Hello,
I have in my radius.cfg file:
<AuthLog FILE>
Identifier eduroam-isti-log
Filename %L/%Y%m%d-isti-auth.log
LogSuccess 1
LogFailure 1
SuccessFormat %d/%m/%Y -- %H:%M:%S -- DOMAIN: %R :AUTHENTICATION %r \
ssid = "eduroam" %r \
user = "%n" %r \
NAS = "%N" %r \
MAC-user = "%{Calling-Station-Id}" AP-wvlan =
"%{Called-Station-Id}" %r
FailureFormat %d/%m/%Y -- %H:%M:%S -- DOMAIN: %R :FAIL %r \
user = "%n" password= *** %r \
NAS = %N:"%{NAS-Identifier}" IP-user = "%{Framed-IP-Address}" %r \
MAC-user = "%{Calling-Station-Id}" AP-wvlan =
"%{Called-Station-Id}" ssid = "%{ssid}" %r
</AuthLog>
<AuthBy FILE>
Identifier eap-isti-file
Filename %D/maria/outer_account
EAPType TTLS
EAPTLS_CAFile %D/certificates/demoCA/cacert.pem
EAPTLS_CertificateFile %D/certificates/cert-srv.pem
EAPTLS_CertificateType PEM
EAPTLS_PrivateKeyFile %D/certificates/cert-srv.pem
EAPTLS_PrivateKeyPassword whatever
EAPTLS_MaxFragmentSize 1000
AutoMPPEKeys
PreHandlerHook sub { ${$_[0]} -> add_attr('request_src',
'src-realm_handled_by_isti');}
</AuthBy>
<Handler TunnelledByTTLS=1, request_src = src-realm_handled_by_isti>
RewriteUsername s/(.*)\\(.*)/$2/
AuthBy eap-pmdf-db
StripFromReply Tunnel-Type, Tunnell-Medium-Type,
Tunnell-Private-Group-ID
AuthLog eduroam-isti-log
</Handler>
<Handler group = ISTI-APs, domain = realm_handled_by_isti>
RewriteUsername s/(.*)\\(.*)/$2/
AuthBy eap-isti-file
AcctLogFileName %L/%Y%m%d-isti.log
AcctLogFileFormat %d/%m/%Y -- %H:%M:%S -- DOMAIN: %R :ACCOUNT
%{Acct-Status-Type} %r \
ssid = "%{ssid}" %r \
user = "%n" %r \
NAS = %N:"%{NAS-Identifier}" IP-user =
"%{Framed-IP-Address}" %r \
MAC-user = "%{Calling-Station-Id}" AP-wvlan =
"%{Called-Station-Id}" %r
</Handler>
The authentication works and in the "%L/%Y%m%d-isti.log" I get:
11/07/2011 -- 16:02:13 -- DOMAIN: isti.cnr.it :ACCOUNT Start
ssid = "eduroam"
user = "[email protected]"
NAS = 146.48.107.5:"CNSRV2-ISTI-CNR-IT" IP-user = "146.48.107.100"
MAC-user = "00-15-00-49-6D-75" AP-wvlan = "00-03-52-93-46-20"
Instead in the "%L/%Y%m%d-isti-auth.log" I obtain:
11/07/2011 -- 10:56:03 -- DOMAIN: isti.cnr.it :AUTHENTICATION
ssid = "eduroam"
user = "[email protected]"
NAS = "146.48.107.5"
MAC-user = "" AP-wvlan = ""
So I don't get in the isti-auth.log file the Calling-Station-Id
attribute value.
How can I solve this problem?
Kind regards
Fabio
_______________________________________________
radiator mailing list
[email protected]
http://www.open.com.au/mailman/listinfo/radiator
