 |
» |
|
|
|
The Local Authorization Server (LAS) generates
accounting log files when the LAS_ACCT
module is called by the Finite State Machine. Those
files have names in the format session.yyyy-mm-dd.log,
where yyyy is the year, mm the month, dd the day when the file was
generated. | | | |  | NOTE: If the logfile exceeds its size limit (as
configured in the File Size Property in the Server Properties link),
a new logfile for that day will be created and identified by a part<01-09> portion
of the logfile file name string. For example, /var/opt/aaa/acct/session.yyyy-mm-dd_part<01-09>.log | | | | |
By default, the radius.fsm (logall.fsm) state table calls the LAS_ACCT module when the server
receives an Accounting-Request to start or stop the session. Using Server
Manager to Retrieve Accounting Logfiles | |
From the navigation tree, click Accounting to
retrieve information from the HP-UX AAA Server accounting logfiles. Table 12-3 Accounting Logfile Search Parameters Option | Description |
|---|
Begin | The date and time of the first record in the
range of data to retrieve. | End | The date and time of the last record in the
range of data to retrieve. | User | Only searches for sessions that used
the specified ID. |
An accounting search returns a list of users. When you select
a user to retrieve information for, Server Manager parses the corresponding accounting
records and displays the information in the Accounting: Detailed
Records screen similar to the example shown in Figure 12-5 “Detailed Accounting Record for a Selected
User”.
Format
of Accounting Records in the Default Merit Style | |
RADIUS
accounting records store both the users account information and
the users historical session information. Each record begins with
a tab-delimited line of values that represent the default HP-UX
AAA Server session information. This information includes time-based
values, as well as HP-UX-specific and standard RADIUS A-V pairs.
If a value does not exist, N/A will appear in the values placeholder. The first line of a record appears as: Started-at Reason Log-time resrvd Connect-time Access-ID resrvd
Session Token Time-limit From Service-class Filter Service-type |
After the first line of a session record, each A-V pair in
the accounting message that triggered the logging activity is listed. | | | | | NOTE: The default session format (Merit) corresponds to the
log_v2_0 setting for the aatv parameter in the log.config file, refer to “The
log.config File ”. Alternate formats, Livingston for example, may be specified. | | | | |
- Started at:
This is the time when the
session first arrived at the RADIUS server. It is the number of
seconds since 00:00:00 GMT, Jan. 1, 1970. - Log-time:
This is the difference between
the time on the machine where and when this log was written, and
the start-time. This field is used to compress the data. - Connect time:
How long (in seconds) the
session was known to the local AAA Server host.
Represent attribute values that describe the client used for authentication
and authorization. The Access-ID, Time-limit, Service-class, and Filter values
correspond to A-V pairs (User-Name, Huntgroup-Name, Session-Timeout, Service-Class,
and Filter-Id) that exist in the user profile that corresponds to
the session record. Writing
Livingston CDR Accounting Records | |
It
is not possible to make these changes through the Server Manager graphic
interface, you must modify configuration files with a text editor. Open the log.config configuration file (found in /etc/opt/aaa by default). Locate the following lines,
which should be found at the beginning of the file: # Default logging configuration if there is no log.config file.
#
stream *default* {
aatv log_v2_0
buffer 1
close on
filename session.%Y-%m-%d.log
update 900
wrap 3
}
end |
Change aatv log_v2_0 to aatv log_acct. Save and close the file. Restart the server if it is currently
running.
Changing
the Accounting Log Filename | |
Open the log.config configuration file (found in /etc/opt/aaa by default). Locate the following lines,
which should be found at the beginning of the file: # Default logging configuration if there is no log.config file.
#
stream *default* {
aatv log_v2_0
buffer 1
close on
filename session.%Y-%m-%d.log
update 900
wrap 3
}
end |
Change session.%Y-%m-%d.log to the filename syntax you wish to use. Save and close the file. Restart the server if it is currently
running.
Changing
the Accounting Log Rollover Interval | |
The log rollover interval (how often a new log file is created
to store accounting records) is determined by the timestamp portion
of the filename. To change the interval follow the steps in “Changing
the Accounting Log Filename”. The logging interval
will change to the smallest unit of time in the timestamp portion
of the filename. For example,%Y-%m-%d-%H, will change the rollover interval to hourly. Rolling
Over the Log File and Accounting Stream | |
You can roll over the server log file and accounting stream
using the radsignal command as follows: radsignal [-h] [-v] [[-di ipcdir] pid level ] [[-di ipcdir] pid roll logfile ] [[-di ipcdir] pid roll stream [stream-name]] Where: - pid
The process ID of
radiusd. This can be determined with the command
% ps -eaf | grep radiusd. - level
One of the following debug
levels to set:
0 Debug logging disabled.
1 Minimal information.
2 Level 1 information, high-level FSM output and some function
tracing.
3 Level 2 information and complete function tracing.
4 Level 3 information along with low-level FSM and
configuration file output. - roll
Immediately roll the log
file or an accounting stream. This should be used along with the
keywords logfile or stream. - logfile
The AAA Server log file. - stream stream-name
The AAA server accounting
stream. If stream-name is not specified then the default stream (
*default* ) will be used. This should be used along with
the keyword roll.
radsignal has the following options: - -h
Displays a help message. - -v
Displays version information. - -di ipcdir
The directory where the radiusd
shared memory files are located. If omitted, the default is /var/opt/aaa/ipc.
See the radsignal manpage for more information. |
Printable version
