<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Ok. I was just assuming that the FreeRadius Wiki was an authoritative
source, and if it's written there, there must be something I just
wasn't understanding that required it to be that way. When I get
something working correctly, shall I register for an account and update
your wiki page accordingly (once MySQL is working again)?<br>
<br>
-Jason<br>
<br>
Alan DeKok wrote:
<blockquote cite="mid:4D8F85A8.7040202@deployingradius.com" type="cite">
<pre wrap="">Jason Antman wrote:
</pre>
<blockquote type="cite">
<pre wrap="">And in post-auth{}:
### snip ###
if(control:Auth-Type == 'CSID'){
# Authorization happens here
authorized_macs.authorize
if(!ok){
reject
</pre>
</blockquote>
<pre wrap=""><!---->
Uh... why? If the user is authenticated, you shouldn't be rejecting him.
</pre>
<blockquote type="cite">
<pre wrap="">If I put a "sql" line before this, it always logs with Access-Accept,
since that's what authenticate{} ALWAYS returns, and the sql module is
being called before . If I put a "sql" line after this, it never gets
executed for "reject" statements...
</pre>
</blockquote>
<pre wrap=""><!---->
Because you're doing it wrong. The whole point of accepting the user
is that you *don't* reject them.
Change your rules to reject the user *before* they're accepted. The
logging will then behave as you expect. It doesn't behave as you expect
now, because you're rejecting them after you've accepted them. That
makes no sense.
</pre>
<blockquote type="cite">
<pre wrap="">Why is the authorize statement in the post-auth { } section? That seems
to be the cause of these problems...
</pre>
</blockquote>
<pre wrap=""><!---->
So move it.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
</body>
</html>