<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7655.5">
<TITLE>accounting to syslog. tac_plus  F4.0.4.19</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"><FONT SIZE=2 FACE="Verdana">Hi,</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"><FONT SIZE=2 FACE="Verdana">tac_plus version F4.0.4.19</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">so sending accounting to syslog should be supported.</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">running on</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Verdana">FreeBSD 8.3-RELEASE-p4</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">having following config:</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">accounting syslog;</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">accounting file = /var/log/tac_plus.acct</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">logging = local6</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">and syslogd.conf</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"><FONT SIZE=2 FACE="Verdana">local6.*&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/log/tac_plus.log</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN></P>
<BR>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">accou</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">n</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">ting log</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">s</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana"> go OK to</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Verdana">/var/log/tac_plus.acct</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">. We have used that for many years.</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">and I see</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">,</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana"></FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Verdana">for example,</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Verdana">following types of messages in</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Verdana">/var/log/tac_plus.log</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">:</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">Oct 31 14:15:02 login20 tac_plus[23136]: connect from 62.135.173.4 [62.135.173.4]</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">So basic syslog</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">&#8217;</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">ing from tac_plus to syslog local6 facility works ok.</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">but I do not get any accounting records in tac_plus.log</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">I would like to see c</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">o</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">mmand accounting logs in tac_plus.log, similar to those we see</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"> <FONT SIZE=2 FACE="Verdana">in</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana"> tac_plus.acct:</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">Wed Oct 31 14:18:55 2012&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 213.236.195.47&nbsp; nothowan&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ttyp1&nbsp;&nbsp; 195.249.15.10&nbsp;&nbsp; stop&nbsp;&nbsp;&nbsp; task_id=1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; service=shell&nbsp;&nbsp; elapsed_time=3606&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; process*mgd[27460]&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cmd=logout</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

<P DIR=LTR><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">Do you have any idea what the problem is?</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">Regards</FONT></SPAN></P>

<P DIR=LTR><SPAN LANG="en-us"><FONT SIZE=2 FACE="Verdana">Gert Elnegaard</FONT></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="da"></SPAN><SPAN LANG="en-us"></SPAN></P>

</BODY>
</HTML>