unlang question

[Alan DeKok]

Enrik Berkhan wrote:
...
> Debuglog without cumbersome workaround (elsif case only):
...
>> Thu Jul  5 20:51:43 2007 : Debug: +++? if (ok) -> FALSE
>> Thu Jul  5 20:51:43 2007 : Debug: ++- group pap-with-message returns reject

  Because the default action for "reject" in "authenticate" sections is
to return.  You have to over-ride it via "pap {}" for the "if" to even
be considered.

> As you can see, the elsif is not even considered.

  Yes.  The solution, I think, is to *not* put logic into the
"authenticate" section.

  As I said before, put it in "post-auth", where it belongs.

  Alan DeKok.