000021901 - How to run report that show total time per user session in RSA Authentication Manager and RSA ACE/Server

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000021901
Applies ToRSA Authentication Manager
RSA ACE/ Server
Microsoft Windows
UNIX
RADIUS enabled
IssueHow to run report that show total time per user session in RSA Authentication Manager and RSA ACE/Server
CauseThe ACE/Server running native SecurID is just an authentication server, and does not provide accounting info. However, it can provide accounting when RADIUS is enabled.
ResolutionAssuming RADIUS is already enabled on the ACE/Server, run RADIUS Configuration Utility rwconfig (Windows) or rtconfig (UNIX) under the USR_ACE (..\ace\prog) directory to enable RADIUS Accounting. The accounting settings include:

Enable/Disable RADIUS Accounting

Enable/ Disable discarding of duplicate packets
Change Packet lifetime (Default is 120 sec.)
Specify full path to Accounting directory (Default is ..\ace\data\radacct\ on Windows and ../ace/data/radacct or VAR_ACE/radacct on UNIX 
Specify Log file format:  Standard log file format or CSV Format
Configure CSV file format

You must restart RADIUS daemon after making any changes above. The .CSV format is recommended to ensure the file can be easily imported into a spreadsheet application to calculate the session time by subtracting the "accounting start" from the corresponding "accounting stop" time.
Legacy Article IDa25632

Attachments

    Outcomes