Hello Jeremy -
There are a few things wrong with the configuration file, but you should be
getting two different logfiles:
/etc/raddb/logfile.testing-normal
and
%D/logfile.testing-adsl
where %D = /etc/raddb
The first one should contain everything, and the second one should contain a
subset corresponding to the <Realm adsl>.
I have just been testing this here and it works correctly with the
configuration file that I will attach to this mail.
BTW - here is the ls -l log*:
ls -l log*
-rw-r--r-- 1 root root 14994 Apr 29 16:32 logfile
-rw-r--r-- 1 root root 195 Apr 29 16:31 logfile.testing-adsl
regards
Hugh
On Mon, 29 Apr 2002 15:59, Jeremy Burton wrote:
> Hi All,
> I've just upgraded from Radiator 2.17.1 to Radiator 3.0.
> I am trying to log different parts of the config to different log files,
> and am having no luck at all - everything just ends up in the global
> logfile. Attached is my config file - this isn't actually my main config
> file, but a smaller one which replicates the problem. Also I'll attach the
> default entries for the users.dialup and users.adsl... Basically, anyone
> know why I'm only getting one log file, not two, as i would expect from
> the additional <Log FILE></Log> directive?
>
> radius.cfg:
>
> # $Revision: 1.7 $
> # $Date: 2001/06/28 08:31:35 $
> #
> #Foreground
> #LogStdout
> Trace 3
>
> # NOTE: Anywhere that
> # PreHandlerHook sub { ${$_[0]}->add_attr('Client-Port-DNIS', '55555550');}
> # appears is so that eXtremes can log onto analogue equipment..
>
> PidFile /etc/raddb/radiusd.testing.pid
> AuthPort 1645
> AcctPort 1646
> LogDir /var/radacct
> LogFile /etc/raddb/logfile.testing-normal
> DbDir /etc/raddb
> DictionaryFile /etc/raddb/dictionary.ascend
>
> <Client 210.15.210.5>
> FramedGroupBaseAddress 10.200.0.0
> Secret XXXXXXXXX
> DupInterval 10
> </Client>
>
> <Realm WhoShotAdsl>
> # You can group multiple AuthBy methods with AuthBy GROUP
> <AuthBy GROUP>
> Identifier AdslSystem
> AuthByPolicy ContinueWhileAccept
> <AuthBy SQL>
> # AuthSelect with empty string means dont do auth
> AuthSelect SELECT password, radius.check_items_new('%n',
>'%N',
> '%{Client-Port-DNIS}'), radius.reply_items_new('%n', '%N') FROM SA.Clients,
> sa.adsl where username = '%n' and adsl.userid = clients.userid
> AuthColumnDef 0, User-Password, check
> AuthColumnDef 1, GENERIC, check
> AuthColumnDef 2, GENERIC, reply
> DBSource dbi:Oracle:SOME_SID
> DBUsername SOME_USER
> DBAuth SOME_PASS
> AccountingTable
> Timeout 10000
> FailureBackoffTime 300
> </AuthBy>
> </AuthBy>
> </Realm>
>
> <Realm WhoShotWho>
> # You can group multiple AuthBy methods with AuthBy GROUP
> <AuthBy GROUP>
> Identifier System
> AuthByPolicy ContinueWhileAccept
> <AuthBy SYSTEM>
> UseGetspnam
> </AuthBy>
> <AuthBy SQL>
> # AuthSelect with empty string means dont do auth
> AuthSelect SELECT radius.check_items_new('%n', '%N',
> '%{Client-Port-DNIS}'), radius.reply_items_new('%n', '%N') FROM SA.Clients
> where username = '%n' AuthColumnDef 0, GENERIC, check
> AuthColumnDef 1, GENERIC, reply
> DBSource dbi:Oracle:SOME_SID
> DBUsername SOME_USER
> DBAuth SOME_PASS
> AccountingTable
> Timeout 10000
> FailureBackoffTime 300
> </AuthBy>
> </AuthBy>
> </Realm>
>
> <Realm adsl>
> RejectHasReason
> RewriteUsername s/\@adsl//
> AcctLogFileName %L/adsl/%C/%v%f-%i-%H
> PasswordLogFileName /etc/raddb/password.adsl
> <AuthBy GROUP>
> AuthByPolicy ContinueWhileAccept
> <Log FILE>
> Trace 3
> Filename %D/logfile.testing-adsl
> </Log>
> <AuthBy RADIUS>
> NoForwardAuthentication
> Host secondhost.seconddomain.com
> Secret XXXXXXXXX
> </AuthBy>
> <AuthBy FILE>
> Filename %D/users.adsl
> </AuthBy>
> </AuthBy>
> </Handler>
>
> <Handler Realm=>
> RejectHasReason
> AuthByPolicy ContinueWhileIgnore
> AcctLogFileName %L/%C/%v%f-%i-%H
> <AuthBy GROUP>
> <AuthBy FILE>
> Filename %D/users.check
> </AuthBy>
> <AuthBy FILE>
> Filename %D/users.dialup
> </AuthBy>
> </AuthBy>
> </Handler>
>
> users.dialup:
> DEFAULT Auth-Type = System
>
> users.adsl:
> DEFAULT Auth-Type = AdslSystem
>
> thanks
>
> Jeremy
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
LogDir .
DbDir .
Trace 4
Foreground
LogStdout
<Client localhost>
Secret mysecret
DupInterval 0
</Client>
<Realm adsl>
RejectHasReason
<AuthBy GROUP>
AuthByPolicy ContinueWhileAccept
<Log FILE>
Trace 4
Filename %D/logfile.testing-adsl
</Log>
<AuthBy FILE>
Filename %D/users.adsl
</AuthBy>
</AuthBy>
</Realm>
<Realm>
<AuthBy FILE>
Filename %D/users
</AuthBy>
</Realm>
