Hi John,



I've had a look in the documentation and I've also prodded Alan D from the FreeRADIUS project, and it appears that FreeRADIUS always logs in the local timezone. So, if you set your server to UTC, it will log in UTC.



If you log items separately, i.e. you don't rely just on radiusd.log, you can adjust your log by using the date module xlat. You might need to add a new xlat and set it to present the logging in UTC format:



date utc_ISO_date {

     #

        format = "%Y-%m-%d %H:%M:%S"

        utc = yes

}



Then you can use that same xlat similar to this (for example in a linelog):





                Access-Accept = "%{utc_ISO_date:%l} Accepted user: %{User-Name}"

                Access-Reject = "%{utc_ISO_date:%l} Rejected user: %{User-Name}"



The %l indicates the Unix timestamp of the request (as per https://freeradius.org/documentation/freeradius-server/3.2.4/unlang/xlat/character.html) and should log the date in UTC.



With kind regards



Stefan Paetow

Federated Roaming Technical Specialist

eduroam(UK), Jisc



email/teams: [log in to unmask]

gpg: 0x3FCE5142



For eduroam support, please contact the eduroam team via [log in to unmask] and mark it for eduroam’s attention.

On Wednesdays and Fridays, I am not available between 12:00 and 15:00.



jisc.ac.uk



Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB Tel: 020 3697 5800.











On 29/09/2023, 13:15, "Jisc eduroam(UK) service on behalf of John Horne" <[log in to unmask] <mailto:[log in to unmask]> on behalf of [log in to unmask] <mailto:[log in to unmask]>> wrote:





Hello,





I have been having a look through the above doc, and noticed in section 2.3.1.6

(Logging - requirements):





"Every log entry MUST state the date and time it was logged, derived from a

reliable time source. The timestamp MUST be in UTC."





It's the 'timestamp MUST be in UTC' that got me. We are using Freeradius

3.0.20, and typical log entries look like:





"Fri Sep 29 12:31:58 2023 : Auth: (6807143) Login OK:..."





which are currently still in BST, not UTC.





Am I completely miss interpreting the requirement, or missing something, or do

we need to reconfigure Freeradius so that UTC is used?









Thanks,





John.





--

John Horne | Senior Operations Analyst | Technology and Information Services

University of Plymouth | Drake Circus | Plymouth | Devon | PL4 8AA | UK

________________________________

[https://www.plymouth.ac.uk/images/email_footer.gif <https://www.plymouth.ac.uk/images/email_footer.gif>]<http://www.plymouth.ac.uk/worldclass> <http://www.plymouth.ac.uk/worldclass;>





This email and any files with it are confidential and intended solely for the use of the recipient to whom it is addressed. If you are not the intended recipient then copying, distribution or other use of the information contained is strictly prohibited and you should not rely on it. If you have received this email in error please let the sender know immediately and delete it from your system(s). Internet emails are not necessarily secure. While we take every care, University of Plymouth accepts no responsibility for viruses and it is your responsibility to scan emails and their attachments. University of Plymouth does not accept responsibility for any changes made after it was sent. Nothing in this email or its attachments constitutes an order for goods or services unless accompanied by an official order form.





########################################################################





To unsubscribe from the EDUROAM-UK list, click the following link:

https://www.jiscmail.ac.uk/cgi-bin/WA-JISC.exe?SUBED1=EDUROAM-UK&A=1 <https://www.jiscmail.ac.uk/cgi-bin/WA-JISC.exe?SUBED1=EDUROAM-UK&A=1>





This message was issued to members of http://www.jiscmail.ac.uk/EDUROAM-UK <http://www.jiscmail.ac.uk/EDUROAM-UK>, a mailing list hosted by http://www.jiscmail.ac.uk/ <http://www.jiscmail.ac.uk/>, terms & conditions are available at https://www.jiscmail.ac.uk/policyandsecurity/ <https://www.jiscmail.ac.uk/policyandsecurity/>









########################################################################



To unsubscribe from the EDUROAM-UK list, click the following link:

https://www.jiscmail.ac.uk/cgi-bin/WA-JISC.exe?SUBED1=EDUROAM-UK&A=1



This message was issued to members of www.jiscmail.ac.uk/EDUROAM-UK, a mailing list hosted by www.jiscmail.ac.uk, terms & conditions are available at https://www.jiscmail.ac.uk/policyandsecurity/