[tac_plus] Re: Accounting difficulties

schmitz at anl.gov schmitz at anl.gov
Mon Apr 20 17:33:36 UTC 2009


Many apologies. I figured it out. I was setting the wtmp log file in  
the cli, and this prevented acconting records from hitting the  
accounting log file. They must be mutually exclusive.

Does this make sense?

--
Corby Schmitz
Mobile

On Apr 20, 2009, at 12:15, john heasley <heas at shrubbery.net> wrote:

> Mon, Apr 20, 2009 at 11:32:32AM -0500, Schmitz Corby:
>> I have been working with the latest build of tac_plus distributed on
>> your website. I have been successful at getting everything working
>> (includeing ACL support which is why I chose this version in the  
>> first
>> place) except for accounting. I was using the Ubuntu distribution
>> previously and with the accounting directive in the configuration
>> file, things just worked:
>> accounting file = /var/log/tac-plus/accounting
>> Under the current version:
>> root at nms221:/usr/local/tacacs+-F4.0.4.18# /usr/local/tacacs/bin/
>> tac_plus -v
>> tac_plus version F4.0.4.18
>> ACLS
>> FIONBIO
>> LIBWRAP
>> LINUX
>> LITTLE_ENDIAN
>> LOG_DAEMON
>> PAM
>> NO_PWAGE
>> REAPCHILD
>> RETSIGTYPE RETSIGTYPE
>> SHADOW_PASSWORDS
>> SIGTSTP
>> SIGTTIN
>> SIGTTOU
>> SO_REUSEADDR
>> STRERROR
>> TAC_PLUS_PORT
>> UENABLE
>> __STDC__
>>
>> I cannot seem to get it working again. I have tried building with a
>> specific entry for the accounting file when I run configure prior to
>> building:
>> --with-acctfile=/var/log/tac-plus/account
>>
>> With our without this entry and despite what is in the configuration
>> file, nothing ever gets written to the accounting log file.
>
> errors in syslog?  does accounting work when set to syslog?  does the
> daemon run chroot'd?  tried accounting debugging in the daemon to be
> sure the device in sending accounting?


More information about the tac_plus mailing list