Previous Topic: smpatchcheck

Next Topic: SiteMinder Test Tool

Read RADIUS Log Files With Smreadclog

This tool is used to read RADIUS log files generated by the Policy Server. It is useful for troubleshooting the Policy Server when used as a RADIUS authentication server. Options are provided to display individual RADIUS attributes that are exchanged between NAS and SiteMinder.

Smreadclog uses the following arguments to supply information required to read RADIUS log files:

-iinput_file

Specifies the filename of the log file.

-ooutput_file

Specifies the filename of the output file.

-ssecret

Specifies the shared secret that can be used to decode RADIUS passwords.

-r

Indicates that a hex dump of an entire RADIUS packet be displayed.

-a

Indicates that RADIUS attributes should be displayed individually.

-d

Indicates that RADIUS attributes should be displayed according to their definition in the policy store. This option displays actual attribute names as well as attribute values formatted based on their attribute type. Without this option, only the attribute name and value are displayed as a hex string.

-pradius_server

Records and replays RADIUS activity of the Policy Server service against your RADIUS server.

-mauthentication_port

Specifies the port used for RADIUS authentication if that port is not the default port, 1645.

-naccounting_port

Specifies the port used for RADIUS accounting if that port is not the default port, 1646.

Note: For information about deploying the Policy Server as a RADIUS authentication server, see the Policy Design guide.

To use smreadclog

  1. Navigate to one of the following locations:
    siteminder_home

    Specifies the Policy Server installation path.

  2. Enter the following command:
    smreadclog -iinput_file -ooutput_file 
    -ssecret -r -a -d -pradius_server -mport_number 
    -nport_number
    

    Important! Before running a SiteMinder utility or executable on Windows Server 2008, open the command line window with Administrator permissions. Open the command line window this way, even if your account has Administrator privileges. For more information, see the release notes for your SiteMinder component.

    Example: smreadclog -iradiuslog.txt -oradiuslog2.txt
    -ssecret -r -a -d -p123.123.12.12