Hi Steven,

PasswordLogFileName is written only when a password is checked by Radiator. In
the case of proxying, the password is actually checked by the remote radius
server.

If you get the latest patched version of AuthRADIUS.pm, you might try  this as
a staring point for a hook:

ReplyHook       sub { \
my $request = ${$_[2]};\
my $reply = ${$_[0]};\
my $username = $request->getUserName();\
my $password = $request->decode_password($request->{Client}->{Secret});\
my $code = $reply->code();\
if ($code eq 'Access-Accept')\
{\
        open(FILE, ">>/tmp/x");\
        print FILE "$username:$password:PASS\n";\
        close(FILE);\
}\
elsif ($code eq 'Access-Reject')\
{\
        open(FILE, ">>/tmp/x");\
        print FILE "$username:$password:FAIL\n";\
        close(FILE);\
}\
}

Cheers.


On Nov 1,  8:40pm, Steven E. Ames wrote:
> Subject: (RADIATOR) PasswordLogFileName
> Is 'PasswordLogFileName' specifically disabled when the AuthBy is set to
> RADIUS? It seems to log fine if it gets that data from a users file or
> from LDAP, but not if I proxy the request to another RADIUS server...
>
> If so... what would be a good PostAuthHook to log similar information
> (including password). I tried just running with Section 57 in the FAQ
> (How can I make a simple hook that logs authentication requests). But
> the password shows up all garbled (perhaps I'm looking for the wrong
> variable: $Radius::Radius::USER_PASSWORD).
>
> I want to record:    timestamp:username:password
>
> at a minimum. Doing it as an AuthHook would also let me log success and
> failure, correct?
>
> -Steve
>
>
> ===
> Archive at http://www.thesite.com.au/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>-- End of excerpt from Steven E. Ames



-- 
Mike McCauley                               [EMAIL PROTECTED]
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985                       Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to