unlang?

Barry Dean B.Dean at liverpool.ac.uk
Wed Nov 19 12:42:06 CET 2008


Works of course! First class idiot for not spotting this... My head is
full of DHCP configs and I am not thinking RADIUS!

On Wed, 2008-11-19 at 11:20 +0000, Phil Mayers wrote:
> Barry Dean wrote:
> > Back in January Alan DeKok kindly helped me out with some config I
> > needed, see below. I have only just go back to reviewing RADIUS as I
> > have been involved in loads of other projects... and now can't get this
> > working! Typical...
> > 
> > On Fri, 2008-01-18 at 16:23 +0100, Alan DeKok wrote:
> >>   authorize {
> >> 	...
> >> 	if ("%{User-Name}" =~ /special/i) {
> >> 		update reply {
> >> 			Reply-Message = "Cannot use this user account"
> >> 			reject
> >> 		}
> >> 	}
> >> 	...
> > 
> > I added this to the authorize section of my config in
> > sites-available/local-auth a file defining my policies for local users
> > on our wireless etc and got the errors:
> > 
> > 	"ERROR: Unknown attribute reject"
> > 	"Failed to parse "update" subsection.".
> > 
> > Can't fathom that as it seems perfectly OK to me having read the unlang
> > man page.
> 
> """The only contents permitted in an "update" section are attributes and 
> values"""
> 
> ...from "man unlang"
> 
> Move the reject to outside the "update" section (but inside the "if")
> 
> > 
> > I am using version 2.0.2.
> > 
> > Any ideas?
> > 
> 
-- 
Barry Dean
Networks Team
Computing Services Department
Tel: 45641, Web: http://pcwww.liv.ac.uk/~bvd/
---
Nice boy, but about as sharp as a sack of wet mice.
        -- Foghorn Leghorn




More information about the Freeradius-Users mailing list