Re: (RADIATOR) AcctLogFileFormat problem

1999-06-21 Thread Anonymous

On Tue, 22 Jun 1999, Mike McCauley wrote:

> AcctLogFileFormat file:"xyzzy"
> 
> and the file xyzzy to have:
> 
> %l
>   User-Name = "%{User-Name}"
>   NAS-IP-Address = %{NAS-IP-Address}
>   etc
> 
  I did this, but after hupping, Radiator did not reload the realm that
had this AcctLogFileFormat statement - in fact, it seemed to flush any
knowledge of the realm from memory.  So I killed and restarted Radiator -
and again it proclaims no knowledge of the realm in question.  I
downloaded the latest version of radiusd from downloads/patches-2.13.1 and
started it up - it wouldn't load (perl gave me an error about a missing
semicolon around line 98 or some such).  So I downloaded the tarball in
the same directory and installed the radiusd that came with it - this one
loaded, but still would not see the realm.  So I applied all the patches
in the tarball and tried again - same thing.  I have my Trace set to level
4, but I do not see the users file for this realm in the logfile.  If I
try a radpwtst with a working username and password, I get rejected.

  Here's the section for the realm in the config file:


  AcctLogFileName /usr/adm/radacct/%C/detail
  AcctLogFileFormat file:"/usr/local/radiator/zzz.out"
  
DefaultSimultaneousUse 1
Filename %D/users/iwbc.users
DefaultReply Service-Type=Framed,Framed-Protocol=PPP,\
 Framed-IP-Netmask=255.255.255.255,Framed-Routing=None,\
 Framed-Compression=Van-Jacobson-TCP-IP,Framed-MTU=1500
  


  and here's a snippet of the log file after a failed radpwtst:

Mon Jun 21 17:21:46 1999: DEBUG: Packet dump:
*** Received from 127.0.0.1 port 61953 
Code:   Access-Request
Identifier: 150
Authentic:  1234567890123456
Attributes:
User-Name = "icq@iwbc"
Service-Type = Framed-User
NAS-IP-Address = 216.228.64.3
NAS-Port = 1
NAS-Port-Type = Async
User-Password =
"Kh<28><21><137><250>T<215>ISA<239>-<201><132><134>"

Mon Jun 21 17:21:46 1999: DEBUG: Handling request with Handler
'Realm=iwbc'
Mon Jun 21 17:21:46 1999: INFO: Access rejected for icq@iwbc:
Mon Jun 21 17:21:46 1999: DEBUG: Packet dump:
*** Sending to 127.0.0.1 port 61953 
Code:   Access-Reject
Identifier: 150
Authentic:  1234567890123456
Attributes:
Reply-Message = "Request Denied"

  When I start radiusd, I get the contents of the AcctLogFileFormat dumped
to my screen, but there's no indication that it read the file into memory
in the log.  I get a "file not found" type error if I give the config the
wrong path.  I'm long past being able to figure out what the heck is going
on.

  Please, help!


 Ian Quorn
 UNIX mook -- IWBC
  "Living in a pretend world of happiness
   My painted face melts as I recede
   Into my own reality - into my hole"
   -Solitude Aeturnus, "Never"


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.



Re: (RADIATOR) AcctLogFileFormat problem

1999-06-21 Thread Anonymous

Hi Ian,

On Jun 21,  3:13pm, Ian Quorn wrote:
> Subject: (RADIATOR) AcctLogFileFormat problem
>
>   We're in the process of switching to Radiator 2.13.1 from an ugly mix of
> Merit, Cistron, and Ascend Access Control.  It's looking good so far, but
> I've run into a bit of a snag.  I'm trying to specify what gets written
> into the accounting files with AcctLogFileFormat statement, but I'm not
> getting the results the reference manual implies I should.
>
>   Here's a brief snippet of an accounting record with no
> AcctLogFileFormat:
>
> Thu Jun 17 17:42:05 1999
> User-Name = "fred@joe"
> NAS-IP-Address = 192.168.10.11
> NAS-Port = 51
> NAS-Port-Type = Async
> (long list of other attributes follows)
>
>   As a test, I decided to see if I could specify an AcctLogFileFormat
> clause that would result in the same detail file format.  So I added the
> following to a test realm:
>
>   AcctLogFileFormat %{User-Name} %{NAS-IP-Address} %{NAS-Port} etc.
>
>   which is similar to the example in the ref manual (section 6.12.5).  But
> when I reloaded and ran a radpwtst, I ended up with the following:
>
>   fred@joe 192.168.10.11 Async Start  1234
>
>   i.e., no datestamp at the start, no "attribute = " in front of the
> values, and no newlines.
>
>   Any ideas regarding what I'm missing?

Those %{attributename} things get replaced by the value of the attribute, so if
you wanted to see User-Name = "fred@joe", you would have to have:
User-Name = "%{User-Name}" etc.

Use %l to get the datestamp (you may need the patched radiusd at
http://www.open.com.au/radiator/downloads/patches-2.13.1/ to get this)

There is currently no way to have linefeeds embedded in parameter in the config
file, but you could do it with something like this:

AcctLogFileFormat   file:"xyzzy"

and the file xyzzy to have:

%l
User-Name = "%{User-Name}"
NAS-IP-Address = %{NAS-IP-Address}
etc


Hope that helps.

Cheers.




>
>   I'm doing this because our billing guy noticed that when Radiator
> handles accounting, we end up with a "timestamp" attribute that's not
> recorded when AAC does the accounting.  His software won't understand the
> extra attribute.  He could change the software, but I'd like to get this
> AcctLogFileFormat working so we can leave out attributes we decide not to
> use in the future.  If anyone's got any ideas on how to simply leave out
> one or more attributes without a AcctLogFileFormat statement, I'd love to
> hear them.
>
>
>  Ian Quorn
>  UNIX mook -- IWBC
>   "Living in a pretend world of happiness
>My painted face melts as I recede
>Into my own reality - into my hole"
>-Solitude Aeturnus, "Never"
>
>
> ===
> Archive at http://www.thesite.com.au/~radiator/
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
>-- End of excerpt from Ian Quorn



-- 
Mike McCauley   [EMAIL PROTECTED]
Open System Consultants Pty. LtdUnix, Perl, Motif, C++, WWW
24 Bateman St Hampton, VIC 3188 Australia   http://www.open.com.au
Phone +61 3 9598-0985   Fax   +61 3 9598-0955

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8, 
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.