[tac_plus] Re: Accounting difficulties

[john heasley]

Mon, Apr 20, 2009 at 12:33:36PM -0500, schmitz at anl.gov:
> Many apologies. I figured it out. I was setting the wtmp log file in the 
> cli, and this prevented acconting records from hitting the accounting log 
> file. They must be mutually exclusive.
>
> Does this make sense?

yes, apparently.  the code only does one or the other; which seems awfully
stupid.  hmm, why would it do that.

> --
> Corby Schmitz
> Mobile
>
> On Apr 20, 2009, at 12:15, john heasley <heas at shrubbery.net> wrote:
>
>> Mon, Apr 20, 2009 at 11:32:32AM -0500, Schmitz Corby:
>>> I have been working with the latest build of tac_plus distributed on
>>> your website. I have been successful at getting everything working
>>> (includeing ACL support which is why I chose this version in the  
>>> first
>>> place) except for accounting. I was using the Ubuntu distribution
>>> previously and with the accounting directive in the configuration
>>> file, things just worked:
>>> accounting file = /var/log/tac-plus/accounting
>>> Under the current version:
>>> root at nms221:/usr/local/tacacs+-F4.0.4.18# /usr/local/tacacs/bin/
>>> tac_plus -v
>>> tac_plus version F4.0.4.18
>>> ACLS
>>> FIONBIO
>>> LIBWRAP
>>> LINUX
>>> LITTLE_ENDIAN
>>> LOG_DAEMON
>>> PAM
>>> NO_PWAGE
>>> REAPCHILD
>>> RETSIGTYPE RETSIGTYPE
>>> SHADOW_PASSWORDS
>>> SIGTSTP
>>> SIGTTIN
>>> SIGTTOU
>>> SO_REUSEADDR
>>> STRERROR
>>> TAC_PLUS_PORT
>>> UENABLE
>>> __STDC__
>>>
>>> I cannot seem to get it working again. I have tried building with a
>>> specific entry for the accounting file when I run configure prior to
>>> building:
>>> --with-acctfile=/var/log/tac-plus/account
>>>
>>> With our without this entry and despite what is in the configuration
>>> file, nothing ever gets written to the accounting log file.
>>
>> errors in syslog?  does accounting work when set to syslog?  does the
>> daemon run chroot'd?  tried accounting debugging in the daemon to be
>> sure the device in sending accounting?