authentication. It > e

Re: Logging Failed Attempts to MySql database

2003-09-17 Thread Nicolas Baradakis
Paul Hampson wrote: > There's only one issue for me to resolve, which is the same thing > holding up the documentation... What happens when there's no section > found or the Post-Auth-Type is not set? This is an issue for backwards > compatibility. :-) In this example: Post-Auth { foo_mo

[Patch] SQL authentication logging

2003-09-17 Thread Nicolas Baradakis
When you have multiple freeradius servers, you want to store authentication attempts in a database rather than a flat file. The following patch allow for SQL logging after authentication. It extends the rlm_sql module so now you can put one more query in your sql.conf file. The following patch

Re: Logging Failed Attempts to MySql database

2003-09-17 Thread Nicolas Baradakis
rad_postauth() function. If not found, it keeps the previous behaviour: it doesn't do anything. > > and an other provides an "authlog_query" in sql.conf > > I'd have to go dig this patch up again, but wouldn't a postauth-query > work better? That way it'

Re: Logging Failed Attempts to MySql database

2003-09-16 Thread Alan DeKok
conf > > I'd have to go dig this patch up again, but wouldn't a postauth-query > work better? That way it's more general than just logging. The only > provisio is that the return value gets chucked, so INSERT, DELETE or > UPDATE are the only sensible options. Sounds r

RE: Logging Failed Attempts to MySql database

2003-09-16 Thread Paul Hampson
thing holding up the documentation... What happens when there's no section found or the Post-Auth-Type is not set? This is an issue for backwards compatibility. :-) > and an other provides an "authlog_query" in sql.conf I'd have to go dig this patch up again, but wouldn

Re: EAP/TTLS logging

2003-09-13 Thread Fastbyte
Hi Michael, that´s right. Is there any possibility to do such thing in freeradius? And the rest of problem is to see in inner authentification in log file a real username. Michael Brown wrote: This thread from the radiator list may shed some light on the situation: http://www.open.com.au/

Re: EAP/TTLS logging

2003-09-12 Thread Michael Brown
This thread from the radiator list may shed some light on the situation: http://www.open.com.au/archives/radiator/2003-08/msg00084.html Quoting Fastbyte <[EMAIL PROTECTED]>: > > I use Odyssey client, and the problem is that in log is only anonymous > user. In freeradius -X -A its possible to s

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Kostas Kalevras
On Fri, 12 Sep 2003, Drew Decker wrote: > Is it possible to log the failed attempts to a mysql database? I would like > to develop a web interface for the technical support staff to let them view > the Failed attempts with out having to teach them how to use SSH etc. If > this is possible to do co

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte <[EMAIL PROTECTED]> wrote: > Sure, I'm sure and I have looked. Then I don't know what the problem is. I see no reason why the 'detail' module would log the outer request, and not the inner one. Paret of the issue may be I don't know what you mean when you say "auth_log" and "detail_

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
Hi Alan, Sure, I´m sure and I have looked. Should i send the whole file (don´t want to spam the list) maybe you could find it. ;) Sorry but that´s the truth.. Hope that we will find a solution for this glitch... Alan DeKok wrote: Fastbyte <[EMAIL PROTECTED]> wrote: Ok the auth request is

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte <[EMAIL PROTECTED]> wrote: > Ok the auth request is beeing logged into the detail log (auth_detail) > but only with the anonymous user and looks like this: ... OK... > The part i see in the radius -X -A looks as follows: > > TTLS: Got tunneled reply RADIUS code 2 > Framed-

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Thor Spruyt wrote: > > The second point is you'll only get the login / password in the > > database. For example the hotline staff may need the Calling-Station-Id > > too. Therefore you need the rlm_sql module to execute the SQL query of > > your choice after authentication. > > After authenticat

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
efore, the tunneled authentication request is just another authentication request for the server. So any and all authentication logging done for normal requests is done for the tunneled requests. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- ---

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Thor Spruyt
- Original Message - From: "Nicolas Baradakis" <[EMAIL PROTECTED]> > Thor Spruyt wrote: > > Install msyslog. That's a syslog server to replace the standard > > syslog server. Msyslog can put all syslog messages in a MySql > > database after which you can extract the necessary info from the

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Alan DeKok wrote: > I would suggest configuring it to log to per-day and per-hour > 'detail' files, and then have a 'cron' job delete old files. I'm not > sure that there's any benefit to having authentication requests logged > permanently in a MySQL database. When you have multiple freeradius

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Thor Spruyt
- Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> > Nicolas Baradakis <[EMAIL PROTECTED]> wrote: > > The second point is you'll only get the login / password in the > > database. For example the hotline staff may need the Calling-Station-Id > > too. Therefore you need the rlm_sql

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Alan DeKok
Nicolas Baradakis <[EMAIL PROTECTED]> wrote: > The second point is you'll only get the login / password in the > database. For example the hotline staff may need the Calling-Station-Id > too. Therefore you need the rlm_sql module to execute the SQL query of > your choice after authentication. Th

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
So any and all authentication logging done for normal requests is done for the tunneled requests. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
i see the tls log in the detail auth_log, but nothing of the inner authentication protocoll. I need username and logintime. That should be logged when the tunneled authentication request is processed. That request looks like just another request from a client, so all logging should be done.

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Thor Spruyt wrote: > Drew Decker wrote: > > > Is it possible to log the failed attempts to a mysql database? I > > would like to develop a web interface for the technical support > > staff to let them view the Failed attempts with out having to > > teach them how to use SSH etc. If this is possibl

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Thor Spruyt
> Drew Decker wrote: > > > Is it possible to log the failed attempts to a mysql database? I would like > > to develop a web interface for the technical support staff to let them view > > the Failed attempts with out having to teach them how to use SSH etc. If > > this is possible to do could you po

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Alan DeKok
Nicolas Baradakis <[EMAIL PROTECTED]> wrote: > I posted the patch in the freeradius-devel mailing but nobody with CVS > write access put it in FreeRadius. Not every patch makes it into the server. Some are untested, some are unnecessary, and some are plain wrong. If enough people say a patch

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
st is processed. That request looks like just another request from a client, so all logging should be done. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Drew Decker wrote: > Is it possible to log the failed attempts to a mysql database? I would like > to develop a web interface for the technical support staff to let them view > the Failed attempts with out having to teach them how to use SSH etc. If > this is possible to do could you point me to a

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
Just the normal auth log of the ttls challenge; i see the tls log in the detail auth_log, but nothing of the inner authentication protocoll. I need username and logintime. Alan DeKok wrote: Fastbyte <[EMAIL PROTECTED]> wrote: is there any logging done in TTLS? What kind of logging a

Logging Failed Attempts to MySql database

2003-09-12 Thread Drew Decker
Is it possible to log the failed attempts to a mysql database? I would like to develop a web interface for the technical support staff to let them view the Failed attempts with out having to teach them how to use SSH etc. If this is possible to do could you point me to a how-to or at least give me

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte <[EMAIL PROTECTED]> wrote: > is there any logging done in TTLS? What kind of logging are you looking for? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

EAP/TTLS logging

2003-09-12 Thread Fastbyte
Hi, is there any logging done in TTLS? --- Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Radius realm logging

2003-09-09 Thread Jason Love
Testing... Testing... 1. 2. 3. Is this mic on? :) -Original Message- From: Jason Love Sent: Monday, September 08, 2003 3:40 PM To: [EMAIL PROTECTED] Subject: Radius realm logging I am currently using cistron radius version 1.6.6 on Debian. Its been ok for what I have used it for. I am

Radius realm logging

2003-09-08 Thread Jason Love
I am currently using cistron radius version 1.6.6 on Debian. Its been ok for what I have used it for. I am now starting to add realms to my users and I need to be able to see the realm in the actuall radius.log file. Right now it strips the realm and if I try a nostrip it wont authenticate the user

Re: Logging into radacct - Mysql

2003-09-04 Thread Fastbyte
apshot-20030830, everithing works fine, except i cant figure out howto enable logging into the radacct mysql table. It's enabled by default. It's also a FAQ. I saw in other example outputs of radius -X that the rlm_sql module uses the accounting_start_query, but inn my output thi

Re: Logging into radacct - Mysql

2003-09-04 Thread Alan DeKok
Fastbyte <[EMAIL PROTECTED]> wrote: > I am using FreeBSD 4.9-PRERELEASE with the > freeradius-snapshot-20030830, everithing works fine, except i cant > figure out howto enable logging into the radacct mysql table. It's enabled by default. It's also a FAQ.

Logging into radacct - Mysql

2003-09-04 Thread Fastbyte
I am using FreeBSD 4.9-PRERELEASE with the freeradius-snapshot-20030830, everithing works fine, except i cant figure out howto enable logging into the radacct mysql table. I saw in other example outputs of radius -X that the rlm_sql module uses the accounting_start_query, but inn my output

Re: MySQL Authentication Logging

2003-08-26 Thread Kostas Kalevras
On Mon, 18 Aug 2003, Adam Carmichael wrote: > Hi All! > > I'm currently running FreeRADIUS 0.9.0 on several *BSD boxes with MySQL4 for logging > accounting and retrieving authentication information. I am interested in knowing how > to log authentication attempts and even pos

Re: MySQL Authentication Logging

2003-08-20 Thread Adam Carmichael
- Original Message - From: "Nicolas Baradakis" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 20, 2003 6:57 PM Subject: Re: MySQL Authentication Logging > Adam Carmichael wrote: > > > I was considering relearning C/C++ all over a

Re: MySQL Authentication Logging

2003-08-20 Thread Nicolas Baradakis
Just one "authlog_table" is sufficient, and you chose what you put inside with the "authlog_query". > What do you think? (with regards to the above outlined mysql logging > scenarios). If you'd like to further development, then I'll > subscribe to freeradiu

Re: MySQL Authentication Logging

2003-08-20 Thread Adam Carmichael
Nic, I would love to help you test this!!! Adam - Original Message - From: "Nicolas Baradakis" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 20, 2003 6:16 PM Subject: Re: MySQL Authentication Logging > Alan DeKok wrote: > > > &

Re: MySQL Authentication Logging

2003-08-20 Thread Nicolas Baradakis
Alan DeKok wrote: > "Adam Carmichael" <[EMAIL PROTECTED]> wrote: > > > I'm currently running FreeRADIUS 0.9.0 on several *BSD boxes with MySQL4 > > for logging accounting and retrieving authentication information. I am > > interested in knowin

Re: MySQL Authentication Logging

2003-08-19 Thread Alan DeKok
"Adam Carmichael" <[EMAIL PROTECTED]> wrote: > I'm currently running FreeRADIUS 0.9.0 on several *BSD boxes with MySQL4 > for logging accounting and retrieving authentication information. I am > interested in knowing how to log authentication attempts and even >

Re: MySQL Authentication Logging

2003-08-18 Thread Adam Carmichael
he Password attribute set, and another bunch with Crypt-Password. Not very good practise I know, but all scripts (both online and Windows based VB applications) update the attribute field when editing / inserting a password. What do you think? (with regards to the above outlined mysql logging scenar

Re: MySQL Authentication Logging

2003-08-18 Thread Nicolas Baradakis
Chris van Meerendonk wrote: > On Mon, 2003-08-18 at 05:30, Adam Carmichael wrote: > > > I'm currently running FreeRADIUS 0.9.0 on several *BSD boxes with > > MySQL4 for logging accounting and retrieving authentication > > information. I am interested in know

Re: MySQL Authentication Logging

2003-08-18 Thread Chris van Meerendonk
On Mon, 2003-08-18 at 05:30, Adam Carmichael wrote: > Hi All! > > I'm currently running FreeRADIUS 0.9.0 on several *BSD boxes with > MySQL4 for logging accounting and retrieving authentication > information. I am interested in knowing how to log authentication > attempt

MySQL Authentication Logging

2003-08-17 Thread Adam Carmichael
Hi All!   I'm currently running FreeRADIUS 0.9.0 on several *BSD boxes with MySQL4 for logging accounting and retrieving authentication information. I am interested in knowing how to log authentication attempts and even possibly why an attempt failled.   For example, if we have a cus

Authing against system, logging to MySQL

2003-07-31 Thread Casey Boone
What should I look at for authing against the system, but doing logging to a MySQL database (I need to log caller id information, and number dialed information, both of which are passed to the radiusd from the ras) Casey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: Logging - how to specify what to log?

2003-07-29 Thread Peter Nixon
On Sun, 27 Jul 2003 12:39 am, James Green wrote: > Hi there, > > I've been asked as a matter of urgency to ensure that the logs we get > from RADIUS include the CLI (Caller-ID), that is, the telephone number > of the person making the call. This should prove they called us. > > I believe I need to

Re: Logging - how to specify what to log?

2003-07-26 Thread Alan DeKok
James Green <[EMAIL PROTECTED]> wrote: > I've been asked as a matter of urgency to ensure that the logs we get > from RADIUS include the CLI (Caller-ID), that is, the telephone number > of the person making the call. This should prove they called us. ... > I can see a slew of attributes being log

Logging - how to specify what to log?

2003-07-26 Thread James Green
Hi there, I've been asked as a matter of urgency to ensure that the logs we get from RADIUS include the CLI (Caller-ID), that is, the telephone number of the person making the call. This should prove they called us. I believe I need to log the %{Calling-Station-Id} attribute. Problem: I have n

NAS Logging Question

2003-07-22 Thread WA Support
Hello, Does anyone know how to get FreeRadius to log the NAS IP instead of the client shortname. Currently when a customer logs on, the client shortname is recorded, but I would like to log the NAS IP. I am pretty sure that it is recorded in radutemp since that is what radzap works with, right?

Re: Logging passwords from rlm_ldap?

2003-07-14 Thread Alexander M. Pravking
epeated. I'm probably wrong > > here... > > > > In any case, FreeRADIUS' logging system is far, far from perfect... > > It's light-years better than most of the commercial servers I've > seen: > > >>> "Error! Unable to perform req

Re: Logging passwords from rlm_ldap?

2003-07-14 Thread Alan DeKok
ogs and be able to > determine a problem very quickly rather than restart the server in > debug mode and wait the problem to be repeated. I'm probably wrong > here... > > In any case, FreeRADIUS' logging system is far, far from perfect... It's light-years better

Re: Logging passwords from rlm_ldap?

2003-07-14 Thread Alexander M. Pravking
e answer me. It's really hard sometimes to reproduce the critical situation once more, so I prefer to have 20-40 megs of daily logs and be able to determine a problem very quickly rather than restart the server in debug mode and wait the problem to be repeated. I'm probably wrong here... In an

Re: Logging passwords from rlm_ldap?

2003-07-14 Thread Alan DeKok
"Alexander M. Pravking" <[EMAIL PROTECTED]> wrote: > In debug mode, rlm_ldap prints out all the passwords it uses for bind. > I think it's reasonable enough to disallow it or at least make it > configurable. I don't see why. It's debug mode, so it prints out a number of worse things (from a sec

Logging passwords from rlm_ldap?

2003-07-14 Thread Alexander M. Pravking
In debug mode, rlm_ldap prints out all the passwords it uses for bind. I think it's reasonable enough to disallow it or at least make it configurable. Here's a quick-patch, relying on log_auth_goodpass. Index: rlm_ldap.c === RCS file:

No sql radacct logging

2003-07-03 Thread Andrew Mihalic
Running freeradius-0.8.1/Mysql-3.23.56 and authenticating dialup user's with radcheck we cannot log sessions in the radacct database. Did we miss a radius/sql config file entry somewhere or file permission, IP table rule? My errors are: Thu Jul  3 08:46:06 2003 : Error: Invalid operator for

radius.log logging NAS address

2003-06-22 Thread Craig A. Beasland
Hi there, We have a situation where our radius server (in radius.log) is logging packets from the NAS as well as the proxy server. If I add the IP's to the clients.conf file, then the packets get listed as duplicates, if I leave them out, then I get unknown client messages. We dont have en

Re: logging anomalies

2003-06-13 Thread Jim
On Thu, 12 Jun 2003, Omachonu Ogali wrote: > The reason you only see one login in radius.log is due to the cleanup_delay > setting. After some more discussion and review, we think this is the problem. We've increased cleanup_delay from 5 seconds to 10 and we'll revisit the question in the next fe

Re: logging anomalies

2003-06-12 Thread Omachonu Ogali
First...most NASes, if they don't receive a reply during a certain window, they resend the packet. So perhaps the connectivity between you and the NAS is spotty at times, or many other factors that would inhibit a reply from FreeRADIUS. I personally only rely on the Acct-Unique-Session-Id that Fre

logging anomalies

2003-06-12 Thread Jim
Using 0.8.1 on several FreeBSD machines. These are all proxies; all send accounting info to a MySQL dB on a dedicated server. We've noticed that sometimes an enduser will log in and two records will be created with start times 5 seconds apart and stop times exactly the same. It seems to be happeni

Re: logging with radisreport

2003-06-12 Thread Tom Emerson
at would absolutely show whether or not the AP is sending stop records -- other than that, you might try logging in via telnet/snmp and seeing what the AP says about "connections" [i.e., whether they are "active" or "pending"] Finally, what firmware level do y

logging with radisreport

2003-06-12 Thread JC Fulknier
sorry it's 230 AM, forgot to turn off html on last post. here it is again. I'm using an Orinoco AP 2500 to authenticate to a Red Hat 9 server running freeradius 0.8.1. When I run radius report on the radius.log file I do not get anything. Is this because the AP does not tell the Radius server that

Logging with radiusreport

2003-06-12 Thread JC Fulknier
I'm using an Orinoco AP 2500 to authenticate to a Red Hat 9 server running freeradius 0.8.1. When I run radius report on the radius.log file I do not get anything. Is this because the AP does not tell the Radius server that the client has logged out? If I read the report I just see logins not

Logging details when using more than one NAS

2003-06-09 Thread Michele Cumar
I am receiving authentication requests from 5 different NASes using with different IPs and different secrets. The problem is that FreeRadius only logs the first NAS specified in clients.conf! Radwho doesn't see the users logged in from other NASes even though they're correctly logged in. Do yo

Re: Logging User-name

2003-05-29 Thread Alan DeKok
"Gene Parks" <[EMAIL PROTECTED]> wrote: > I would love to post process it but our accounting system calls for the > detail file and is looking for that attribute so I thought it might be > easier to just change it in Freeeradius. So use rlm_attr_rewrite... Alan DeKok. - List info/subscribe/

RE: Logging User-name

2003-05-29 Thread Gene Parks
: [EMAIL PROTECTED] Subject: Re: Logging User-name "Gene Parks" <[EMAIL PROTECTED]> wrote: > Right now the system is logging the full [EMAIL PROTECTED] as the > "User-Name" attribute in the details file. I need the > Stripped-User-Name to appear as the "U

Re: Something strange about logging

2003-04-03 Thread Degrande_Samuel
According to Alan DeKok (Tue, 01 Apr 2003 14:22:03 -0500): > Degrande_Samuel <[EMAIL PROTECTED]> wrote: > > Everything is working in debug mode (radiusd -X). > > but it coredumps in 'normal mode'. > ... > > So at this point, radlog_dest is always RADLOG_FILES, and then it > > executes > > > > log.

Re: Something strange about logging

2003-04-02 Thread Samuel.Degrande
Alan DeKok a écrit: Degrande_Samuel <[EMAIL PROTECTED]> wrote: Everything is working in debug mode (radiusd -X). but it coredumps in 'normal mode'. ... So at this point, radlog_dest is always RADLOG_FILES, and then it executes log.vradlog:94 fopen(mainconfig.log_file, "a") mainc

Re: Something strange about logging

2003-04-01 Thread Alan DeKok
Degrande_Samuel <[EMAIL PROTECTED]> wrote: > Everything is working in debug mode (radiusd -X). > but it coredumps in 'normal mode'. ... > So at this point, radlog_dest is always RADLOG_FILES, and then it > executes > > log.vradlog:94 fopen(mainconfig.log_file, "a") > > mainconfig

Something strange about logging

2003-04-01 Thread Degrande_Samuel
Hello, this is my first message on that list. I just compiled freeradius-snapshot-20030324 on sparc-solaris9 Before to really install thing, I'm used to test applications in a specific directory. I mean that I configured that way : ./configure --prefix= --exec-prefix=/usr --libdir=/usr/lib/radius

Users in Mysql + Logging to Mysql

2003-02-09 Thread Gabe
Can't i keep the user database in mysql as well? i used radtest test test localhost 0 testing123 and got an Accepted back from radiusd, but it is not logging to the mysql tables.. must i set somethin so that it works? i edited sql.conf and set it to localhost, username, password... but it

Re: Logging Question

2003-01-30 Thread Simon White
29-Jan-03 at 17:42, Brandon Lehmann ([EMAIL PROTECTED]) wrote : > I'm sorry I got my log files mixed up. Either way I want the "information > from the server" (radius.log) to log to sql. I may just have to fire a > cronjob to parse it and toss it into the sql dbase but thats the complex way > out.

RE: Logging Question

2003-01-29 Thread Brandon Lehmann
29, 2003 12:29 PM To: [EMAIL PROTECTED] Subject: Re: Logging Question Brandon Lehmann <[EMAIL PROTECTED]> wrote: > I have looked through quite a bit of the archives and did not see > anything along this question. I currently have Freeradius running > perfectly as a proxy system

Re: Logging Question

2003-01-29 Thread Kostas Kalevras
On Wed, 29 Jan 2003, Brandon Lehmann wrote: > Hello List, > > I have looked through quite a bit of the archives and did not see > anything along this question. I currently have Freeradius running > perfectly as a proxy system. The accounting data is saved to a file and > forwarded to the act

Re: Logging Question

2003-01-29 Thread Alan DeKok
for the > ability to rapidly search through our users login attempts during a certain > date range or even the current date to see #1 if we receive the auth > request, #2 if their password is correct, and #3 was it ok. Any help would > be greatly appreciated. Grab the latest CVS snap

Logging Question

2003-01-29 Thread Brandon Lehmann
Hello List, I have looked through quite a bit of the archives and did not see anything along this question. I currently have Freeradius running perfectly as a proxy system. The accounting data is saved to a file and forwarded to the actual auth server. No problems there. I also have anot

Re: logging to mysql?

2002-12-05 Thread Kostas Kalevras
On Thu, 5 Dec 2002, Ray wrote: > is there a way to get freeRadius to log good and bad logins to MySQL? Good logins will get logged in mysql since you have accounting for these sessions. As for bad logins you can use the log_badlogins script from dialup_admin to log this information in mysql as no

Re: logging to mysql?

2002-12-05 Thread Evren Yurtesen
check out the conf file, there is an option to log them to log file. (I dont know about mysql) you can login to this freeradius server with ssh and as many people you like can watch =) Evren On Thu, 5 Dec 2002, Ray wrote: > is there a way to get freeRadius to log good and bad logins to MySQL? >

  1   2   >