[RADIATOR] How do I log all reply attributes sent for an Access-Accept?
Linuxchuck
linuxchuck at n-force.com
Tue Apr 10 14:42:43 CDT 2012
Hello all,
I'm looking for a way to log all possible Reply attributes to my authlog file. I use many different types of VSAs, and would rather not have to scrub through all of my configs just to manually add each named Reply attribute to my <AuthLog FILE> stanza.
Here's what I currently have:
<AuthLog FILE>
Identifier AuthLogger
Filename /var/log/Radiator/authlog
SuccessFormat %l: [%{GlobalVar:DevType}] [%n] [%c] [%{NAS-IP-Address}] [%{Calling-Station-Id}] Accept %{Reply:Class}
FailureFormat %l: [%{GlobalVar:DevType}] [%n] [%c] [%{NAS-IP-Address}] [%{Calling-Station-Id}] Reject - %1
LogSuccess 1
LogFailure 1
</AuthLog>
This works just great if all I want to see is the Class attribute reply in my logfiles. I see the Class assigned to any user if there is one right at the end of any Access-Accept line in my logs.
However, I have at least a dozen different reply attributes I'd like to track. Since I'm not a perl guru by any stretch of the imagination, I'd love to know if there is some sort of secret-sauce I can stick in that reply variable to make it ... well ... Variable.
Here's a quick list off of the top of my head to give you an idea of the types of Replies I have it sending out:
Class
Framed-IP-Address
(Vendor)-Group-Name
(Vendor)-Interface-Name
Service-Type
and so-on, and so-forth...
Oh... and no, I don't want to turn up the Trace just for this... :-P
Thanks in advance!
Chuck
More information about the radiator
mailing list