<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof"><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="ContentPasted0">Hi,
<div class="ContentPasted0">the following code works like a charm:</div>
<div><br class="ContentPasted0">
</div>
<div class="ContentPasted0"> $message->{radius}->{request} = $p->get_attrs; \</div>
<div class="ContentPasted0"> # don't leak the TACACS+ key \</div>
<div class="ContentPasted0"> delete $message->{radius}->{request}->{TACACSPLUSKey}; \</div>
<div class="ContentPasted0"> $message->{radius}->{response} = $p->{rp}->get_attrs; \</div>
<div><br class="ContentPasted0">
</div>
<div class="ContentPasted0">Note that the request packet contains the cleartext TACACSPLUSKey. Can you obscure or remove that like it happens for the User-Password?</div>
<div><br class="ContentPasted0">
</div>
Best regards, Alex<br>
</span></div>
<div class="elementToProof">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div>
<div></div>
<div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:; margin:0">
<div class="BodyFragment"><font size="2" face="Arial">
<div class="PlainText"><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 8pt;"><span lang="EN-US"><strong>T-SYSTEMS AUSTRIA GESMBH<br>
</strong></span></span><b><span style="font-size: 8pt; font-family: "Arial", sans-serif; color: black;" lang="EN-US"></span></b><span style="font-size: 8pt; font-family: "Arial", sans-serif; color: black;" lang="EN-US">PU Cyber Security<br>
Network Architecture</span><span style="color: rgb(0, 0, 0); font-family: arial; font-size: 8pt;"><span lang="EN-US"><br>
Operation Manager Authentication<br>
Rennweg 97-99, A-1030 Vienna<br>
+43 57057 4320 (phone)<br>
+43 676 8642 4320 (mobile)<br>
</span></span><span style="font-family:arial; font-size:8pt"><span style="color: black;"><font style="color: rgb(0, 0, 0); font-family: arial;">E-mail: alexander.hartmaier@t-systems.com</font></span></span><span style="font-family:arial; font-size:8pt"><span class="ms-rteThemeForeColor-5-0"><br>
</span></span><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><a tabindex="0"><font color="000000">Internet: www.t-systems.at
<br>
Blog: blog.t-systems.at<br>
Social Media: Facebook, Linkedin, Twitter</font><br>
</a><br>
</span></span><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><strong style="color: rgb(0, 0, 0);">BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.</strong><br style="color: rgb(0, 0, 0);">
<span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><br style="color: rgb(0, 0, 0);">
<span style="color: rgb(0, 0, 0); font-family: arial;" lang="EN-US"><span></span><span></span></span></span></span></span></span></span><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><span style="color: rgb(0, 0, 0); font-family: arial;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" size="2"><font size="2" face="Arial"><span style="font-family:arial; font-size:8pt"><span style="color: black;" lang="EN-US"><span lang="EN-US"><span style="font-family:arial"><span style="color: black;" lang="EN-US"><font class="ms-rteThemeForeColor-1-4" face="Arial">****************************************************************************************************************</font></span></span></span></span></span></font></font></span><br class="ms-rteThemeForeColor-1-4">
<span class="ms-rteThemeForeColor-1-4">T-Systems Austria GesmbH, Rennweg 97-99, A-1030 Vienna</span><br class="ms-rteThemeForeColor-1-4">
<span class="ms-rteThemeForeColor-1-4">Commercial Court Vienna, FN 79340b</span><font class="ms-rteThemeForeColor-1-4" face="Arial"><br>
****************************************************************************************************************<br>
Notice: This transmittal and/or attachments may be privileged or confidential. It is
<br>
intended solely for the addressee named above. If you received this transmittal in error,
<br>
please notify us immediately by reply and delete this message and all its attachments.
<br>
Thank you. <br>
****************************************************************************************************************</font><font class="ms-rteThemeForeColor-1-4" face="Arial"><br>
</font></span></span></span></span></span></div>
</font></div>
</div>
</div>
</div>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Von:</b> Hugh Irvine <hugh@irvine.com.au><br>
<b>Gesendet:</b> Montag, 5. Dezember 2022 22:02<br>
<b>An:</b> Hartmaier, Alexander <alexander.hartmaier@t-systems.com><br>
<b>Cc:</b> Alexander Hartmaier via radiator <radiator@lists.open.com.au>; support at radiatorsoftware.com <support@radiatorsoftware.com><br>
<b>Betreff:</b> Re: [RADIATOR] Log all request and reply attributes</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText"><br>
Hi Alex -<br>
<br>
Have a look at “Radius/Log.pm”, “Radius/LogGeneric.pm”, “Radius/LogFormat.pm” and related “Radius/Log……” modules.<br>
<br>
See also “goodies/logformat.cfg”.<br>
<br>
regards<br>
<br>
Hugh<br>
<br>
<br>
> On 6 Dec 2022, at 03:35, Alexander Hartmaier via radiator <radiator@lists.open.com.au> wrote:<br>
> <br>
> Thanks Hugh!<br>
> <br>
> Now the last missing part is a method I can call on $p and $rp to get a list of human-readable attribute/value pairs for both.<br>
> I haven't found the code that generates the trace output.<br>
> <br>
> Thanks, Alex<br>
> <br>
> T-SYSTEMS AUSTRIA GESMBH<br>
> PU Cyber Security<br>
> Network Architecture<br>
> Operation Manager Authentication<br>
> Rennweg 97-99, A-1030 Vienna<br>
> +43 57057 4320 (phone)<br>
> +43 676 8642 4320 (mobile)<br>
> E-mail: alexander.hartmaier@t-systems.com<br>
> Internet: <a href="http://www.t-systems.at">www.t-systems.at</a> <br>
> Blog: blog.t-systems.at<br>
> Social Media: Facebook, Linkedin, Twitter<br>
> <br>
> BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.<br>
> <br>
> ****************************************************************************************************************<br>
> T-Systems Austria GesmbH, Rennweg 97-99, A-1030 Vienna<br>
> Commercial Court Vienna, FN 79340b<br>
> ****************************************************************************************************************<br>
> Notice: This transmittal and/or attachments may be privileged or confidential. It is
<br>
> intended solely for the addressee named above. If you received this transmittal in error,
<br>
> please notify us immediately by reply and delete this message and all its attachments.
<br>
> Thank you. <br>
> ****************************************************************************************************************<br>
> Von: Hugh Irvine <hugh@irvine.com.au><br>
> Gesendet: Freitag, 2. Dezember 2022 01:41<br>
> An: Hartmaier, Alexander <alexander.hartmaier@t-systems.com><br>
> Cc: radiator@lists.open.com.au <radiator@lists.open.com.au><br>
> Betreff: Re: [RADIATOR] Log all request and reply attributes<br>
> <br>
> Hello Alexander -<br>
> <br>
> There is a pointer to the reply packet in the received packet:<br>
> <br>
> Here is an example from Radius/Configurable.pm:<br>
> <br>
> my $rp_code = $p->{rp}->code();<br>
> <br>
> So yes, $p is a pointer to the decoded current request, and $rp is a pointer to the reply packet that is being prepared.<br>
> <br>
> hope that helps<br>
> <br>
> Hugh<br>
> <br>
> <br>
> > On 30 Nov 2022, at 01:40, Alexander Hartmaier via radiator <radiator@lists.open.com.au> wrote:<br>
> > <br>
> > Hi,<br>
> > I'm looking for a way to include all request and reply attributes in our JSON log which is generated via a LogFormatHook.<br>
> > <br>
> > $p is passed to it and described as 'Reference to the current request' in the docs but not which methods it has.<br>
> > In AuthBy LDAP2 the PostSearchHook also gets passed a $rp for the reply packet but not to LogFormatHook.<br>
> > <br>
> > Is there a supported way to get at this list?<br>
> > <br>
> > The output should be a list of key/value pairs of all human-readable attributes and their values.<br>
> > <br>
> > Thanks, Alex<br>
> > <br>
> > T-SYSTEMS AUSTRIA GESMBH<br>
> > PU Cyber Security<br>
> > Network Architecture<br>
> > Operation Manager Authentication<br>
> > Rennweg 97-99, A-1030 Vienna<br>
> > +43 57057 4320 (phone)<br>
> > +43 676 8642 4320 (mobile)<br>
> > E-mail: alexander.hartmaier@t-systems.com<br>
> > Internet: <a href="http://www.t-systems.at">www.t-systems.at</a> <br>
> > Blog: blog.t-systems.at<br>
> > Social Media: Facebook, Linkedin, Twitter<br>
> > <br>
> > BIG CHANGES START SMALL – CONSERVE RESOURCES BY NOT PRINTING EVERY E-MAIL.<br>
> > <br>
> > ****************************************************************************************************************<br>
> > T-Systems Austria GesmbH, Rennweg 97-99, A-1030 Vienna<br>
> > Commercial Court Vienna, FN 79340b<br>
> > ****************************************************************************************************************<br>
> > Notice: This transmittal and/or attachments may be privileged or confidential. It is
<br>
> > intended solely for the addressee named above. If you received this transmittal in error,
<br>
> > please notify us immediately by reply and delete this message and all its attachments.
<br>
> > Thank you. <br>
> > ****************************************************************************************************************<br>
> > _______________________________________________<br>
> > radiator mailing list<br>
> > radiator@lists.open.com.au<br>
> > <a href="https://lists.open.com.au/mailman/listinfo/radiator">https://lists.open.com.au/mailman/listinfo/radiator</a><br>
> <br>
> <br>
> _______________________________________________<br>
> radiator mailing list<br>
> radiator@lists.open.com.au<br>
> <a href="https://lists.open.com.au/mailman/listinfo/radiator">https://lists.open.com.au/mailman/listinfo/radiator</a><br>
<br>
<br>
</div>
</span></font></div>
</body>
</html>