Enable Debug in radius.log

Question
1

Hello Cornelius!
last few days I’m struggling with a task to enable debug logs in
radius.log, but with no success. Hope you could bring some light…
In my radius.log file I have only Info level logs, but in
the privacyidea_radius.pm there’s some functions which could provide
extended logs:
sub log_request_attributes {

# This shouldn't be done in production environments!
# This is only meant for debugging!
for ( keys %RAD_REQUEST ) {
    &radiusd::radlog( Debug, "RAD_REQUEST: $_ = $RAD_REQUEST{$_}" );
    ;
}

}
To test if I could see Debug logs in radius.log I slightly modified
privacyidea_radius.pm:
&radiusd::radlog( Debug, “state sent to privacyidea: $params{‘state’}” );
But then I don’t see these “state sent to…” messages anymore.
The question is: is there any place for enabling maximum logging level into
radius.log which could limit me to Info logs only? I read mans of
radiusd.conf and radiusd itself, surf through http://wiki.freeradius.org/
but didn’t find who limits radius.log on which level of events will be
logged…
Tried to search through the forum, but with no luck. Checked the source
code of the plugin, seems good.
I just want the debug logs work because I wanted to “hide” some log events
by modifying “&radiusd::radlog( Info, …” to "&radiusd::radlog( Debug, …"
so when I need more detailed information I would somewhere change logging
level from Info to Debug and get those previously hided messages in my log

2

Well, at least -X works.Am Freitag, den 12.02.2016, 05:55 -0800 schrieb Sergey Kolosovski:

Thank you for answer, I tried all this(except freeradius mailing
list). I only thought that it could be somewhere on the top of your
head. I’ll continue to investigate by myself

Please read the blog post about getting help
Getting help – privacyID3A.

For professional services and consultancy regarding two factor
authentication please visit
One Time Services - NetKnights - IT-Sicherheit - Zwei-Faktor-Authentisierung - Verschlüsselung

In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
privacyIDEA Support Level

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea+unsubscribe@googlegroups.com.
To post to this group, send email to privacyidea@googlegroups.com.
Visit this group at https://groups.google.com/group/privacyidea.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/653a3af6-1c1d-4094-9527-d5ef0c74a5f7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbel
@cornelinux
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

signature.asc (836 Bytes)

3

Hi Sergey,

obviously this is an ordinary freeradius question which might be nearly
out of scope of a privacyidea mailing list.

This should be better taken to the freeradius mailing list.

But: you can also run

man freeradius

or

man radiusd

depending on your distribution.

Check out the parameters -X and -x.

Or checkout this
http://privacyidea.readthedocs.org/en/latest/application_plugins/radius.html#debugging-radius

Kind regards
CorneliusAm Freitag, den 12.02.2016, 04:49 -0800 schrieb Sergey Kolosovski:

Hello Cornelius!
last few days I’m struggling with a task to enable debug logs in
radius.log, but with no success. Hope you could bring some light…
In my radius.log file I have only Info level logs, but in
the privacyidea_radius.pm there’s some functions which could provide
extended logs:
sub log_request_attributes {

# This shouldn't be done in production environments!
# This is only meant for debugging!
for ( keys %RAD_REQUEST ) {
    &radiusd::radlog( Debug, "RAD_REQUEST: $_ = $RAD_REQUEST{$_}"

);
;
}

}
To test if I could see Debug logs in radius.log I slightly modified
privacyidea_radius.pm:
&radiusd::radlog( Debug, “state sent to privacyidea: $params{‘state’}”
);

But then I don’t see these “state sent to…” messages anymore.
The question is: is there any place for enabling maximum logging level
into radius.log which could limit me to Info logs only? I read mans of
radiusd.conf and radiusd itself, surf through
http://wiki.freeradius.org/ but didn’t find who limits radius.log on
which level of events will be logged…
Tried to search through the forum, but with no luck. Checked the
source code of the plugin, seems good.
I just want the debug logs work because I wanted to “hide” some log
events by modifying “&radiusd::radlog( Info, …”
to “&radiusd::radlog( Debug, …” so when I need more detailed
information I would somewhere change logging level from Info to Debug
and get those previously hided messages in my log

Please read the blog post about getting help
Getting help – privacyID3A.

For professional services and consultancy regarding two factor
authentication please visit
One Time Services - NetKnights - IT-Sicherheit - Zwei-Faktor-Authentisierung - Verschlüsselung

In an enterprise environment you should get a SERVICE LEVEL AGREEMENT
which suites your needs for SECURITY, AVAILABILITY and LIABILITY:
privacyIDEA Support Level

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea+unsubscribe@googlegroups.com.
To post to this group, send email to privacyidea@googlegroups.com.
Visit this group at https://groups.google.com/group/privacyidea.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/1759596c-de0f-4683-aff3-094cf9eaf8bd%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbel
@cornelinux
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

signature.asc (836 Bytes)

4

Thank you for answer, I tried all this(except freeradius mailing list). I
only thought that it could be somewhere on the top of your head. I’ll
continue to investigate by myself