Re: Detail file

2012-11-28 Thread Arran Cudbard-Bell
On 28 Nov 2012, at 15:05, Alan DeKok wrote: > BALSIANOK, Peter wrote: >> Sorry, i didnt read doc/variables.txt carefully ( missed %Z ). >> To have one packet in one line ( AVPs separated with delimiter ) from my >> point of view is better (simple). Of course i can pars

Re: Detail file

2012-11-28 Thread Phil Mayers
On 28/11/12 14:57, BALSIANOK, Peter wrote: Last question. Is writing to detail file serialized ( paralel threads can write data at the same time to one file ) ? Yes. The detail writer (and reader) use locking. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Detail file

2012-11-28 Thread Alan DeKok
BALSIANOK, Peter wrote: > Sorry, i didnt read doc/variables.txt carefully ( missed %Z ). > To have one packet in one line ( AVPs separated with delimiter ) from my > point of view is better (simple). Of course i can parse current detail file > format :). I wouldn't agree wit

RE: Detail file

2012-11-28 Thread BALSIANOK, Peter
Sorry, i didnt read doc/variables.txt carefully ( missed %Z ). To have one packet in one line ( AVPs separated with delimiter ) from my point of view is better (simple). Of course i can parse current detail file format :). Last question. Is writing to detail file serialized ( paralel threads can

Re: Detail file

2012-11-28 Thread Alan DeKok
defined part of accounting packet ). See doc/variables.txt This is documented. But... there really isn't any point. Why is so vital to have them all on one line? Why not just use the detail file? Do the extra linefeeds really cause that much panic? Alan DeKok. - List info/subscribe/u

RE: Detail file

2012-11-28 Thread BALSIANOK, Peter
Message- From: freeradius-users-bounces+peter.balsianok=orange...@lists.freeradius.org [mailto:freeradius-users-bounces+peter.balsianok=orange...@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, November 27, 2012 10:41 PM To: FreeRadius users mailing list Subject: Re: Detail file

Re: Detail file

2012-11-27 Thread Alan DeKok
BALSIANOK, Peter wrote: > Is there any way to change / simulate functionality of the detail module > like this ? > > Timestamp=“ Tue Nov 27 15:03:35 2012“[delimiter]Packet-Type = > Accounting-Request[delimiter]NAS-Port-Type = Virtual[delimiter] > NAS-Port-Type = Virtual[delimiter] [end of line

Detail file

2012-11-27 Thread BALSIANOK, Peter
Hi, I want to store accounting packet(s) for future processing. [radiusd@tdrad1 freeradius-server-2.2.0]$ cat /app_log/radius/ggsn-acct/radacct/127.0.0.1/pre-proxy-detail-20121127 Tue Nov 27 15:03:35 2012 Packet-Type = Accounting-Request NAS-Port-Type = Virtual

Re: How do I stop reading of detail file after a certain threshold is reached

2012-03-08 Thread Alan Buxey
Hi, > How do I ensure the buffered-sql file gets included by the server? Do I need > an additional default Virtual Server configuration to enable the buffered-sql? you ensure theres a link to it from sites-enabled into sites-available > Where are the SQL queries picked up from if there is no bu

Re: How do I stop reading of detail file after a certain threshold is reached

2012-03-08 Thread Vivek Mehrotra
Thanks Alan and Fajar, How do I ensure the buffered-sql file gets included by the server? Do I need an additional default Virtual Server configuration to enable the buffered-sql? Where are the SQL queries picked up from if there is no buffered sql? Also, how does dialup admin interface pick up

Re: How do I stop reading of detail file after a certain threshold is reached

2012-03-05 Thread Alan Buxey
y the server? buffered_sql takes a detail file and dumps the contents into SQL - theres no querying involvedits just a single thread that runs when the main radiusd processes are quiet(er) - there are some variables in the buffered_sql that allow you to change its load variance and how often it poll

Re: How do I stop reading of detail file after a certain threshold is reached

2012-03-04 Thread Fajar A. Nugraha
On Mon, Mar 5, 2012 at 12:48 PM, Vivek Mehrotra wrote: > As the number of queries increases to a few ten-thousands, mysqld monopolizes > the CPU. > We wish to stop querying MySQL at that point. > There's only so much "load_factor" can help? > Would welcome alternate solutions as well.. You shoul

Re: How do I stop reading of detail file after a certain threshold is reached

2012-03-04 Thread Vivek Mehrotra
As the number of queries increases to a few ten-thousands, mysqld monopolizes the CPU. We wish to stop querying MySQL at that point. There's only so much "load_factor" can help? Would welcome alternate solutions as well.. Regards, vivek - List info/subscribe/unsubscribe? See http://www.freeradius

Re: How do I stop reading of detail file after a certain threshold is reached

2012-03-04 Thread Fajar A. Nugraha
On Mon, Mar 5, 2012 at 12:01 PM, Vivek Mehrotra wrote: > Hello, > We are using Freeradius2 with MySQL at the backend. > I understand that the buffered sql takes care of buffering queries. What is > the best way to stop querying MySQL altogether and return a negative > response, after a certain t

How do I stop reading of detail file after a certain threshold is reached

2012-03-04 Thread Vivek Mehrotra
Hello, We are using Freeradius2 with MySQL at the backend. I understand that the buffered sql takes care of buffering queries. What is the best way to stop querying MySQL altogether and return a negative response, after a certain threshold of processing is reached by the server? Thanks in advance

Re: Buffered SQL Setup Not Reading Detail File

2011-11-11 Thread Gary T. Giesen
>                sql { >                        invalid = 2 >                        fail = 2 >                } >                if (fail || noop || invalid) { >                        ok >                } > > in the buffered-sql  (that syntax might work, take care!) &g

Re: Buffered SQL Setup Not Reading Detail File

2011-11-08 Thread Alan DeKok
Gary T. Giesen wrote: > I tried adding the noop block to the detail reader and doesn't seem to > make a difference. I'm still seeing this suspicious debug: ... > Tue Nov 8 10:34:18 2011 : Debug: [sql-acct] stop packet with zero > session length. [user 'u...@realm.com', nas '10.99.0.39'] > Tue Nov

Re: Buffered SQL Setup Not Reading Detail File

2011-11-08 Thread Alan Buxey
} in the buffered-sql (that syntax might work, take care!) or, even better, make sure the situation where the detail file gets such a thing doesnt happen in the first place eg, in your virtual server accounting section... if (Acct-Session-Time != 0) {

Re: Buffered SQL Setup Not Reading Detail File

2011-11-08 Thread Gary T. Giesen
I tried adding the noop block to the detail reader and doesn't seem to make a difference. I'm still seeing this suspicious debug: Tue Nov 8 10:34:18 2011 : Debug: [] server buffered-sql { Tue Nov 8 10:34:18 2011 : Debug: [] # Executing section preacct from file /etc/raddb/sites-enabled/buffered-

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Alan DeKok
Gary T. Giesen wrote: > I made the change to the configuration, watch the server go a little > nuts with writing SQL to the database, and then it stops, and I'm > still stuck with a detail.work file that's not getting processed... As always, debug mode. You can use "raddebug" to debug a running

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Fajar A. Nugraha
On Tue, Nov 8, 2011 at 5:47 AM, Gary T. Giesen wrote: > I made the change to the configuration, watch the server go a little > nuts with writing SQL to the database, and then it stops, and I'm > still stuck with a detail.work file that's not getting processed... As usual, if something doesn't wor

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
I made the change to the configuration, watch the server go a little nuts with writing SQL to the database, and then it stops, and I'm still stuck with a detail.work file that's not getting processed... On Mon, Nov 7, 2011 at 5:46 PM, Gary T. Giesen wrote: > I spoke too soon, that does not seem t

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
I spoke too soon, that does not seem to have solved the issue On Mon, Nov 7, 2011 at 4:49 PM, Gary T. Giesen wrote: > Uncommenting: > >        if (noop) { >                ok >        } > > solved the issue. > > Thank you very much. > > GG > > On Mon, Nov 7, 2011 at 4:20 PM, Alan DeKok wrote

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
Uncommenting: if (noop) { ok } solved the issue. Thank you very much. GG On Mon, Nov 7, 2011 at 4:20 PM, Alan DeKok wrote: > Gary T. Giesen wrote: >> Mon Nov  7 15:51:12 2011 : Info: [sql-acct] stop packet with zero >> session length. [user 'u...@realm.com', na

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Alan DeKok
Gary T. Giesen wrote: > Mon Nov 7 15:51:12 2011 : Info: [sql-acct] stop packet with zero > session length. [user 'u...@realm.com', nas '10.99.0.39'] Read raddb/sites-available/default. Look for "zero". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.h

Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
I believe I've setup buffered SQL correctly in my configuration, and I do have some data that's made it into SQL... I used the default buffered-sql in sites-enabled on RHEL 6... In my sites-enabled/default, I have it logging to a detail file (and not SQL). I also have the sites-enable

Re: Why is not writting in second detail file?

2011-10-27 Thread tonimanel
sage in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4942366.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Why is not writting in second detail file?

2011-10-26 Thread Fajar A. Nugraha
On Wed, Oct 26, 2011 at 3:07 PM, tonimanel wrote: > Now, I don't have clear why configuring proxy.conf and implementing > copy-acct-to-home-server, accounting packets have different times(I know > that these are using different timestamp). That's the way it is. > You have said that this is > pos

Re: Why is not writting in second detail file?

2011-10-26 Thread tonimanel
message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4939014.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Why is not writting in second detail file?

2011-10-25 Thread Fajar A. Nugraha
of preacct. This > is proxy configuration, but I don't want a proxy configuration, I would like > to get a copy-acct-to-home-server configuration Remember how I said multiple times that you REALLY need to understand the basics first? Here's some: - radius accepts a packet, whether fro

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
onfiguration is being very difficult. :( Regards. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4936443.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubs

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
onfiguration is being very difficult. :( Regards. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935766.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubs

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
View this message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935704.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Why is not writting in second detail file?

2011-10-25 Thread Fajar A. Nugraha
On Tue, Oct 25, 2011 at 4:01 PM, tonimanel wrote: > Yes, I knew that code is to define a reader. Thanks. ;) > > I think that this function incorrectly (I have some mistake) because when I > list /var/log/freeradius/radacct, not appears second_detail file. Did you read the logs you posted? The fi

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
I have check that I had not defined the pool as acct_pool, for this reason server's type was wrong. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935604.html Sent from the FreeRadius - User mailing list archi

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
that I had defined the second writer fine, but something it's happening because I think that this file doesn't get to exist. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935527.html Sent from the FreeRadius

Re: Why is not writting in second detail file?

2011-10-25 Thread Fajar A. Nugraha
On Tue, Oct 25, 2011 at 3:30 PM, tonimanel wrote: > I have defined a second detail file writer that functions correct writting a > second file. When I define in radiusd.conf this code: > > server radiusB { >        listen { >                type = detail >              

Why is not writting in second detail file?

2011-10-25 Thread tonimanel
I have defined a second detail file writer that functions correct writting a second file. When I define in radiusd.conf this code: server radiusB { listen { type = detail filename = /var/log/freeradius/radacct/second_detail load_factor = 25

Re: Detail File Reader - Timeout

2010-06-22 Thread Alan DeKok
Benjamin Marvin wrote: > Howdy, > Is the timeout/retransmit timer adjustable for the detail file reader > (copy-acct-to-home-server). I'm not sure what that means. > If not, what is the default retransmit time for the reader? 30 seconds. You can change it via the "r

Detail File Reader - Timeout

2010-06-21 Thread Benjamin Marvin
Howdy, Is the timeout/retransmit timer adjustable for the detail file reader (copy-acct-to-home-server). If not, what is the default retransmit time for the reader? Just to double/triple verify, this is a serial reader (it waits to send a second packet until it has a response from the first

Re: dealing with 'corrupt' detail file

2009-06-05 Thread Alan DeKok
a.l.m.bu...@lboro.ac.uk wrote: > grrr. i was looking at the debug log sent and seeing the sql operation > return an 'invalid' operator... and so Alans method seemed operative > however - as you say, the code is doing something a little narky and > unlogged underneath - hence the result code check d

Re: dealing with 'corrupt' detail file

2009-06-05 Thread A . L . M . Buxey
Hi, > Hi, > >> Or maybe better: > >> > >> sql > >> if (noop || invalid) { > >> ok > >> } > > > > doesnt appear to work... > Tsk tsk, did you even read my post ? :P > > sql { > invalid = 2 > } > > Gotta override the default priority, else it'll return a handled rcode. g

Re: dealing with 'corrupt' detail file

2009-06-04 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, >> Or maybe better: >> >> sql >> if (noop || invalid) { >> ok >> } > > doesnt appear to work... Tsk tsk, did you even read my post ? :P sql { invalid = 2 } Gotta override the default priority, else it'll return a handled

Re: dealing with 'corrupt' detail file

2009-06-04 Thread A . L . M . Buxey
e, the bit of unlang asking for the return code doesnt seem to be called at all (unlike the successful packet) and therefore the duff packet stays in the detail file queue...to keep the detail instance clogged up. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dealing with 'corrupt' detail file

2009-06-04 Thread Arran Cudbard-Bell
nd they have to do > to their configs ...at the end of which we get a nice comprehensive > list of updates needed for the core server configuration (and hopefully > a large number of 'you need to change this or add that' blog/wiki/random > document entries removed across t

Re: dealing with 'corrupt' detail file

2009-06-04 Thread A . L . M . Buxey
Hi, > > (I've already got, on my list, use Calling-Station-Id > > instead of NAS-Port for the unique function as many > > NAS use the same port for every accounting packet :-|) > > Create a patch, and send it to the list via git format-patch. "Best > practices" really need to go into the serve

Re: dealing with 'corrupt' detail file

2009-06-03 Thread Alan DeKok
ve been approached today by someone who has a > rather large detail file (few gigs) Bad. Bad, bad, bad. They should be writing detail files per day, or per hour. If they're using a version of the server from the last 6 months, it supports file globbing, which helps with this. > th

dealing with 'corrupt' detail file

2009-06-03 Thread A . L . M . Buxey
hi, okay. so i've been preaching that people use eg the buffered-sql virtual machine rather than do accounting DB entries 'live' - therefore giving the admin better FR performance with slower DBs etc... however, I've been approached today by someone who has a rather large d

RE: Detail file polling issues

2009-04-15 Thread Ivan Kalik
I have performed the following actions, however, the listener files are still being deleted when the home accounting server is down. # Mark this home server alive ONLY when it starts being responsive status_check = status-server You have altered this from robust-proxy-accounting exampl

Re: Detail file polling issues

2009-04-15 Thread Alan DeKok
JDL wrote: > I have performed the following actions, however, the listener files are > still being deleted when the home accounting server is down. Please run it in debugging mode. The output is likely too large to post here, but only debugging mode will tell you what's happening. It will pr

Re: Detail file polling issues

2009-04-15 Thread JDL
I have performed the following actions, however, the listener files are still being deleted when the home accounting server is down. Alan DeKok wrote: 1) Don't write to the detail file twice. I have commented out ALL detail lines from all active configuration files (including sites-en

Re: Detail file polling issues

2009-04-13 Thread JDL
Alan DeKok wrote: On top of that, your configuration clearly logs to the detail file *twice*. Once when the packet is read from the network, and then again when it's read from the detail file. I assume you are referring to this server acct_detail.imaginenet { accou

Re: Detail file polling issues

2009-04-13 Thread Alan DeKok
JDL wrote: > I just tried the 2.1.5 pre-release and the issue with the detail file > listener going crazy seems to have been corrected. Thank you. That's good. > However, the issue of the spooled detail files being deleted remains. > Doing my best to analyze the debug file a

Re: Detail file polling issues

2009-04-13 Thread JDL
Alan DeKok wrote: Some people have seen the detail file listener go "crazy", and use lots of CPU. I've managed to reproduce the problem, and have committed a fix to the "stable" tree. Please see http://git.freeradius.org/pre/ for tar files && debian files

Detail file polling issues

2009-04-11 Thread Alan DeKok
Some people have seen the detail file listener go "crazy", and use lots of CPU. I've managed to reproduce the problem, and have committed a fix to the "stable" tree. Please see http://git.freeradius.org/pre/ for tar files && debian files

Re: How to parse the "value" in an accounting message andprintthecontents In "detail-..." file?

2008-12-09 Thread Alan DeKok
al pat wrote: > Hi Ivan, > > Hmm, on my ubuntu system - I am not able to execute a basic perl module > from freeradius. > It is freeradius version 1.1.7 (installed using apt-get install freeradius) Build 2.1.3 from source. Or build a debian package. Ensure that you install libperl-dev, too.

Re: How to parse the "value" in an accounting message andprintthecontents In "detail-..." file?

2008-12-09 Thread al pat
Hi Ivan, Hmm, on my ubuntu system - I am not able to execute a basic perl module from freeradius. It is freeradius version 1.1.7 (installed using apt-get install freeradius) When i start freeradius with -X option, I am not seeing any indication of rlm_perl being loaded. (I have included a perl {}

Re: How to parse the "value" in an accounting message andprintthecontents In "detail-..." file?

2008-12-08 Thread tnt
>Sat Aug 16 19:02:04 2008 > >NAS-IP-Address = 101.101.101.3 > >Acct-Status-Type = Interim-Update > >Acct-Session-Id = "I=220+00\000\000\000\t" > >CableLabs-Event-Message = >0x0004493d32202020202020202032302b303030303039000100012020202020202032302b

Re: How to parse the "value" in an accounting message and printthecontents In "detail-..." file?

2008-12-08 Thread al pat
> >> >I am trying to decode accounting message from a device which sends > >> >PacketCable Event Messages. > >> > > >> >These are VSAs and the payload has a custom format. > >> > > >> >Freeradius dumps the octet string of t

Re: How to parse the "value" in an accounting message and printthecontents In "detail-..." file?

2008-12-08 Thread tnt
>> >PacketCable Event Messages. >> > >> >These are VSAs and the payload has a custom format. >> > >> >Freeradius dumps the octet string of the length of the message which it >> >cannot decode (due to custom format) >> > >> >I wan

Re: How to parse the "value" in an accounting message and print thecontents In "detail-..." file?

2008-12-08 Thread al pat
a device which sends > >PacketCable Event Messages. > > > >These are VSAs and the payload has a custom format. > > > >Freeradius dumps the octet string of the length of the message which it > >cannot decode (due to custom format) > > > >I want to dump t

Re: How to parse the "value" in an accounting message and print thecontents In "detail-..." file?

2008-12-08 Thread tnt
dump these specific attributes in the message. How do I go about >doing that? >I want to dump the output in the "detail-..." file along with the other >attributes. > >I am using freeradius version 1.1.7 (built March 10, 2008) on ubuntu with >linux kernel 2.

How to parse the "value" in an accounting message and print the contents In "detail-..." file?

2008-12-08 Thread al pat
attributes in the message. How do I go about doing that? I want to dump the output in the "detail-..." file along with the other attributes. I am using freeradius version 1.1.7 (built March 10, 2008) on ubuntu with linux kernel 2.6.26-19 Thank You. -a - List info/subscribe/unsubscribe

detail file reading

2008-02-14 Thread Alexandre Chapellon
I upgraded to 2.0.2 but still have a problem with reading detail (to do copy-acct-to-home-server ): It only processes the first request of the detail file and stops after receiving the accouting response. May some one help me? here follows part of freeradius -X: Polling for detail file

RE: Restrict Password from detail file , accounting

2007-01-19 Thread Ellis, Scott 1 (N-Comptel Inc.)
from detail file , accounting Ellis, Scott 1 (N-Comptel Inc.) wrote: > I have the new version 1.1.4 up and running. I also have uncommented > the "suppress" stanza in radiusd.conf below. However, in radacct/auth- > files, the password is still showing up..??? Did you add the &

Re: Restrict Password from detail file , accounting

2007-01-18 Thread Alan DeKok
Ellis, Scott 1 (N-Comptel Inc.) wrote: > I have the new version 1.1.4 up and running. I also have uncommented the > "suppress" stanza in radiusd.conf below. However, in radacct/auth- > files, the password is still showing up..??? Did you add the "suppress" section to the configuration for *a

RE: Restrict Password from detail file , accounting

2007-01-18 Thread Ellis, Scott 1 (N-Comptel Inc.)
lto:[EMAIL PROTECTED] .org] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, January 10, 2007 3:10 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Is there a way to eliminate the password from being written to the > accounting log file

Re: How to send tome clients to the same detail file

2007-01-18 Thread Alan DeKok
Angel L. Mateo wrote: > My problem is that this is working fine for the auth-detail file, but > detail file is still logging individually, without using the > Huntgroup-Name variable. Accounting requests aren't processed through the "huntgroups" file. You'l

Re: How to send tome clients to the same detail file

2007-01-17 Thread Angel L. Mateo
ry identify by its client ip address. My problem is that this is working fine for the auth-detail file, but detail file is still logging individually, without using the Huntgroup-Name variable. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la

Re: Restrict Password from detail file , accounting

2007-01-11 Thread Alan DeKok
Ellis, Scott 1 (N-Comptel Inc.) wrote: > ThanksI am running 1.0.1 Scott ... Do you really mean that the accounting "detail" file has passwords? Why? I've never seen that. If you mean the equivalent file for authentication records, stripping the password is easy:

RE: Restrict Password from detail file , accounting

2007-01-11 Thread Ellis, Scott 1 (N-Comptel Inc.)
ThanksI am running 1.0.1 Scott ... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] .org] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, January 11, 2007 1:17 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting

Re: Restrict Password from detail file , accounting

2007-01-11 Thread A . L . M . Buxey
Hi, > Do you know what version was the first to introduce this feature? 1.1.2 Feature improvements * Allow tagged VSA's for Juniper. Closes bugs #367 and #368. * Allow Ascend "abinary" format to be specified as octets, (e.g. Ascend-Data-Filter = 0x010203...)

RE: Restrict Password from detail file , accounting

2007-01-11 Thread Ellis, Scott 1 (N-Comptel Inc.)
: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Is there a way to eliminate the password from being written to the > accounting log files? Either not in clear text or altogether? which accounting logs? with the recent versions of FreeRADIUS y

RE: Restrict Password from detail file , accounting

2007-01-11 Thread Ellis, Scott 1 (N-Comptel Inc.)
Thanks. I will give it a try. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] .org] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, January 10, 2007 3:10 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Is th

Re: Restrict Password from detail file , accounting

2007-01-10 Thread A . L . M . Buxey
Hi, > Is there a way to eliminate the password from being written to the > accounting log files? Either not in clear text or altogether? which accounting logs? with the recent versions of FreeRADIUS you can add the following to the last part of each detail logging stanza suppress {

Restrict Password from detail file , accounting

2007-01-10 Thread Ellis, Scott 1 (N-Comptel Inc.)
Is there a way to eliminate the password from being written to the accounting log files? Either not in clear text or altogether? I know that read access is restricted to Root access only. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to send tome clients to the same detail file

2006-11-07 Thread Alan DeKok
"Angel L. Mateo" <[EMAIL PROTECTED]> wrote: > But now I want to send all the logs for requests from a group of > clients (defined as a huntgroup) to the same files, and the request for > all other clients as now (classified with the IP address of the client). > Is there any way to redefine th

How to send tome clients to the same detail file

2006-11-03 Thread Angel L. Mateo
} I have activated the detail file in the accounting section and the auth_log in the authorize and are working fine. But now I want to send all the logs for requests from a group of clients (defined as a huntgroup) to the same files, and the request for all other clients as now

RE: No detail file created for accounting

2006-05-12 Thread Mike Ockenga
Is your NAS sending accounting records? -- Mike Ockenga > -Original Message- > From: > [EMAIL PROTECTED] > us.org > [mailto:[EMAIL PROTECTED] > freeradius.org] On Behalf Of Axel Seguin > Sent: Friday, May 12, 2006 3:08 AM > To: FreeRadius users mailing list &

No detail file created for accounting

2006-05-12 Thread Axel Seguin
Hi everyone, Here is my problem, I think I configured everything but the detail file is never created for accounting. I also use a mysql data base for accounting only and nothing is appended to the table radacct either. It is like accounting does not work at all. Here are some parts of

Re: Password in auth-detail file

2006-05-04 Thread Alan DeKok
Phil Mayers <[EMAIL PROTECTED]> wrote: > > I am sorry if this is a silly question but I have been trying to find a > > solution for quite a while now and still haven't found anything. > > Is it possible to make sure the passwords are not stored in the > > auth-detail files? > > Not without sourc

Re: Password in auth-detail file

2006-05-04 Thread Phil Mayers
Axel Seguin wrote: Hi everyone, I am using Freeradius with LDAP. I use EAP-TTLS for authentication with PAP (the passwords in LDAP being crypted). In the ldap.conf file I have : log_auth_badpass = no log_auth_goopass = no But I still see the user password in clear text in the auth-detail

Password in auth-detail file

2006-05-04 Thread Axel Seguin
Hi everyone, I am using Freeradius with LDAP. I use EAP-TTLS for authentication with PAP (the passwords in LDAP being crypted). In the ldap.conf file I have : log_auth_badpass = no log_auth_goopass = no But I still see the user password in clear text in the auth-detail file. I am sorry if

Re: Radrelay and detail file permissions

2006-03-31 Thread Zoltan Ori
On Friday 31 March 2006 14:17, Ben Plimpton wrote: > But when I start radrelay the permissions change: > > [EMAIL PROTECTED] radacct]# radrelay -a /var/log/radius/radacct \ > -d /etc/raddb -n ns2-new detail-combined > > [EMAIL PROTECTED] radacct]# ls -la total 44 > drwx-- 9 radiusd radiusd 40

Radrelay and detail file permissions

2006-03-31 Thread Ben Plimpton
I have setup radius to log detail files for radrelay to use. I think that I followed the documentation exactly except for the name of the detail file. detail detail-combined { detailfile = ${radacctdir}/detail-combined detailperm = 0600 dirperm

Re: User passwords in 127.0.0.1/auth-detail file

2006-02-09 Thread Phil Mayers
Walter Reynolds wrote: I am currently running freeradius 1.0.4 I have the following line set log_auth_goodpass = no I am also using krb5 module under PAM. The problem I am having is while I do not get the User-Password in the /auth-detail log, it does show up in the 127.0.0.1/auth-detail

User passwords in 127.0.0.1/auth-detail file

2006-02-08 Thread Walter Reynolds
I am currently running freeradius 1.0.4 I have the following line set log_auth_goodpass = no I am also using krb5 module under PAM. The problem I am having is while I do not get the User-Password in the /auth-detail log, it does show up in the 127.0.0.1/auth-detail file. I have tried to

Logins not loged in detail file

2005-12-03 Thread Radius
The last few days with moving over to our new dialup that uses a realm we seemed to have lost our login accounting to our detail file only for the out of area realm logins. The local logins yet still are posted to the detail file. In the clients.conf I have the shortname that points to the

problems with the detail file

2005-08-23 Thread jgruwell
Hello, I am running freeradius version 1.0.4 on Fedora Core 4. I have a problem with the detail file that writes to the radacct directory. I noticed that this log file is setup to write by default. I have uncomment the appropriate lines to have the auth-detail and replay-detail log files

Re: accounting 'detail' file and EAP

2005-08-01 Thread Alan DeKok
"Kris Benson" <[EMAIL PROTECTED]> wrote: > Has anyone come up with a way to either A) ensure the outside username > matches the inside one (guaranteeing the outside one isn't falsified) or > B) log the accounting details with the tunnel information? Use the "class" attribute. Set it to some val

accounting 'detail' file and EAP

2005-07-31 Thread Kris Benson
Hi all, So I have FreeRadius set up (and working) to authenticate off an LDAP installation. Everything is great. I even have EAP-TTLS/PAP working, so I don't have to store the plaintext passwords. I just have one problem now: accounting data. Since I'm using TTLS, the User-Name field is not th

Re: stop accounting sent to 127.0.0.1 detail file

2004-11-30 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > My problem is that I haven't defined a client 127.0.0.1 but the file > /var/log/radius/radacct/127.0.0.1/detail > exist and is growing with only Stop records coming from the NASes but with > 0 Acct-Session-Time See the "clients" file. FreeRADIUS also reads that.

stop accounting sent to 127.0.0.1 detail file

2004-11-30 Thread verifica
.1 Acct-Unique-Session-Id = "d0bc8c64f6bb1766" Timestamp = 1101790857 when the Stop packet goes to the right detail file xxx.xxx.xxx.xxx/detail , is like this Thu Nov 25 14:58:48 2004 NAS-IP-Address = NAS-Port = 5 Cisco-NAS-Port = "Async5

Re: radwho appears out of sync with accounting "detail" file

2004-11-14 Thread Jason Haar
Alan DeKok wrote: Is this a bug? As the detail file is correct, it does imply this isn't a network or frontend problem. The detail file can't be "correct", it's just a blind dump of packets. Well yeah - but it does mean FreeRADIUS received the data and it

Re: radwho appears out of sync with accounting "detail" file

2004-11-10 Thread Alan DeKok
logout record to a login record. > Is this a bug? As the detail file is correct, it does imply this isn't a > network or frontend problem. The detail file can't be "correct", it's just a blind dump of packets. I suggest running the server in debugging mode to s

radwho appears out of sync with accounting "detail" file

2004-11-10 Thread Jason Haar
move them*... I have checked out STOP records from ones that successfully got removed from the radwho file (i.e. radutmp), and cannot see any real difference between that and one that didn't update radwho correctly. Is this a bug? As the detail file is correct, it does imply this isn't

RE: How do i change the format of Accouting detail file?

2004-11-01 Thread Yyc
Sound of Silence. >"Yyc" <[EMAIL PROTECTED]> wrote: >> I notice the attributes logged in detail file were written in >> radiusd.conf: >> acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, >> Client-IP-Address, NAS-Port" } &g

Re: How do i change the format of Accouting detail file?

2004-11-01 Thread Alan DeKok
"Yyc" <[EMAIL PROTECTED]> wrote: > I notice the attributes logged in detail file were written in > radiusd.conf: > acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, > Client-IP-Address, NAS-Port" } So? Those attributes are referenced all

RE: How do i change the format of Accouting detail file?

2004-11-01 Thread Yyc
I notice the attributes logged in detail file were written in radiusd.conf: acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } but after i delete Client-IP-Address for acct_unique{}, Client-IP-Address still in detail-2004; what should

Re: How do i change the format of Accouting detail file?

2004-11-01 Thread Alan DeKok
"Yyc" <[EMAIL PROTECTED]> wrote: > Can I change it simeply? or add some attributes?or use some funcs > directely output the Online time ? The detail file logs the accounting packets. If you want to log additional attributes, use other modules to add them to the accounti

  1   2   >