problem with attributes in access-reject

Rob Mason rob.mason at ammeon.com
Wed Dec 5 11:23:02 CET 2007


Freeradius version:1.1.8 with jradius

Hi I am trying to send some attributes in an access-reject message , viz:
User-Name: value 'echoed' from Access-Request
Service-Type: 1 (Login-user)
Reply-Message: Wrong user name or password

However freeradius appears to be blocking all but Reply-Message from 
getting to the client.

I can see these being set in the output of my jradius  going towards the 
free radius server, however I am only seeing Reply-Message in the reply 
coming to the client (User-Name and Service-Type come through OK on my 
Access-Accept case). Attached are attrs config file and radiusd

Output from jradius:
================

--- packet 2 of 2
Class: class net.jradius.packet.AccessReject
Attributes:
User-Name := bill
Service-Type := Login-User
Reply-Message := Wrong user name or password



Output from Freeradius
=================
  modcall[authorize]: module "jradius" returns reject for request 11
modcall: leaving group authorize (returns reject) for request 11
Invalid user: [bill at AMMEON/billpass] (from client local port 1819 cli 
0851234567)
Delaying request 11 for 1 seconds
Finished request 11
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 32 to 127.0.0.1 port 32796
        Reply-Message := "Wrong user name or password"


Output to client (pyrad):
access denied
Attributes returned by server:
Reply-Message: ['Wrong user name or password']

Rgds
Rob Mason


     
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed. If you have received this email in error please
notify the system manager. This message contains confidential
information and is intended only for the individual named. If you
are not the named addressee you should not disseminate, distribute
or copy this e-mail.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: attrs
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071205/f5cc1f69/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: radiusd.conf
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071205/f5cc1f69/attachment-0001.ksh>


More information about the Freeradius-Users mailing list