Subversion Repositories configs

# -*- text -*-

#

#  $Id: a57741ac3fa5f884ed64d896da3807af5d2a6b99 $

#

#  The "linelog" module will log one line of text to a file.

#  Both the filename and the line of text are dynamically expanded.

#

#  We STRONGLY suggest that you do not use data from the

#  packet as part of the filename.

#

linelog {

	#

	#  The file where the logs will go.

	#

	#  If the filename is "syslog", then the log messages will

	#  go to syslog.

	filename = ${logdir}/linelog

	#

	#  The Unix-style permissions on the log file.

	#

	#  Depending on format string, the log file may contain secret or

	#  private information about users.  Keep the file permissions as

	#  restrictive as possible.

	permissions = 0600

	#

	# The Unix group of the log file.

	#

	# The user that freeradius runs as must be in the specified

	# group, otherwise it will not be possible to set the group.

	#

	# group = freerad

	#

	# If logging via syslog, the facility can be set here. Otherwise

	# the syslog_facility option in radiusd.conf will be used.

	#

	# syslog_facility = daemon

	#

	#  The default format string.

	format = "This is a log message for %{User-Name}"

	#

	#  This next line can be omitted.  If it is omitted, then

	#  the log message is static, and is always given by "format",

	#  above.

	#

	#  If it is defined, then the string is dynamically expanded,

	#  and the result is used to find another configuration entry

	#  here, with the given name.  That name is then used as the

	#  format string.

	#

	#  If the configuration entry cannot be found, then no log

	#  message is printed.

	#

	#  i.e. You can have many log messages in one "linelog" module.

	#  If this two-step expansion did not exist, you would have

	#  needed to configure one "linelog" module for each log message.

	#

	#  Reference the Packet-Type (Access-Request, etc.)  If it doesn't

	#  exist, reference the "format" entry, above.

	reference = "%{%{Packet-Type}:-format}"

	#

	#  Followed by a series of log messages.

	Access-Request = "Requested access: %{User-Name}"

	Access-Reject = "Rejected access: %{User-Name}"

	Access-Challenge = "Sent challenge: %{User-Name}"

	#

	#  The log messages can be grouped into sections and

        #  sub-sections, too.  The "reference" item needs to have a "."

	#  for every section.  e.g. reference = foo.bar will reference

	#  the "foo" section, "bar" configuration item.

	#

	#

	#  Used if:	reference = "foo.bar".

	foo {

	    bar = "Example log.  Please ignore"

	}

	#

	#  Another example:

	#      reference = "Accounting-Request.%{%{Acct-Status-Type}:-unknown}"

	#

	Accounting-Request {

		Start = "Connect: [%{User-Name}] (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} ip %{Framed-IP-Address})"

		Stop = "Disconnect: [%{User-Name}] (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} ip %{Framed-IP-Address}) %{Acct-Session-Time} seconds"

		#  Don't log anything for these packets.

		Alive = ""

		Accounting-On = "NAS %C (%{NAS-IP-Address}) just came online"

		Accounting-Off = "NAS %C (%{NAS-IP-Address}) just went offline"

		# don't log anything for other Acct-Status-Types.

		unknown = ""

	}

}