Log-Mode-Mask (GNU Radius Reference Manual)

Next: , Previous: , Up: Radius Internal Attributes [Contents][Index]


13.3.13 Log-Mode-Mask

ATTRIBUTE Log-Mode-Mask 2007 integer
Users: L-
Hints: -R
Huntgroups: -R
Additivity: Append
Proxy propagated: N/A
VALUE Log-Mode-Mask Log-Auth 1
VALUE Log-Mode-Mask Log-Auth-Pass 2
VALUE Log-Mode-Mask Log-Failed-Pass 4
VALUE Log-Mode-Mask Log-Pass 6
VALUE Log-Mode-Mask Log-All 7

Log-Mode-Mask is used to control the verbosity of authentication log messages for given user or class of users. The meaning of its values is:

Log-Auth

Do not log successful authentications.

Log-Auth-Pass

Do not show the password with the log message from a successful authentication.

Log-Failed-Pass

Do not show a failed password.

Log-Pass

Do not show a plaintext password, either failed or succeeded.

Log-All

Do not log authentications at all.

Technical details: After authentication, the server collects all Log-Mode-Mask attributes from the incoming request and LHS of the user’s entry. The values of these attributes ORed together form a mask, which is applied via an XOR operation to the current log mode. The value thus obtained is used as effective log mode.

AltStyle によって変換されたページ (->オリジナル) /