HP-UX AAA Server A.07.01 Administrator's Guide

Parameters
• <log-level>: The <log-level> parameter must be a quoted string and a log-level type.
Following are the valid log levels:
— ERROR
— CRITICAL
— ALERT
— WARNING
— INFO
NOTE: The <log-level> parameter is case-insensitive. For example, ERROR is
considered identical with Error.
• <log-message>: The <log-message> parameter must be a quoted string. You can use
multiple instances of <attr-spec> and cause all named instances to be reported in
the log file. For more information on attribute specifications, see “Attribute
Specifications” (page 293). If <attr-spec> refers to an instance that is not present, this
is indicated in the log file output.
Operation
Executing the log command results in a message being written to the log file. When
attributes are specified, they are appended to the log message. All log output lines
include the name of the decision file and the line location of the log command that
generated the message. All log output is generated using the standard logging functions
that prepend a timestamp to the output line.
Examples
Log “Warning” “This user should not come in through this NAS”,
User-Name,
NAS-IP-Address
Results in the following logs in the logfile:
<date>: decisionfile://request-ingress.grp(line 100, character 1):
This user should not come in through this NAS,
RADIUS:User-Name[last]="test_user",
RADIUS:NAS-IP-Address[last]=15.146.225.145
The if Command
Syntax
• if (<bool-expr> {<action-list1>} else {<action-list2>}
• if (<bool-expr> {<action-list>}
Defining a Policy in a Decision File 291