(RADIATOR) Radiator Logging

[Hugh Irvine]

Hello Charles -

You will need the eap_anon_hook.pl as a PreProcessingHook in your  
accounting Handler:

.....

<Handler Request-Type = Accounting-Request>
	PreProcessingHook file:"%D/scripts/eap_anon_hook.pl"
	AddToRequest Connect-Info=%{Client:Identifier},Ascend-Authen-Alias=%h
	StripFromRequest Class
	<AuthBy RADIUS>
		Host radacct.mdc.musc.edu
		Secret nosecret
		AcctPort 1813
		Retries 10
		AcctFailedLogFileName %L/%{Client:Identifier}/%m%d%y.log.missed
	</AuthBy>
	AcctLogFileName %L/%{Client:Identifier}/%m%d%y.log
</Handler>

.....

You can also set "EAPAnonymous %0" in your outer AuthBy FILE:

	......

	<AuthBy FILE>
		......
		EAPAnonymous %0
	</AuthBy>

	......

See section 5.18.24 in the Radiator 4.2 reference manual ("doc/ 
ref.pdf").

You can also try adding the User-Name as a reply attribute to the  
access accept - some devices will then use it in the accounting  
requests.

regards

Hugh



On 3 Jun 2008, at 00:12, Cottrell, Charles P. wrote:

> Greetings folks!  I hope all is well.
>
> We have recently configured Radiator to run on Windows.  All seems  
> to be working nicely with one exception.  Without a noticeable  
> pattern our logs will show anonymous users successfully connecting  
> instead of proper user names.  Anonymous has appeared in both alive  
> and start records.   A user authenticates and the alive records may  
> show anonymous but the start record may show their username, or  
> vice-versa.  The controller (Cisco WiSM) also may show the user  
> name or anonymous.
>
> Below is a log example.  Notice that the workstation is the same,  
> and both are alive records.  Config is attached.
>
> Thanks in advance.  -charles
>
> Mon Jun 2 07:41:48 2008
>
> User-Name = "username"
>
> NAS-Port = 29
>
> NAS-IP-Address = 10.24.70.26
>
> Framed-IP-Address = 128.23.65.173
>
> NAS-Identifier = "c2wism6"
>
> Airespace-WLAN-Id = 4
>
> Acct-Session-Id = "483fe936/00:12:f0:ea:97:f2/12551"
>
> Acct-Authentic = RADIUS
>
> Tunnel-Type = 0:VLAN
>
> Tunnel-Medium-Type = 0:802
>
> Tunnel-Private-Group-ID = 64
>
> Acct-Status-Type = Alive
>
> Acct-Input-Octets = 1815855
>
> Acct-Output-Octets = 298259
>
> Acct-Input-Packets = 27572
>
> Acct-Output-Packets = 1914
>
> Acct-Session-Time = 258782
>
> Acct-Delay-Time = 0
>
> Calling-Station-Id = "0012.f0ea.97f2"
>
> Called-Station-Id = "10.24.70.26"
>
> Connect-Info = "airespace"
>
> Ascend-Authen-Alias = "RADAUTH3"
>
> Timestamp = 1212406908
>
> Mon Jun 2 07:42:03 2008
>
>
> User-Name = "anonymous"
>
> NAS-Port = 29
>
> NAS-IP-Address = 10.24.70.26
>
> Framed-IP-Address = 128.23.65.173
>
> NAS-Identifier = "c2wism6"
>
> Airespace-WLAN-Id = 4
>
> Acct-Session-Id = "483fe936/00:12:f0:ea:97:f2/12551"
>
> Acct-Authentic = RADIUS
>
> Tunnel-Type = 0:VLAN
>
> Tunnel-Medium-Type = 0:802
>
> Tunnel-Private-Group-ID = 64
>
> Acct-Status-Type = Alive
>
> Acct-Input-Octets = 1817575
>
> Acct-Output-Octets = 302938
>
> Acct-Input-Packets = 27596
>
> Acct-Output-Packets = 1924
>
> Acct-Session-Time = 258798
>
> Acct-Delay-Time = 0
>
> Calling-Station-Id = "0012.f0ea.97f2"
>
> Called-Station-Id = "10.24.70.26"
>
> Connect-Info = "airespace"
>
> Ascend-Authen-Alias = "RADAUTH3"
>
> Timestamp = 1212406923
>
>
>
>
>
> <radius.nosecret.cfg>



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.