(RADIATOR) Authlog SQL question

Hugh Irvine hugh at open.com.au
Thu Oct 5 17:57:18 CDT 2006


Hello Roel -

Yes you can use an Identifier and a Description anywhere in the  
configuration file including a Realm of Handler.


<Handler .....>
	Identifier WhateverYouWish
	Description Some description that is useful for documentation and  
logging
	.....
</Handler>


You refer to them as %{Handler:Identifier}, %{Handler:Description}, etc.

BTW - you can also do the same thing for globals with %{Server:.....}.

See section 5.2 in the Radiator 3.15 reference manual ("doc/ref.html").

regards

Hugh


On 6 Oct 2006, at 00:51, R.H.Hoek wrote:

> Dear All,
>
> We want to log authentication successes and failures into an SQL dB.
> For that purpose we use the next config:
>
> <AuthLog SQL>
>    Identifier authlogging-wlan-sql
>    DBSource        dbi:Oracle:xxxx
>    DBUsername      yyyyy
>    DBAuth          zzzzz
>    LogSuccess
>    SuccessQuery insert into RADAUTHLOG (TIMESTAMP, SERVER, NAS,
> USERNAME, USER_RAW, SERVICE, RESULT, REASON, TUNNELED,
> CALLINGSTATION) values (%t, '%h', '%c', %2, %4, 'WLAN', 'success',
> %1, '%{Handler:Identifier}', replace('%{Calling-Station-Id}', '.'))
>    LogFailure
>    FailureQuery insert into RADAUTHLOG (TIMESTAMP, SERVER, NAS,
> USERNAME, USER_RAW, SERVICE, RESULT, REASON, TUNNELED,
> CALLINGSTATION) values (%t, '%h', '%c', %2, %4, 'WLAN', 'failure',
> %1, '%{Handler:Identifier}', replace('%{Calling-Station-Id}', '.'))
> </AuthLog>
>
> <Handler
> Realm=utwente.nl,Client-Identifier=/^WLAN-ID$|^LOCALHOST-ID$/,
> TunnelledByTTLS=0>
>         <AuthBy FILE>
>                 EAPType TTLS
>         .
>         .
>         </AuthBy>
>         Identifier INNER
>         AuthLog authlogging-wlan-sql
> </Handler>
>
> Question: Is there a way to log handler attributes into SQL, such as
> Client-Identifier, Realm and TunnelledByTTLS ?
> Or is it possible to define more 'Identifiers' (or LocalVar's) ?
>
>
>
> -- 
>
> Groeten,
>
> Roel H.Hoek, Netwerkbeheer
> Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
> Universiteit Twente,  Postbus 217,  7500 AE  Enschede
> kmr SP 422, telefoon: 053 - 489 4598,  fax: 053 - 489 2383
> e-mail: r.h.hoek at utwente.nl http://www.utwente.nl/itbe
> IM-Jabber: rhhoek at gmail.com
>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list