Message-
From: freeradius-users-bounces+peter.balsianok=orange...@lists.freeradius.org
[mailto:freeradius-users-bounces+peter.balsianok=orange...@lists.freeradius.org]
On Behalf Of Alan DeKok
Sent: Tuesday, November 27, 2012 10:41 PM
To: FreeRadius users mailing list
Subject: Re: Detail file
of accounting packet ).
See doc/variables.txt This is documented.
But... there really isn't any point. Why is so vital to have them all
on one line? Why not just use the detail file? Do the extra linefeeds
really cause that much panic?
Alan DeKok.
-
List info/subscribe/unsubscribe? See http
Sorry, i didnt read doc/variables.txt carefully ( missed %Z ).
To have one packet in one line ( AVPs separated with delimiter ) from my point
of view is better (simple). Of course i can parse current detail file format :).
Last question. Is writing to detail file serialized ( paralel threads can
BALSIANOK, Peter wrote:
Sorry, i didnt read doc/variables.txt carefully ( missed %Z ).
To have one packet in one line ( AVPs separated with delimiter ) from my
point of view is better (simple). Of course i can parse current detail file
format :).
I wouldn't agree with simpler. But it's
On 28/11/12 14:57, BALSIANOK, Peter wrote:
Last question. Is writing to detail file serialized ( paralel threads can
write data at the same time to one file ) ?
Yes. The detail writer (and reader) use locking.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
current detail file
format :).
I wouldn't agree with simpler. But it's your system.
It's also going to go away in version 3.0 along with all the other one letter
expansions.
-Arran
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I want to store accounting packet(s) for future processing.
[radiusd@tdrad1 freeradius-server-2.2.0]$ cat
/app_log/radius/ggsn-acct/radacct/127.0.0.1/pre-proxy-detail-20121127
Tue Nov 27 15:03:35 2012
Packet-Type = Accounting-Request
NAS-Port-Type = Virtual
BALSIANOK, Peter wrote:
Is there any way to change / simulate functionality of the detail module
like this ?
Timestamp=“ Tue Nov 27 15:03:35 2012“[delimiter]Packet-Type =
Accounting-Request[delimiter]NAS-Port-Type = Virtual[delimiter]
NAS-Port-Type = Virtual[delimiter] [end of line]
Thanks Alan and Fajar,
How do I ensure the buffered-sql file gets included by the server? Do I need an
additional default Virtual Server configuration to enable the buffered-sql?
Where are the SQL queries picked up from if there is no buffered sql?
Also, how does dialup admin interface pick up
Hi,
How do I ensure the buffered-sql file gets included by the server? Do I need
an additional default Virtual Server configuration to enable the buffered-sql?
you ensure theres a link to it from sites-enabled into sites-available
Where are the SQL queries picked up from if there is no
takes a detail file and dumps the contents into SQL - theres no
querying
involvedits just a single thread that runs when the main radiusd processes
are
quiet(er) - there are some variables in the buffered_sql that allow you to
change
its load variance and how often it polls the detail file
Hello,
We are using Freeradius2 with MySQL at the backend.
I understand that the buffered sql takes care of buffering queries. What is the
best way to stop querying MySQL altogether and return a negative response,
after a certain threshold of processing is reached by the server?
Thanks in
On Mon, Mar 5, 2012 at 12:01 PM, Vivek Mehrotra vme...@yahoo.com wrote:
Hello,
We are using Freeradius2 with MySQL at the backend.
I understand that the buffered sql takes care of buffering queries. What is
the best way to stop querying MySQL altogether and return a negative
response, after
As the number of queries increases to a few ten-thousands, mysqld monopolizes
the CPU.
We wish to stop querying MySQL at that point.
There's only so much load_factor can help?
Would welcome alternate solutions as well..
Regards,
vivek
-
List info/subscribe/unsubscribe? See
On Mon, Mar 5, 2012 at 12:48 PM, Vivek Mehrotra vme...@yahoo.com wrote:
As the number of queries increases to a few ten-thousands, mysqld monopolizes
the CPU.
We wish to stop querying MySQL at that point.
There's only so much load_factor can help?
Would welcome alternate solutions as well..
= 2
}
if (fail || noop || invalid) {
ok
}
in the buffered-sql (that syntax might work, take care!)
or, even better, make sure the situation where the detail file
gets such a thing doesnt happen in the first place eg
I tried adding the noop block to the detail reader and doesn't seem to
make a difference. I'm still seeing this suspicious debug:
Tue Nov 8 10:34:18 2011 : Debug: [thread] server buffered-sql {
Tue Nov 8 10:34:18 2011 : Debug: [thread] # Executing section
preacct from file
(that syntax might work, take care!)
or, even better, make sure the situation where the detail file
gets such a thing doesnt happen in the first place eg, in your
virtual server accounting section...
if (Acct-Session-Time != 0) {
detail
}
else
Gary T. Giesen wrote:
I tried adding the noop block to the detail reader and doesn't seem to
make a difference. I'm still seeing this suspicious debug:
...
Tue Nov 8 10:34:18 2011 : Debug: [sql-acct] stop packet with zero
session length. [user 'u...@realm.com', nas '10.99.0.39']
Tue Nov 8
I believe I've setup buffered SQL correctly in my configuration, and I
do have some data that's made it into SQL...
I used the default buffered-sql in sites-enabled on RHEL 6...
In my sites-enabled/default, I have it logging to a detail file (and
not SQL). I also have the sites-enabled/buffered
Gary T. Giesen wrote:
Mon Nov 7 15:51:12 2011 : Info: [sql-acct] stop packet with zero
session length. [user 'u...@realm.com', nas '10.99.0.39']
Read raddb/sites-available/default. Look for zero.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Uncommenting:
if (noop) {
ok
}
solved the issue.
Thank you very much.
GG
On Mon, Nov 7, 2011 at 4:20 PM, Alan DeKok al...@deployingradius.com wrote:
Gary T. Giesen wrote:
Mon Nov 7 15:51:12 2011 : Info: [sql-acct] stop packet with zero
session length. [user
I spoke too soon, that does not seem to have solved the issue
On Mon, Nov 7, 2011 at 4:49 PM, Gary T. Giesen gie...@snickers.org wrote:
Uncommenting:
if (noop) {
ok
}
solved the issue.
Thank you very much.
GG
On Mon, Nov 7, 2011 at 4:20 PM, Alan DeKok
I made the change to the configuration, watch the server go a little
nuts with writing SQL to the database, and then it stops, and I'm
still stuck with a detail.work file that's not getting processed...
On Mon, Nov 7, 2011 at 5:46 PM, Gary T. Giesen gie...@snickers.org wrote:
I spoke too soon,
On Tue, Nov 8, 2011 at 5:47 AM, Gary T. Giesen gie...@snickers.org wrote:
I made the change to the configuration, watch the server go a little
nuts with writing SQL to the database, and then it stops, and I'm
still stuck with a detail.work file that's not getting processed...
As usual, if
Gary T. Giesen wrote:
I made the change to the configuration, watch the server go a little
nuts with writing SQL to the database, and then it stops, and I'm
still stuck with a detail.work file that's not getting processed...
As always, debug mode. You can use raddebug to debug a running
:
http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4942366.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
in context:
http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4939014.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Wed, Oct 26, 2011 at 3:07 PM, tonimanel
antoniofernan...@fabergames.com wrote:
Now, I don't have clear why configuring proxy.conf and implementing
copy-acct-to-home-server, accounting packets have different times(I know
that these are using different timestamp).
That's the way it is.
You
I have defined a second detail file writer that functions correct writting a
second file. When I define in radiusd.conf this code:
server radiusB {
listen {
type = detail
filename = /var/log/freeradius/radacct/second_detail
load_factor = 25
I have check that I had not defined the pool as acct_pool, for this reason
server's type was wrong.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935604.html
Sent from the FreeRadius - User mailing list archive
On Tue, Oct 25, 2011 at 4:01 PM, tonimanel
antoniofernan...@fabergames.com wrote:
Yes, I knew that code is to define a reader. Thanks. ;)
I think that this function incorrectly (I have some mistake) because when I
list /var/log/freeradius/radacct, not appears second_detail file.
Did you read
.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935704.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
is being very difficult. :(
Regards.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935766.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http
is being very difficult. :(
Regards.
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4936443.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http
a detail file
- radius process the packet, possibly by using data from several data
source (sql, ldap, files, whatever)
- radius can store some or all information from the packet, possibly
to many destination (sql, detail file, whatever)
- radius can proxy the packet to another radius server
- radius
Benjamin Marvin wrote:
Howdy,
Is the timeout/retransmit timer adjustable for the detail file reader
(copy-acct-to-home-server).
I'm not sure what that means.
If not, what is the default retransmit time for the reader?
30 seconds. You can change it via the retry_interval setting.
Just
Howdy,
Is the timeout/retransmit timer adjustable for the detail file reader
(copy-acct-to-home-server).
If not, what is the default retransmit time for the reader?
Just to double/triple verify, this is a serial reader (it waits to send a
second packet until it has a response from the first
Hi,
Hi,
Or maybe better:
sql
if (noop || invalid) {
ok
}
doesnt appear to work...
Tsk tsk, did you even read my post ? :P
sql {
invalid = 2
}
Gotta override the default priority, else it'll return a handled rcode.
grrr. i was looking at the
a.l.m.bu...@lboro.ac.uk wrote:
grrr. i was looking at the debug log sent and seeing the sql operation
return an 'invalid' operator... and so Alans method seemed operative
however - as you say, the code is doing something a little narky and
unlogged underneath - hence the result code check
a
rather large detail file (few gigs)
Bad. Bad, bad, bad. They should be writing detail files per day, or
per hour. If they're using a version of the server from the last 6
months, it supports file globbing, which helps with this.
that has 'corrupt'
records in it... eg entries
Hi,
(I've already got, on my list, use Calling-Station-Id
instead of NAS-Port for the unique function as many
NAS use the same port for every accounting packet :-|)
Create a patch, and send it to the list via git format-patch. Best
practices really need to go into the server
list of updates needed for the core server configuration (and hopefully
a large number of 'you need to change this or add that' blog/wiki/random
document entries removed across the world)
We write out a different detail file per hour. If for whatever reason
the account buffer gets to be big
at all (unlike the successful packet) and therefore
the duff packet stays in the detail file queue...to keep the detail
instance clogged up.
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
Or maybe better:
sql
if (noop || invalid) {
ok
}
doesnt appear to work...
Tsk tsk, did you even read my post ? :P
sql {
invalid = 2
}
Gotta override the default priority, else it'll return a handled rcode.
hi,
okay. so i've been preaching that people use eg
the buffered-sql virtual machine rather than do accounting
DB entries 'live' - therefore giving the admin better
FR performance with slower DBs etc...
however, I've been approached today by someone who has a
rather large detail file (few gigs
I have performed the following actions, however, the listener files are
still being deleted when the home accounting server is down.
Alan DeKok wrote:
1) Don't write to the detail file twice.
I have commented out ALL detail lines from all active configuration
files (including sites-enabled
JDL wrote:
I have performed the following actions, however, the listener files are
still being deleted when the home accounting server is down.
Please run it in debugging mode. The output is likely too large to
post here, but only debugging mode will tell you what's happening.
It will
I have performed the following actions, however, the listener files are
still being deleted when the home accounting server is down.
# Mark this home server alive ONLY when it starts being responsive
status_check = status-server
You have altered this from robust-proxy-accounting
Alan DeKok wrote:
Some people have seen the detail file listener go crazy, and use
lots of CPU. I've managed to reproduce the problem, and have committed
a fix to the stable tree.
Please see http://git.freeradius.org/pre/ for tar files debian
files containing the fix. Or, see http
JDL wrote:
I just tried the 2.1.5 pre-release and the issue with the detail file
listener going crazy seems to have been corrected. Thank you.
That's good.
However, the issue of the spooled detail files being deleted remains.
Doing my best to analyze the debug file and some copies
Alan DeKok wrote:
On top of that, your configuration clearly logs to the detail file
*twice*. Once when the packet is read from the network, and then again
when it's read from the detail file.
I assume you are referring to this
server acct_detail.imaginenet {
accounting
Some people have seen the detail file listener go crazy, and use
lots of CPU. I've managed to reproduce the problem, and have committed
a fix to the stable tree.
Please see http://git.freeradius.org/pre/ for tar files debian
files containing the fix. Or, see http://git.freeradius.org
Hi Ivan,
Hmm, on my ubuntu system - I am not able to execute a basic perl module from
freeradius.
It is freeradius version 1.1.7 (installed using apt-get install freeradius)
When i start freeradius with -X option, I am not seeing any indication of
rlm_perl being loaded.
(I have included a perl
al pat wrote:
Hi Ivan,
Hmm, on my ubuntu system - I am not able to execute a basic perl module
from freeradius.
It is freeradius version 1.1.7 (installed using apt-get install freeradius)
Build 2.1.3 from source. Or build a debian package.
Ensure that you install libperl-dev, too.
attributes in the message. How do I go about
doing that?
I want to dump the output in the detail-... file along with the other
attributes.
I am using freeradius version 1.1.7 (built March 10, 2008) on ubuntu with
linux kernel 2.6.26-19
Thank You.
-a
-
List info/subscribe/unsubscribe? See http
about
doing that?
I want to dump the output in the detail-... file along with the other
attributes.
I am using freeradius version 1.1.7 (built March 10, 2008) on ubuntu with
linux kernel 2.6.26-19
Thank You.
-a
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
a custom format.
Freeradius dumps the octet string of the length of the message which it
cannot decode (due to custom format)
I want to dump these specific attributes in the message. How do I go about
doing that?
I want to dump the output in the detail-... file along with the other
attributes
to dump these specific attributes in the message. How do I go about
doing that?
I want to dump the output in the detail-... file along with the other
attributes.
I am using freeradius version 1.1.7 (built March 10, 2008) on ubuntu with
linux kernel 2.6.26-19
Thank You.
-a
-
List
.
Freeradius dumps the octet string of the length of the message which it
cannot decode (due to custom format)
I want to dump these specific attributes in the message. How do I go
about
doing that?
I want to dump the output in the detail-... file along with the other
attributes.
I
Sat Aug 16 19:02:04 2008
NAS-IP-Address = 101.101.101.3
Acct-Status-Type = Interim-Update
Acct-Session-Id = I=220+00\000\000\000\t
CableLabs-Event-Message =
I upgraded to 2.0.2 but still have a problem with reading detail (to do
copy-acct-to-home-server ):
It only processes the first request of the detail file and stops after
receiving the accouting response.
May some one help me?
here follows part of freeradius -X:
Polling for detail file
detail file , accounting
Ellis, Scott 1 (N-Comptel Inc.) wrote:
I have the new version 1.1.4 up and running. I also have uncommented
the suppress stanza in radiusd.conf below. However, in
radacct/auth-
files, the password is still showing up..???
Did you add the suppress section
Angel L. Mateo wrote:
My problem is that this is working fine for the auth-detail file, but
detail file is still logging individually, without using the
Huntgroup-Name variable.
Accounting requests aren't processed through the huntgroups file.
You'll have to find another way to get
PROTECTED]
.org] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, January 10, 2007 3:10 PM
To: FreeRadius users mailing list
Subject: Re: Restrict Password from detail file , accounting
Hi,
Is there a way to eliminate the password from being written to the
accounting log files? Either not in clear
Ellis, Scott 1 (N-Comptel Inc.) wrote:
I have the new version 1.1.4 up and running. I also have uncommented the
suppress stanza in radiusd.conf below. However, in radacct/auth-
files, the password is still showing up..???
Did you add the suppress section to the configuration for *all* of
fine for the auth-detail file, but
detail file is still logging individually, without using the
Huntgroup-Name variable.
Any idea?
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información _o)
y las Comunicaciones Aplicadas (ATICA) / \\
http
Thanks. I will give it a try.
-Original Message-
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
.org] On Behalf Of [EMAIL PROTECTED]
Sent: Wednesday, January 10, 2007 3:10 PM
To: FreeRadius users mailing list
Subject: Re: Restrict Password from detail file , accounting
Hi
Hi,
Do you know what version was the first to introduce this feature?
1.1.2
Feature improvements
* Allow tagged VSA's for Juniper. Closes bugs #367 and #368.
* Allow Ascend abinary format to be specified as octets,
(e.g. Ascend-Data-Filter = 0x010203...)
ThanksI am running 1.0.1 Scott ...
-Original Message-
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
.org] On Behalf Of [EMAIL PROTECTED]
Sent: Thursday, January 11, 2007 1:17 PM
To: FreeRadius users mailing list
Subject: Re: Restrict Password from detail file , accounting
Ellis, Scott 1 (N-Comptel Inc.) wrote:
ThanksI am running 1.0.1 Scott ...
Do you really mean that the accounting detail file has passwords?
Why? I've never seen that.
If you mean the equivalent file for authentication records, stripping
the password is easy:
$ cat detail.auth
Is there a way to eliminate the password from being written to the
accounting log files? Either not in clear text or altogether?
I know that read access is restricted to Root access only.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
Is there a way to eliminate the password from being written to the
accounting log files? Either not in clear text or altogether?
which accounting logs?
with the recent versions of FreeRADIUS you can add the following
to the last part of each detail logging stanza
suppress {
Angel L. Mateo [EMAIL PROTECTED] wrote:
But now I want to send all the logs for requests from a group of
clients (defined as a huntgroup) to the same files, and the request for
all other clients as now (classified with the IP address of the client).
Is there any way to redefine this
}
I have activated the detail file in the accounting section and the
auth_log in the authorize and are working fine.
But now I want to send all the logs for requests from a group of
clients (defined as a huntgroup) to the same files, and the request for
all other clients as now
Hi everyone,
Here is my problem, I think I configured everything but the detail
file is never created for accounting. I also use a mysql data base
for accounting only and nothing is appended to the table radacct
either. It is like accounting does not work at all. Here are some
parts
Is your NAS sending accounting records?
--
Mike Ockenga
-Original Message-
From:
[EMAIL PROTECTED]
us.org
[mailto:[EMAIL PROTECTED]
freeradius.org] On Behalf Of Axel Seguin
Sent: Friday, May 12, 2006 3:08 AM
To: FreeRadius users mailing list
Subject: No detail file created
Hi everyone,
I am using Freeradius with LDAP. I use EAP-TTLS for authentication
with PAP (the passwords in LDAP being crypted).
In the ldap.conf file I have :
log_auth_badpass = no
log_auth_goopass = no
But I still see the user password in clear text in the auth-detail file.
I am sorry
Axel Seguin wrote:
Hi everyone,
I am using Freeradius with LDAP. I use EAP-TTLS for authentication with
PAP (the passwords in LDAP being crypted).
In the ldap.conf file I have :
log_auth_badpass = no
log_auth_goopass = no
But I still see the user password in clear text in the auth-detail
Phil Mayers [EMAIL PROTECTED] wrote:
I am sorry if this is a silly question but I have been trying to find a
solution for quite a while now and still haven't found anything.
Is it possible to make sure the passwords are not stored in the
auth-detail files?
Not without source code
I have setup radius to log detail files for radrelay to use. I think
that I followed the documentation exactly except for the name of the
detail file.
detail detail-combined {
detailfile = ${radacctdir}/detail-combined
detailperm = 0600
dirperm
On Friday 31 March 2006 14:17, Ben Plimpton wrote:
But when I start radrelay the permissions change:
[EMAIL PROTECTED] radacct]# radrelay -a /var/log/radius/radacct \
-d /etc/raddb -n ns2-new detail-combined
[EMAIL PROTECTED] radacct]# ls -la total 44
drwx-- 9 radiusd radiusd 4096 Mar
I am currently running freeradius 1.0.4 I have the following line set
log_auth_goodpass = no
I am also using krb5 module under PAM.
The problem I am having is while I do not get the User-Password in the
NAS/auth-detail log, it does show up in the 127.0.0.1/auth-detail file.
I have tried
The last few days with moving over to our new dialup that uses a realm
we seemed to have lost our login accounting to our detail file only for the
out of area realm logins. The local logins yet still are posted to the
detail file.
In the clients.conf I have the shortname that points
Hello,
I am running freeradius version 1.0.4 on Fedora Core 4. I have a problem
with the detail file that writes to the radacct directory. I noticed that this
log file is setup to write by default. I have uncomment the appropriate lines
to have the auth-detail and replay-detail log files
Kris Benson [EMAIL PROTECTED] wrote:
Has anyone come up with a way to either A) ensure the outside username
matches the inside one (guaranteeing the outside one isn't falsified) or
B) log the accounting details with the tunnel information?
Use the class attribute. Set it to some value
Hi all,
So I have FreeRadius set up (and working) to authenticate off an LDAP
installation. Everything is great.
I even have EAP-TTLS/PAP working, so I don't have to store the plaintext
passwords.
I just have one problem now: accounting data. Since I'm using TTLS, the
User-Name field is not
=
127.0.0.1
Acct-Unique-Session-Id =
d0bc8c64f6bb1766
Timestamp = 1101790857
when the Stop packet goes to the right detail file xxx.xxx.xxx.xxx/detail ,
is like this
Thu Nov 25 14:58:48
2004
NAS-IP-Address = NAS address
Ok
NAS-Port =
5
Cisco-NAS-Port
[EMAIL PROTECTED] wrote:
My problem is that I haven't defined a client 127.0.0.1 but the file
/var/log/radius/radacct/127.0.0.1/detail
exist and is growing with only Stop records coming from the NASes but with
0 Acct-Session-Time
See the clients file. FreeRADIUS also reads that.
And
Alan DeKok wrote:
Is this a bug? As the detail file is correct, it does imply this isn't a
network or frontend problem.
The detail file can't be correct, it's just a blind dump of packets.
Well yeah - but it does mean FreeRADIUS received the data and it is
consistent with what happened
checked out STOP records from ones that
successfully got removed from the radwho file (i.e. radutmp), and cannot
see any real difference between that and one that didn't update radwho
correctly.
Is this a bug? As the detail file is correct, it does imply this isn't a
network or frontend problem
.
Is this a bug? As the detail file is correct, it does imply this isn't a
network or frontend problem.
The detail file can't be correct, it's just a blind dump of packets.
I suggest running the server in debugging mode to see what the
radutmp module does with the accounting stop record
of Silence.
Yyc [EMAIL PROTECTED] wrote:
I notice the attributes logged in detail file were written in
radiusd.conf:
acct_unique { key = User-Name, Acct-Session-Id, NAS-IP-Address,
Client-IP-Address, NAS-Port }
So? Those attributes are referenced all over the place.
but after i delete
hi all,
my freeradius-1.0.1 installed under /usr/local/, and acct logfile under
/usr/local/var/log/radius/radacct/xx.xx.xx.xx, in logfile format like this
Tue Oct 26 11:16:38 2004
User-Name = JohnDoe
Acct-Status-Type = Accounting-On
Acct-Session-Id = 4496
acct_unique
#
# Create a 'detail'ed log of the packets.
# Note that accounting requests which are proxied
# are also logged in the detail file.
detail
# daily
unix# wtmp file
Hello -
I am currently testing freeradius 1.0.0pre3 and encountering an issue.
The User-Password attribute showed up in the auth-detail file! (No
reason I need to store password in the log)
auth-detail-20040804
Packet-Type = Access-Request
Wed Aug 4 11:25:31 2004
User-Name = testabc
I have a program written in C, that produces configurable CVS output
from detail files.
I developed it for an ISP, so it is not free, but if you are interested
contact me directly and we can discuss the details.
Julien freeradius wrote:
Hello,
I have got a problem with an hard drive, some
in radwho is logged in the detail file
with a STOP record, so rlm_radutmp has access to the correct
information, right?
How is it that rlm_detail has the correct information that allows it to
create a STOP record, but rlm_radutmp doesn't have access to the same
information?
That is, the detail file
WA Support [EMAIL PROTECTED] wrote:
All the information that shows in radwho is logged in the detail file
with a STOP record, so rlm_radutmp has access to the correct
information, right?
Uh, no. The stop record may not contain the information needed by
radutmp, even when the detail file
Alan DeKok wrote:
WA Support [EMAIL PROTECTED] wrote:
All the information that shows in radwho is logged in the detail file
with a STOP record, so rlm_radutmp has access to the correct
information, right?
Uh, no. The stop record may not contain the information needed by
radutmp
1 - 100 of 103 matches
Mail list logo
