[tac_plus] Re: Accounting difficulties
schmitz at anl.gov
schmitz at anl.gov
Mon Apr 20 17:33:36 UTC 2009
Many apologies. I figured it out. I was setting the wtmp log file in
the cli, and this prevented acconting records from hitting the
accounting log file. They must be mutually exclusive.
Does this make sense?
--
Corby Schmitz
Mobile
On Apr 20, 2009, at 12:15, john heasley <heas at shrubbery.net> wrote:
> Mon, Apr 20, 2009 at 11:32:32AM -0500, Schmitz Corby:
>> I have been working with the latest build of tac_plus distributed on
>> your website. I have been successful at getting everything working
>> (includeing ACL support which is why I chose this version in the
>> first
>> place) except for accounting. I was using the Ubuntu distribution
>> previously and with the accounting directive in the configuration
>> file, things just worked:
>> accounting file = /var/log/tac-plus/accounting
>> Under the current version:
>> root at nms221:/usr/local/tacacs+-F4.0.4.18# /usr/local/tacacs/bin/
>> tac_plus -v
>> tac_plus version F4.0.4.18
>> ACLS
>> FIONBIO
>> LIBWRAP
>> LINUX
>> LITTLE_ENDIAN
>> LOG_DAEMON
>> PAM
>> NO_PWAGE
>> REAPCHILD
>> RETSIGTYPE RETSIGTYPE
>> SHADOW_PASSWORDS
>> SIGTSTP
>> SIGTTIN
>> SIGTTOU
>> SO_REUSEADDR
>> STRERROR
>> TAC_PLUS_PORT
>> UENABLE
>> __STDC__
>>
>> I cannot seem to get it working again. I have tried building with a
>> specific entry for the accounting file when I run configure prior to
>> building:
>> --with-acctfile=/var/log/tac-plus/account
>>
>> With our without this entry and despite what is in the configuration
>> file, nothing ever gets written to the accounting log file.
>
> errors in syslog? does accounting work when set to syslog? does the
> daemon run chroot'd? tried accounting debugging in the daemon to be
> sure the device in sending accounting?
More information about the tac_plus
mailing list