(RADIATOR) Authlog SQL question
Hugh Irvine
hugh at open.com.au
Thu Oct 5 17:57:18 CDT 2006
Hello Roel -
Yes you can use an Identifier and a Description anywhere in the
configuration file including a Realm of Handler.
<Handler .....>
Identifier WhateverYouWish
Description Some description that is useful for documentation and
logging
.....
</Handler>
You refer to them as %{Handler:Identifier}, %{Handler:Description}, etc.
BTW - you can also do the same thing for globals with %{Server:.....}.
See section 5.2 in the Radiator 3.15 reference manual ("doc/ref.html").
regards
Hugh
On 6 Oct 2006, at 00:51, R.H.Hoek wrote:
> Dear All,
>
> We want to log authentication successes and failures into an SQL dB.
> For that purpose we use the next config:
>
> <AuthLog SQL>
> Identifier authlogging-wlan-sql
> DBSource dbi:Oracle:xxxx
> DBUsername yyyyy
> DBAuth zzzzz
> LogSuccess
> SuccessQuery insert into RADAUTHLOG (TIMESTAMP, SERVER, NAS,
> USERNAME, USER_RAW, SERVICE, RESULT, REASON, TUNNELED,
> CALLINGSTATION) values (%t, '%h', '%c', %2, %4, 'WLAN', 'success',
> %1, '%{Handler:Identifier}', replace('%{Calling-Station-Id}', '.'))
> LogFailure
> FailureQuery insert into RADAUTHLOG (TIMESTAMP, SERVER, NAS,
> USERNAME, USER_RAW, SERVICE, RESULT, REASON, TUNNELED,
> CALLINGSTATION) values (%t, '%h', '%c', %2, %4, 'WLAN', 'failure',
> %1, '%{Handler:Identifier}', replace('%{Calling-Station-Id}', '.'))
> </AuthLog>
>
> <Handler
> Realm=utwente.nl,Client-Identifier=/^WLAN-ID$|^LOCALHOST-ID$/,
> TunnelledByTTLS=0>
> <AuthBy FILE>
> EAPType TTLS
> .
> .
> </AuthBy>
> Identifier INNER
> AuthLog authlogging-wlan-sql
> </Handler>
>
> Question: Is there a way to log handler attributes into SQL, such as
> Client-Identifier, Realm and TunnelledByTTLS ?
> Or is it possible to define more 'Identifiers' (or LocalVar's) ?
>
>
>
> --
>
> Groeten,
>
> Roel H.Hoek, Netwerkbeheer
> Dienst Informatietechnologie, Bibliotheek en Educatie (ITBE)
> Universiteit Twente, Postbus 217, 7500 AE Enschede
> kmr SP 422, telefoon: 053 - 489 4598, fax: 053 - 489 2383
> e-mail: r.h.hoek at utwente.nl http://www.utwente.nl/itbe
> IM-Jabber: rhhoek at gmail.com
>
>
> --
> Archive at http://www.open.com.au/archives/radiator/
> Announcements on radiator-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe radiator' in the body of the message.
NB:
Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
More information about the radiator
mailing list