Authentication Log Files

The TCCRadius Authentication Log File is the key to user and configuration troubleshooting of the TCCRadius Authentication Service. Each file contains Authentication decisions, information, and errors regarding the Authentication server.

The TCCRadius Authentication service creates a new logfile every day in the format of Auth.MM.DD.YYYY.log.
MM = Current Month (01-12)
DD = Current Day (01-31)
YYYY = Four Digit Year (1999, 2000, 2001, etc.)

Here is an example section of an Auth Log file.

05/06/1999 18:13:36	-0-	-0-	TCCRadius INIT		
05/06/1999 18:14:56	208.134.145.206	20121	USER-NOT-FOUND	test	
05/06/1999 18:15:56			AUTH_SHUTDOWN		
05/06/1999 18:15:56	-0-	-0-	TCCRadius INIT		
05/06/1999 18:16:04	208.134.145.206	20121	ACCESS-ACCEPT	test	
05/06/1999 18:16:13	208.134.145.206	20121	UPDATE	kwillis	password=test	

The layout of the file is as follows below:

Date Time NAS IP Address NAS Port TCCRadius Message Username Password & Other Attributes

Working With The Log File

While TCCRadius is in Debug Mode (see Command Line Switches), all of the debug information that is written to the Auth Log is displayed on the screen.

Once TCCRadius is running as a service, the information is only logged to the file. Often an administrator needs easy access to this data in real time. One easy way to see this information is to use the UNIX tail command (See our Updates And Add-ons page for a freeware version for DOS).

By using the '-f' parameter on any file, TAIL can display new entries to the file as they are written out. Example Command Line Usage: tail.exe -f Auth.05.24.1999.log

Customizing The Auth Log Attributes Display

In addition to displaying the username in the Auth Log, TCCRadius can be configured to display any additional attributes by specifying the attribute number in the TCCRadius.cfg file. Simply enter the comma delimited Attribute numbers in the LogAttributes field.

For example:
LogAttributes = 8,244

This logs Attribute 8 and 244 to the Auth Log file when they apply.
Here are their entries from the Dictionary.cfg file:

ATTRIBUTE Framed-IP-Address 8 ipaddr
ATTRIBUTE Ascend-Idle-Limit 244 integer

** Static IPs and Idle Timeout value for Ascend users

Authentication Parameters Explained

TCCRadius INIT
Authentication Server started

AUTH_SHUTDOWN
Authentication Server Shutdown

ODBC-CONNECTION-FAILED
Connection to the specified DSN could not be established.

ACCESS-ACCEPT
Access has been granted to this user

BAD-PASSWORD
Password is incorrect

NO-PASSWORD
Password not contained in packet sent from NAS

NO-USERNAME
Username not contained in packet sent from NAS

NO-REQUEST
Packet sent to Authentication Server was not a
RADIUS Access Request packet

INVALID-CLIENT
Packet received, but client is not listed in clients.cfg

USER-NOT-FOUND
User did not have a radius database entry

USER-DBASE-ERROR
There was an error connecting to the specified database
while retrieving specified user's information.

UPDATE
Invoked password update response, user file will now be
updated with new users password.

UPDATE-ERROR
An error occurred while attempting to update the ODBC record.

UPDATE-DBASE-ERROR
There was an error connecting to the specified database
while updating the specified user's information.

TIME-VIOLATION
User tried to login outside of time restrictions placed upon him/her by the tccradius-time-intervals attributes

USER-INACTIVE
User account is disabled by the 'tccradius-active=0' parameter