主页 / server / 问题 / 1008684
Accepted
eri
Asked: 2020-03-28 05:16:32 +0800 CST

如何使用 Freeradius 从 post-auth 发送日志？

  • 772

我想在 post-auth 部分向远程系统日志发送消息。简单的字符串

"'%{User-Name}', '%{reply:Packet-Type}', '%{Calling-Station-Id}'"

FreeRADIUS 3 怎么做？

或者..

如何按设施或优先级拆分日志？

security syslog freeradius rsyslog

1 个回答

  1. Best Answer

    使用线日志

    linelog log_postauth {
        filename = syslog
        syslog_facility = authpriv
        syslog_severity = info
        format = "ACCEPTED: %{User-Name} %{control:Tmp-String-0}, %{control:Tmp-String-1}, nas address: %{request:Called-Station-Id}, remote address: %{request:Calling-Station-Id}"
}

linelog log_postreject {
        filename = syslog
        syslog_facility = authpriv
        syslog_severity = warning
        format = "REJECTED: %{User-Name} %{control:Tmp-String-0}, %{control:Tmp-String-1}, nas address: %{request:Called-Station-Id}, remote address: %{request:Calling-Station-Id}"
}

    在服务器中

    post-auth {

    Post-Auth-Type ACCEPT {
        log_postauth
    }

    Post-Auth-Type REJECT {
        log_postreject
    }

}

    然后用 rsyslog 服务发送

    if  $syslogfacility-text == 'authpriv'
then {
    action(type="omfwd" target="10.254.144.141" protocol="udp" port="514")
}
    • 0

相关问题