reject request in post-proxy

[Matt Zagrabelny]

On Mon, Aug 24, 2020 at 8:37 PM Alan DeKok <aland at deployingradius.com> wrote:
>
> On Aug 24, 2020, at 8:47 PM, Matt Zagrabelny via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> >
> > I'm getting an error using that config:
> >
> > /etc/freeradius/3.0/sites-enabled/default[939]: Unknown or invalid
> > value "Reject" for attribute Packet-Type
>
>   Use Access-Reject instead.

The server starts, but states that the Packet-Type is invalid when the
post-proxy gets evaluated...

Here is the single line:

(2)         ERROR: Mapping "Access-Reject" -> "Packet-Type" invalid in
this context

and a more full -X output:

(2) Received Access-Accept Id 32 from 10.0.0.1:1812 to
192.168.0.1:41424 length 53
(2)   Reply-Message = "Success. Logging you in..."
(2)   Proxy-State = 0x313834
(2) # Executing section post-proxy from file
/etc/freeradius/3.0/sites-enabled/default
(2)   post-proxy {
(2) eap: No pre-existing handler found
(2)     [eap] = noop
(2)     if (User-Name == 'mzagrabe') {
(2)     if (User-Name == 'mzagrabe')  -> TRUE
(2)     if (User-Name == 'mzagrabe')  {
(2)       update parent.reply {
(2)         ERROR: Mapping "Access-Reject" -> "Packet-Type" invalid in
this context
(2)       } # update parent.reply = invalid
(2)     } # if (User-Name == 'mzagrabe')  = invalid
(2)   } # post-proxy = invalid
(2) Found Auth-Type = Accept
(2) Auth-Type = Accept, accepting the user
(2) # Executing section post-auth from file
/etc/freeradius/3.0/sites-enabled/default
(2)   post-auth {
(2)     update {
(2)       No attributes updated
(2)     } # update = noop
(2)     [exec] = noop
(2)     policy remove_reply_message_if_eap {
(2)       if (&reply:EAP-Message && &reply:Reply-Message) {
(2)       if (&reply:EAP-Message && &reply:Reply-Message)  -> FALSE
(2)       else {
(2)         [noop] = noop
(2)       } # else = noop
(2)     } # policy remove_reply_message_if_eap = noop
(2)   } # post-auth = noop
(2) Sent Access-Accept Id 184 from 192.168.0.1:1812 to
192.168.0.2:53235 length 0
(2)   Reply-Message = "Success. Logging you in..."
(2) Finished request

Thank you for the continued help!

-m