Session Logging and Monitoring

You can view the log files that record the details of each AAA transaction or the session logs that record information about each user's session. You can also access information for active sessions and manually terminate a session if necessary.

These functions can be accessed by selecting the Maintenance menu items from the Server Manager Navigation Tree. When you use any of these functions, you will retrieve information from all servers selected in the Server Manager’s Server Status section.

Viewing User Session

After a user is successfully authenticated and the AAA server sends an Access-Accept, the access device will send an Accounting-Request message to start the session. The AAA server stores information about the session in an active session record. When the users session is terminated, the client sends an Accounting-Request message to stop the session. When a AAA server receives the stop message, it clears its active record for the session and writes the session information to a file.Use the following steps to display session information for a particular user:

Through the Server Manager interface, select the Sessions link from the Navigation Tree located in the left frame of the browser
Enter search parameters in the Session Filter screen that appears. Retrieved session will be restricted to the specified search parameters.
Figure 3-3 Sessions Search Filter Screen
Select the Display button. The AAA server manager will display a list of active sessions.
Select a session. The AAA server manager will display the attributes for the selected session.
Select the OK button when you are done reading the session.

Stopping a Session

This procedure is intended for sessions that were terminated on the access device but are maintained as active by the AAA server.

Follow the “Viewing User Session” procedure.
Select the Stop button from the Session Attributes screen. The AAA server will clear its record of the active session, but no action is taken by the access device.

Viewing Server Logfiles

The log file of the AAA server contains all the information concerning the functioning of the server such as: start/stop of the server, all of the RADIUS requests, and some internal events. Selecting the Server Logfile link in Server Manager’s Navigation Tree allows you to retrieve information from log files. The data is automatically stored each day in a different file. They are available as long as the corresponding files are still on the disk.

/var/opt/aaa/logs/logfile: the server log file

/var/opt/aaa/logs/logfile_part<01-09>.yyyymmdd: compressed daily log file




	NOTE: If the logfile exceeds its size limit (as configured in the File Size Property in the Server Properties link), a new logfile for that day will be created and identified by the `part<01-09>` portion logfile file name string.

Figure 3-4 Server Manager’s Logfile Screen

Search Parameters

You can filter what dates and times to retrieve from the logfile.

Table 3-2 Filter Parameters for Searching Logfiles

Option	Description
Begin (server time)	The date and time of the session to begin retrieving data from.
End (server time)	The date and time of the last session to retrieve data from.
User	Limits the result of the search command to messages related to a specific user. For example, you may wish to find why a user is not able to authenticate.
Number of Messages	Limits the result of the search command to the specified number of messages.




	NOTE: You can filter what data to retrieve according to the type of messages. For each message type, you indicate whether the message type should or should not be retrieved by selecting the Yes or No radio buttons. Refer to the HP-UX AAA Server Administration and Authentication Guide for more information.

Viewing Server Statistics

Selecting the Statistics link from Server Manager’s Navigation Tree allows you to retrieve a count of events that occurred on the AAA server within a time range. The statistics are displayed using a bar graph.

Figure 3-5 Server Manager’s Statistics Screen

Table 3-3 Statistic Search Parameters

Option	Description
Begin (server time)	The date and time of the session to begin retrieving data from.
End (server time)	The date and time of the last session to retrieve data from.

Session Logging and Monitoring

Technical documentation

» Table of Contents

» Index

Viewing User Session

Stopping a Session

Viewing Server Logfiles

Search Parameters

Viewing Server Statistics