Can FreeRADIUS retry authentication with another Active Directory after Post-Auth-Type REJECT

Alan DeKok aland at
Mon Jun 11 13:48:26 CEST 2018

On Jun 10, 2018, at 10:31 PM, Peter Drucker <druckers at> wrote:
>>    I tried this.
>    authenticate {
>        Auth-Type MS-CHAP {
>            mschap
>            if (reject)

  Which means you didn't read the link I posted.

>                policy
>                reject = return
>        }
>      I can see mschap returning reject, but it's not honoring the if
> condition. Does it only handle just the return codes and not the 'if'
> statement in authenticate flow?

  Read the documentation.

  Alan DeKok.

More information about the Freeradius-Users mailing list