acctReport.ini File
The acctReport.ini file includes information that controls the configuration settings of the accounting log, which provides logging of failed accounting requests. The accounting log records all accounting request failures by logging them in a comma-delimited text file. While viewing the logs, you can sort, search and filter the log records. Each record includes details of who, where, when, and what happened during the accounting request. The accounting log records failures due to:
Bad shared secret
Unknown client
You can enable or disable the accounting report logs when needed. The accounting logs are saved in a default folder called AcctReports located under the /opt/JNPRsbr/radius directory (if not specified). The accounting request failures are saved in two separate files denoted by the failure name and timestamp as follows:
badSharedSecret_yyyymmdd.act
unknownClient_yyyymmdd.act
Each log report is enabled separately.
The following fields are available in both log reports:
Timestamp (UTC or local time)
Username (if available)
Client IP address (May not be accurate due to proxy, NAT)
Task name—accounting start or stop request and accounting on or off events
Reason of failure
NAS name (if known)
[Settings] Section
[Settings] Section
The [Settings] section of the acctReport.ini file (Table 86) defines various global user parameters that affect the log file, such as days to keep and formatting.
If the MaxMinutesPerFile parameter is set to 0, the file name of the accounting log report is badSharedSecret_yyyymmdd.act or unknownClient_yyyymmdd.act, (where yyyymmdd identifies the date the report was generated.) If the MaxMinutesPerFile parameter is set to a value greater than 0, the file name of the report is badSharedSecret_yyyymmdd_hhmm.act or unknownClient_yyyymmdd_hhmm.act (where yyyymmdd identifies the date and hhmm identifies the time the report was generated.)
Table 86: acctReport.ini [Settings] Syntax
Parameter | Function |
---|---|
LogDir | Specifies the destination directory on the local host where the badSharedSecret_yyyymmdd.act and unknownClient_yyyymmdd.act files are stored. Default value is the directory is /opt/JNPRsbr/radius directory (if not specified). |
LogFilePermissions | Specifies the owner and access permission settings for the accounting log files. Enter a value for the LogFilePermissions setting in owner:group permissions format, where:
|
UTC |
|
MaxMinutesPerFile | Specifies how often the current accounting log report is closed and a new file opened.
Default value is 0. Note: The value entered for MaxMinutesPerFile determines the file name of the generated report. |
DaysToKeep | Specifies the number of days the Steel-Belted Radius Carrier server retains the accounting log reports. Default value is 1 (one day). |
LineSize | The maximum size of a single log line. The allowable range is 1024 to 32768. Default value is 4096. Note: Logging fails if this value is exceeded. |
QuoteInteger |
|
QuoteIPAddress |
|
QuoteText |
|
QuoteTime |
|
QuoteBinary |
|
[UnknownClientReport] Section
[UnknownClientReport] Section
The [UnknownClientReport] section (Table 87) of acctReport.ini enables or disables generation of the unknown accounting client report, which is an ASCII comma-delimited file produced by the Steel-Belted Radius Carrier server. It identifies accounting requests received from unknown RADIUS clients, or destined to unknown or unreachable destinations. It also defines the file format of the unknown-client reports.
Table 87: acctReport.ini [UnknownClientReport] Syntax
Parameter | Function |
---|---|
Enable |
|
[BadSharedSecretReport] Section
[BadSharedSecretReport] Section
The [BadSharedSecretReport] section (Table 88) of acctReport.ini enables or disables generation of the invalid shared secret report, which is an ASCII comma-delimited file that records information about requests received from known RADIUS clients that used an invalid shared secret. It also defines the file format of the bad shared secret reports.
Table 88: acctReport.ini [BadSharedSecretReport] Syntax
Parameter | Function |
---|---|
Enable |
|
[Attributes] Section
[Attributes] Section
The [Attributes] section of acctReport.ini lists the attributes you want logged in the accounting reports. For example:
[Attributes] NAS-IP-Address= User-Name=