pptpd:身份验证失败的日志

Question

我在Debian 6上使用pptpd，我知道last显示连接列表以及源IP。

我正在寻找不成功认证的日志，或任何形式的警告/禁止的源IP未能认证。

有什么东西适用于pptpd吗？还是wtmp？或者我应该查看外部身份验证机制(radius?)去拿我需要的日志。

谢谢你的帮忙

Answer 1

如果在pptpd.conf上启用logwtmp选项，则应在/var/log/messages上看到

pptpd.conf

# TAG: logwtmp
#       Use wtmp(5) to record client connections and disconnections.
#
logwtmp

/var/log/消息

Mar 13 19:45:23 pineapple pppd[25571]: No CHAP secret found for authenticating USERNAME
Mar 13 19:45:23 pineapple pppd[25571]: Peer riqa failed CHAP authentication
Mar 13 19:45:24 pineapple pptpd[25570]: CTRL: EOF or bad error reading ctrl packet length.
Mar 13 19:45:24 pineapple pptpd[25570]: CTRL: couldn't read packet header (exit)
Mar 13 19:45:24 pineapple pptpd[25570]: CTRL: CTRL read failed
Mar 13 19:45:24 pineapple pppd[25571]: Modem hangup
Mar 13 19:45:24 pineapple pppd[25571]: Connection terminated.
Mar 13 19:45:24 pineapple pppd[25571]: Exit.
Mar 13 19:45:24 pineapple pptpd[25570]: CTRL: Client w.x.y.z control connection finished