Enable Debug in radius.log

572 views
Skip to first unread message

Sergey Kolosovski

unread,
Feb 12, 2016, 7:49:33 AM2/12/16
to privacyidea
Hello Cornelius!
last few days I'm struggling with a task to enable debug logs in radius.log, but with no success. Hope you could bring some light..
In my radius.log file I have only Info level logs, but in the privacyidea_radius.pm there's some functions which could provide extended logs:
sub log_request_attributes {


   
# This shouldn't be done in production environments!
   
# This is only meant for debugging!
   
for ( keys %RAD_REQUEST ) {
       
&radiusd::radlog( Debug, "RAD_REQUEST: $_ = $RAD_REQUEST{$_}" );
       
;
   
}


}
To test if I could see Debug logs in radius.log I slightly modified privacyidea_radius.pm:
&radiusd::radlog( Debug, "state sent to privacyidea: $params{'state'}" );
But then I don't see these "state sent to..." messages anymore.
The question is: is there any place for enabling maximum logging level into radius.log which could limit me to Info logs only? I read mans of radiusd.conf and radiusd itself, surf through http://wiki.freeradius.org/ but didn't find who limits radius.log on which level of events will be logged...
Tried to search through the forum, but with no luck. Checked the source code of the plugin, seems good.
I just want the debug logs work because I wanted to "hide" some log events by modifying "&radiusd::radlog( Info, ..." to "&radiusd::radlog( Debug, ..." so when I need more detailed information I would somewhere change logging level from Info to Debug and get those previously hided messages in my log

Cornelius Kölbel

unread,
Feb 12, 2016, 8:30:55 AM2/12/16
to priva...@googlegroups.com
Hi Sergey,

obviously this is an ordinary freeradius question which might be nearly
out of scope of a privacyidea mailing list.

This should be better taken to the freeradius mailing list.

But: you can also run

man freeradius

or

man radiusd

depending on your distribution.

Check out the parameters -X and -x.

Or checkout this
http://privacyidea.readthedocs.org/en/latest/application_plugins/radius.html#debugging-radius

Kind regards
Cornelius
> --
> Please read the blog post about getting help
> https://www.privacyidea.org/getting-help/.
>
> For professional services and consultancy regarding two factor
> authentication please visit
> https://netknights.it/en/leistungen/one-time-services/
>
> In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
> which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
> https://netknights.it/en/leistungen/service-level-agreements/
> ---
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> Visit this group at https://groups.google.com/group/privacyidea.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/privacyidea/1759596c-de0f-4683-aff3-094cf9eaf8bd%40googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

--
Cornelius Kölbel
corneliu...@netknights.it
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel


signature.asc

Sergey Kolosovski

unread,
Feb 12, 2016, 8:55:07 AM2/12/16
to privacyidea
Thank you for answer, I tried all this(except freeradius mailing list). I only thought that it could be somewhere on the top of your head. I'll continue to investigate by myself

Cornelius Kölbel

unread,
Feb 12, 2016, 9:23:04 AM2/12/16
to priva...@googlegroups.com
Well, at least -X works.
> --
> Please read the blog post about getting help
> https://www.privacyidea.org/getting-help/.
>
> For professional services and consultancy regarding two factor
> authentication please visit
> https://netknights.it/en/leistungen/one-time-services/
>
> In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
> which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
> https://netknights.it/en/leistungen/service-level-agreements/
> ---
> You received this message because you are subscribed to the Google
> Groups "privacyidea" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to privacyidea...@googlegroups.com.
> To post to this group, send email to priva...@googlegroups.com.
> Visit this group at https://groups.google.com/group/privacyidea.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/privacyidea/653a3af6-1c1d-4094-9527-d5ef0c74a5f7%40googlegroups.com.
signature.asc
Reply all
Reply to author
Forward
0 new messages