RE: How to log failed auth attempts?

2008-12-19 Thread Todd R.
s-users-bounces+tjrlist=lightwavetech@lists.freeradius. org] On Behalf Of Alan DeKok Sent: Friday, December 19, 2008 11:51 AM To: FreeRadius users mailing list Subject: Re: How to log failed auth attempts? Todd R. wrote: > Weee.. Thanks, removing the comment fixed it. Good. > I g

Re: How to log failed auth attempts?

2008-12-19 Thread Alan DeKok
Todd R. wrote: > Weee.. Thanks, removing the comment fixed it. Good. > I guess I just figured a comment was a comment regardless of where it was or > on what line, did not know it would be a problem. It was in the middle of a string: hello = " ... # stuff ..." Tha

RE: How to log failed auth attempts?

2008-12-19 Thread Todd R.
riday, December 19, 2008 1:16 AM To: FreeRadius users mailing list Cc: FreeRadius users mailing list Subject: Re: How to log failed auth attempts? The \'s might be significant. You have those all through the query, up to the point things break. I also wouldn't have a comment in the m

RE: How to log failed auth attempts?

2008-12-19 Thread tnt
>postauth_query = "INSERT INTO ${postauth_table} \ > (username, pass, reply, rejectreason, authdate) \ > VALUES ( \ > '%{User-Name}', \ > '%{%{User-Password}:-%{Chap-Password}}', \ >

Re: How to log failed auth attempts?

2008-12-18 Thread Anders Holm
dius . org] On Behalf Of t...@kalik.net Sent: Thursday, December 18, 2008 6:06 PM To: FreeRadius users mailing list Subject: RE: How to log failed auth attempts? Just... edit the queries. Adding %{Module-Failure-Message} to the queries should get you lots of that information. Am I supp

RE: How to log failed auth attempts?

2008-12-18 Thread Todd R.
ghtwavetech@lists.freeradius. org] On Behalf Of t...@kalik.net Sent: Thursday, December 18, 2008 6:06 PM To: FreeRadius users mailing list Subject: RE: How to log failed auth attempts? >>>>> > Just... edit the queries. Adding %{Module-Failure-Message} to the >queries sho

Re: How to log failed auth attempts?

2008-12-18 Thread Todd R.
adius-users-bounces+tjrlist=lightwavetech@lists.freeradius.org To: FreeRadius users mailing list ReplyTo: FreeRadius users mailing list Subject: RE: How to log failed auth attempts? Sent: Dec 18, 2008 6:06 PM >>>>> > Just... edit the queries. Adding %{Module-Failure-Message} to

RE: How to log failed auth attempts?

2008-12-18 Thread tnt
> > Just... edit the queries. Adding %{Module-Failure-Message} to the >queries should get you lots of that information. > > >Am I suppose to put a Module name in place of "Module" or leave it as is? I >copied and pasted %{Module-Failure-Message} in place of >%{reply:Reply-Message} and I c

RE: How to log failed auth attempts?

2008-12-18 Thread Todd R.
...@lists.freeradius. org] On Behalf Of Alan DeKok Sent: Thursday, December 18, 2008 3:03 AM To: FreeRadius users mailing list Subject: Re: How to log failed auth attempts? Todd R. wrote: > I also noticed that it said that many things are logged when running > "radiusd -X" which exp

Re: How to log failed auth attempts?

2008-12-18 Thread A . L . M . Buxey
Hi, > The problem seems to be that when a bad password is the reject reason, the > Reply-Message is just blank. yep - security reasons. why did I get rejected? ah, because the password was wrong. I'll just keep brute-forcing unti I get the password right.. alan - List info/subscribe/unsubscr

Re: How to log failed auth attempts?

2008-12-18 Thread Alan DeKok
Todd R. wrote: > I also noticed that it said that many things are logged when running > "radiusd -X" which explains some other things.. That's the reason for the continual instructions to run in debug mode. > Right now, I have something like this logging on a failed attempt in the > MySQL DB w

RE: How to log failed auth attempts?

2008-12-17 Thread Todd R.
Scott Lambert Sent: Wednesday, December 17, 2008 10:39 PM To: FreeRadius users mailing list Subject: Re: How to log failed auth attempts? On Wed, Dec 17, 2008 at 07:51:48PM -0600, Todd R. wrote: > This seems odd, I can't be the first person to want to have the reason for > the reject

Re: How to log failed auth attempts?

2008-12-17 Thread Scott Lambert
On Wed, Dec 17, 2008 at 07:51:48PM -0600, Todd R. wrote: > This seems odd, I can't be the first person to want to have the reason for > the reject in the SQL table?? > > It can't be rocket science to get this to log in the DB when it's already > being logged in the text logs?? You are probably th

RE: How to log failed auth attempts?

2008-12-17 Thread Todd R.
sers mailing list' Subject: RE: How to log failed auth attempts? >>>> >What variable can I use to pull the reject reason, is it something like >%{reply:Reply-Message} That is a good choice. >>>> I tried this but I just end up with a blank entry in the database.

RE: How to log failed auth attempts?

2008-12-17 Thread Todd R.
ik.net Sent: Wednesday, December 17, 2008 7:08 PM To: FreeRadius users mailing list Subject: RE: How to log failed auth attempts? >I do see this query in sql/mysql/dialup.conf that controls the insert: > >postauth_query = "INSERT INTO ${posta

RE: How to log failed auth attempts?

2008-12-17 Thread tnt
>I do see this query in sql/mysql/dialup.conf that controls the insert: > >postauth_query = "INSERT INTO ${postauth_table} \ > (username, pass, reply, authdate) \ > VALUES ( \ > '%{User-Name}', \ >

RE: How to log failed auth attempts?

2008-12-17 Thread Todd R.
adius.org [mailto:freeradius-users-bounces+tjrlist=lightwavetech@lists.freeradius. org] On Behalf Of Todd R. Sent: Wednesday, December 17, 2008 2:15 PM To: 'FreeRadius users mailing list' Subject: RE: How to log failed auth attempts? Alan, Thanks for your response.. First, I can

RE: How to log failed auth attempts?

2008-12-17 Thread Todd R.
2008 5:32 AM To: FreeRadius users mailing list Subject: Re: How to log failed auth attempts? Todd R. wrote: > It seems that most things I have read suggest that failed authentication > attempts are logged to the radius.log by default but they do not show up for > me. Edit raddb/radiusd

Re: How to log failed auth attempts?

2008-12-17 Thread Alan DeKok
Todd R. wrote: > It seems that most things I have read suggest that failed authentication > attempts are logged to the radius.log by default but they do not show up for > me. Edit raddb/radiusd.conf, and read the "log" section. It has configuration entries that control this behavior. Alan De

How to log failed auth attempts?

2008-12-17 Thread Todd R.
Hello all, been spending lots of time reading the list archives, reading the docs, sample configs and so on but can't find a solution so I thought I would ping the list for some help. I am running FR 2.1.3 which I installed a few days ago. I have it doing most of what I need it to after a bit of