Policy Server Guides › Policy Server Configuration Guide › Using the Policy Server as a RADIUS Server › Troubleshoot and Test RADIUS › Read RADIUS Log Files With Smreadclog

Read RADIUS Log Files With Smreadclog

This tool is used to read RADIUS log files generated by the Policy Server. It is useful for troubleshooting the Policy Server when used as a RADIUS authentication server. Options are provided to display individual RADIUS attributes that are exchanged between NAS and SiteMinder.

Smreadclog uses the following arguments to supply information required to read RADIUS log files:

• -i<input-file>

  Specifies the filename of the log file.

• -o<output-file>

  Specifies the filename of the output file.

• -s<secret>

  Specifies the shared secret that can be used to decode RADIUS passwords.

• -r

  Indicates that a hex dump of an entire RADIUS packet be displayed.

• -a

  Indicates that RADIUS attributes should be displayed individually.

• -d

  Indicates that RADIUS attributes should be displayed according to their definition in the policy store. This option displays actual attribute names as well as attribute values formatted based on their attribute type. Without this option, only the attribute name and value are displayed (as a hex string).

• -p<radius-server>

  Enables you to record and replay RADIUS activity of the Policy Server service against your RADIUS server.

• -m<authentication port>

  Specifies the port used for RADIUS authentication if that port is not the default port, 1645.

• -n<accounting port>

  Specifies the port used for RADIUS accounting if that port is not the default port, 1646.

To use smreadclog

1. Navigate to one of the following locations:
   • On NT, <siteminder_installation>\Bin

     where <siteminder_installation> is the installed location of SiteMinder.

   • On UNIX, <siteminder installation>/bin

     where <siteminder_installation> is the installed location of SiteMinder.

2. Enter the following command:

   smreadclog -i<input-file> -o<output-file>
   -s<secret> -r -a -d -p<radius-server> -m<portnumber>
   -n<portnumber>
   

   For example,

   smreadclog -iradiuslog.txt -oradiuslog2.txt
   -ssecret -r -a -d -p123.123.12.12