[RADIATOR] EAP TLS error logging

[Markus Moeller]

Hugh,

   It is not exactly what I was looking for.  I get in radiator log the 
following error:

Thu Dec 10 09:09:26 2009: INFO: EAP TLS certificate verification failed: 
certificate revoked,  21773: 1 - error:140890B2:SSL 
routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

but I get in the reply

  Reply-Message = "TLS Alert acknowledged"

I wanted to use the error message "EAP TLS certificate verification failed: 
certificate revoked"in the log as the reason.
#
<AuthLog FILE>
        Identifier WLANLog
        Filename %L/WLANauthlog
        LogSuccess 1
        LogFailure 1
        SuccessFormat %B| Permitted %u from client (%c) access to %N from 
%{Request:Calling-Station-Id}
        FailureFormat %B| Denied %u from client (%c) access to %N from 
%{Request:Calling-Station-Id}. Reason: %{Reply:Reply-Message}
</AuthLog>


Markus
----- Original Message ----- 
From: "Hugh Irvine" <hugh at open.com.au>
To: "Markus Moeller" <huaraz at moeller.plus.com>
Cc: <radiator at open.com.au>
Sent: Wednesday, December 09, 2009 7:28 AM
Subject: Re: [RADIATOR] EAP TLS error logging



Hello Markus -

You can try using "RejectHasReason" in the Realm or Handler.

See section 5.17.23 in the Radiator 4.5.1 reference manual ("doc/ref.pdf").

regards

Hugh


On 9 Dec 2009, at 10:31, Markus Moeller wrote:

> Hi,
>
>  Is it possible to add the EAPTLS error to an attribute so that I can use 
> it  for syslog or in a logfile as a reason for an authentication error 
> (e.g. certificate has been revoked) ?
>
> Thank you
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive 
(www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.