[RADIATOR] How do I log all reply attributes sent for an Access-Accept?

Linuxchuck linuxchuck at n-force.com
Tue Apr 10 14:42:43 CDT 2012


Hello all,

I'm looking for a way to log all possible Reply attributes to my authlog file.  I use many different types of VSAs, and would rather not have to scrub through all of my configs just to manually add each named Reply attribute to my <AuthLog FILE> stanza.

Here's what I currently have:

<AuthLog FILE>
         Identifier      AuthLogger
         Filename        /var/log/Radiator/authlog
         SuccessFormat   %l: [%{GlobalVar:DevType}] [%n] [%c] [%{NAS-IP-Address}] [%{Calling-Station-Id}] Accept %{Reply:Class}
         FailureFormat   %l: [%{GlobalVar:DevType}] [%n] [%c] [%{NAS-IP-Address}] [%{Calling-Station-Id}] Reject - %1
         LogSuccess      1
         LogFailure      1
</AuthLog>

This works just great if all I want to see is the Class attribute reply in my logfiles.  I see the Class assigned to any user if there is one right at the end of any Access-Accept line in my logs.

However, I have at least a dozen different reply attributes I'd like to track.  Since I'm not a perl guru by any stretch of the imagination, I'd love to know if there is some sort of secret-sauce I can stick in that reply variable to make it ... well ... Variable.

Here's a quick list off of the top of my head to give you an idea of the types of Replies I have it sending out:
Class
Framed-IP-Address
(Vendor)-Group-Name
(Vendor)-Interface-Name
Service-Type
and so-on, and so-forth...

Oh... and no, I don't want to turn up the Trace just for this...  :-P

Thanks in advance!

Chuck


More information about the radiator mailing list