Output of exec module

Dom Latter freeradius-users at latter.org
Tue Apr 23 14:20:19 CEST 2019

We are using the exec module [1]:

In some circumstances we will reject a user even though they have
authenticated.  So we send a return code of 1.

But this appears in radius./log as an error.  Looking at src/main/exec.c
I find these lines:

if ((status != 0) || (ret < 0)) {
   RERROR("Program returned code (%d) and output '%s'", status, answer);

so I am guessing this is essentially as designed.  Is that right?

[1] essentially, registering new devices on the network.

More information about the Freeradius-Users mailing list