aboutsummaryrefslogtreecommitdiffstats
path: root/config/freeradius2
diff options
context:
space:
mode:
authorNachtfalke <nachtfalkeaw@web.de>2012-01-05 23:41:13 +0100
committerNachtfalke <nachtfalkeaw@web.de>2012-01-05 23:41:13 +0100
commit62ea44d97ed7c86932e4cd3a1af3957db878c5a8 (patch)
treed82cd99dbd82da8b20262a238c782f120f7546f1 /config/freeradius2
parent6714580c68465f7dcb21dcc6057db0b6b381ad8c (diff)
downloadpfsense-packages-62ea44d97ed7c86932e4cd3a1af3957db878c5a8.tar.gz
pfsense-packages-62ea44d97ed7c86932e4cd3a1af3957db878c5a8.tar.bz2
pfsense-packages-62ea44d97ed7c86932e4cd3a1af3957db878c5a8.zip
clarified some logging descriptions and deleted logging options which do not work in the way we use them.
Diffstat (limited to 'config/freeradius2')
-rw-r--r--config/freeradius2/freeradiussettings.xml12
1 files changed, 5 insertions, 7 deletions
diff --git a/config/freeradius2/freeradiussettings.xml b/config/freeradius2/freeradiussettings.xml
index 67e75732..8115945a 100644
--- a/config/freeradius2/freeradiussettings.xml
+++ b/config/freeradius2/freeradiussettings.xml
@@ -158,20 +158,18 @@
<field>
<fielddescr>Logging Destination of RADIUS</fielddescr>
<fieldname>varsettingslogdir</fieldname>
- <description><![CDATA[Choose the destination where freeRADIUS should log. Logging must be enabled.(Default: radius.log)]]></description>
+ <description><![CDATA[Choose the destination where freeRADIUS should log. This will log if service started or failed but no authentication information. (Default: radius.log)]]></description>
<type>select</type>
<default_value>syslog</default_value>
<options>
<option><name>/var/log/radius.log</name><value>files</value></option>
<option><name>System Logs -> System</name><value>syslog</value></option>
- <option><name>stdout</name><value>stdout</value></option>
- <option><name>stderr</name><value>stderr</value></option>
</options>
</field>
<field>
<fielddescr>RADIUS Logging</fielddescr>
<fieldname>varsettingsauth</fieldname>
- <description><![CDATA[Choose if you want to enable logging. (Default: Disabled)]]></description>
+ <description><![CDATA[This enables logging if an authentication is accepted or rejected. (Default: Disabled)]]></description>
<type>select</type>
<default_value>yes</default_value>
<options>
@@ -182,7 +180,7 @@
<field>
<fielddescr>Log Bad Authentication Attempts</fielddescr>
<fieldname>varsettingsauthbadpass</fieldname>
- <description><![CDATA[Choose if you want to log bad authentication attempts. Logging must be enabled. (Default: no)]]></description>
+ <description><![CDATA[If an authentication fails then it will log the username and <b>wrong</b> password visible in syslog. Logging must be enabled. (Default: no)]]></description>
<type>select</type>
<default_value>no</default_value>
<options>
@@ -193,7 +191,7 @@
<field>
<fielddescr>Log good authentication attempts?</fielddescr>
<fieldname>varsettingsauthgoodpass</fieldname>
- <description><![CDATA[Choose if you want to log good authentication attempts. Logging must be enabled. (Default: no)]]></description>
+ <description><![CDATA[If an authentication succeeds then it will log the username and <b>correct</b> password visible in syslog. Logging must be enabled. (Default: no)]]></description>
<type>select</type>
<default_value>no</default_value>
<options>
@@ -204,7 +202,7 @@
<field>
<fielddescr>Log Stripped Names</fielddescr>
<fieldname>varsettingsstrippednames</fieldname>
- <description><![CDATA[Choose if you want to log the full User-Name attribute as it was found in the request. Logging must be enabled. (Default: no)]]></description>
+ <description><![CDATA[Choose this if you want to log the full User-Name attribute as it was found in the request. Logging must be enabled. (Default: no)]]></description>
<type>select</type>
<default_value>no</default_value>
<options>