(RADIATOR) AuthLog question/requests

[Dave Kitabjian]

Well, I'm not going to complain. The <AuthLog> tool is a great tool. By
configuring it as follows:

        SuccessFormat   %l%r	\
                        User-Name = %U%r	\
                        Pass = 1%r	\
                        CallerId = %{Calling-Station-Id}%r	\
                        Typed-Password = %P%r	\
                        Severity = %0%r	\
                        Reason = %1%r%r
        FailureFormat   %l%r	\
                        User-Name = %U%r	\
                        Pass = 0%r	\
                        CallerId = %{Calling-Station-Id}%r	\
                        Typed-Password = %P%r	\
                        Severity = %0%r	\
                        Reason = %1%r%r

(ie, as a Radius-style record; note the literal tabs before the \) we
are able to use the same software we use for accounting data to import
the data into our system and provide our techs with near real-time
authentication info.

Perhaps the solution, since PasswordLogFileName and <AuthLog> appear to
fit into the object model differently, could be to offer the
SuccessFormat and FailureFormat options in the PasswordLogFileName
feature, rather than try to get the actual password in <AuthLog>...

Dave

> -----Original Message-----
> From: Hugh Irvine [mailto:hugh at open.com.au] 
> Sent: Wednesday, December 05, 2001 6:44 PM
> To: Dave Kitabjian; radiator at open.com.au
> Subject: Re: (RADIATOR) AuthLog question/requests
> 
> 
> 
> Hello Dave -
> 
> On Thu, 6 Dec 2001 02:05, Dave Kitabjian wrote:
> > Hello!
> >
> > Comparing <AuthLog FILE> to Handler.PasswordLogFileName, I have a 
> > couple of questions:
> >
> > 1) Does AuthLog FILE have an option for ExcludeFromPasswordLog?
> >
> 
> No it doesn't.
> 
> > 2) Can I get access to the correct_password, like 
> PasswordLogFileName 
> > does, in <AuthLog FILE> ? That would be a big help, 
> especially since 
> > the whole purpose of this logfile for us is to debug password 
> > problems.
> >
> 
> The logging only has access to the special characters defined 
> in section 6.2 
> of the manual.
> 
> regards
> 
> Hugh
> 
> 
> -- 
> Radiator: the most portable, flexible and configurable RADIUS 
> server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, 
> NT, MacOS X.
> -
> Nets: internetwork inventory and management - graphical, 
> extensible, flexible with hardware, software, platform and 
> database independence.
> 
===
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.