Hello and thank you for your response.<br><br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Is this only in Post-Auth-Type Reject?<br></blockquote>
<div><br>Yes because if I add this in authorize to test:<br>
<br>
ldap<br>
perl<br>
update reply {<br>
Codigo-Reject = Error-Dominio<br>
}<br>
</div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
What does "radiusd -Xxx" say ?<br></blockquote><div><br>the debug info with -Xxx is:<br> </div><div>Tue Mar 27 09:36:22 2012 : Info: # Executing section post-auth from file /etc/freeradius/sites-enabled/eduroam-inner-tunnel<br>
Tue Mar 27 09:36:22 2012 : Info: +- entering group post-auth {...}<br>Tue Mar 27 09:36:22 2012 : Info: [sql] expand: %{Stripped-User-Name} -> 02747632<br>Tue Mar 27 09:36:22 2012 : Info: [sql] expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> 02747632<br>
Tue Mar 27 09:36:22 2012 : Info: [sql] sql_set_user escaped user --> '02747632'<br>Tue Mar 27 09:36:22 2012 : Info: [sql] expand: INSERT INTO radpostauth (username, mac, client, reply, authdate,codreject,radauth) VALUES ( LOWER('%{User-Name}'), LOWER('%i'), '%C', '%{reply:Packet-Type}', NOW(), '%{reply:Codigo-Reject}','radius') -> INSERT INTO radpostauth (username, mac, client, reply, authdate,codreject,radauth) VALUES ( LOWER('02747632'), LOWER('66:77:99:B1:A0:2F'), 'PA', 'Access-Accept', NOW(), 'Error-Dominio','radius')<br>
Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, mac, client, reply, authdate,codreject,radauth) VALUES ( LOWER('02747632'), LOWER('66:77:99:B1:A0:2F'), 'PA', 'Access-Accept', NOW(), 'Error-Dominio','radius')<br>
Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 1..<br>Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 0..<br>Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 4..<br>
Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 3..<br>Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 2..<br>Tue Mar 27 09:36:22 2012 : Info: ++[sql] returns fail<br>
Tue Mar 27 09:36:22 2012 : Info: ++? if (fail)<br>Tue Mar 27 09:36:22 2012 : Info: ? Evaluating (fail) -> TRUE<br>Tue Mar 27 09:36:22 2012 : Info: ++? if (fail) -> TRUE<br>Tue Mar 27 09:36:22 2012 : Info: ++- entering if (fail) {...}<br>
Tue Mar 27 09:36:22 2012 : Info: +++[reply] returns fail<br>Tue Mar 27 09:36:22 2012 : Info: [reply_log] expand: /var/log/freeradius/radacct/%Y/%m/%d/%{Client-IP-Address}-reply-detail-%Y%m%d -> /var/log/freeradius/radacct/2012/03/27/10.253.40.43-reply-detail-20120327<br>
Tue Mar 27 09:36:22 2012 : Info: [reply_log] /var/log/freeradius/radacct/%Y/%m/%d/%{Client-IP-Address}-reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/2012/03/27/10.253.40.43-reply-detail-20120327<br>Tue Mar 27 09:36:22 2012 : Info: [reply_log] expand: %t -> Tue Mar 27 09:36:22 2012<br>
Tue Mar 27 09:36:22 2012 : Info: +++[reply_log] returns ok<br>Tue Mar 27 09:36:22 2012 : Info: +++[reject] returns reject<br>Tue Mar 27 09:36:22 2012 : Info: ++- if (fail) returns reject<br>} # server eduroam-inner-tunnel<br>
Tue Mar 27 09:36:22 2012 : Info: [ttls] Got tunneled reply code 3<br> Relaciones = "03"<br> Nombre-Completo = "MARCOS"<br><b> Codigo-Reject = Error-Dominio</b><br>Tue Mar 27 09:36:22 2012 : Info: [ttls] Got tunneled Access-Reject<br>
Tue Mar 27 09:36:22 2012 : Info: [eapeduroam] Handler failed in EAP/ttls<br>Tue Mar 27 09:36:22 2012 : Info: [eapeduroam] Failed in EAP select<br>Tue Mar 27 09:36:22 2012 : Info: ++[eapeduroam] returns invalid<br>Tue Mar 27 09:36:22 2012 : Info: Failed to authenticate the user.<br>
Tue Mar 27 09:36:22 2012 : Info: } # server eduroam<br>Tue Mar 27 09:36:22 2012 : Info: Using Post-Auth-Type Reject<br>Tue Mar 27 09:36:22 2012 : Info: # Executing group from file /etc/freeradius/sites-enabled/eduroam<br>
Tue Mar 27 09:36:22 2012 : Info: +- entering group REJECT {...}<br>Tue Mar 27 09:36:22 2012 : Info: ++[reply] returns noop<br>Tue Mar 27 09:36:22 2012 : Info: [sql] expand: %{Stripped-User-Name} -> 02747632<br>Tue Mar 27 09:36:22 2012 : Info: [sql] expand: %{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}} -> 02747632<br>
Tue Mar 27 09:36:22 2012 : Info: [sql] sql_set_user escaped user --> '02747632'<br>Tue Mar 27 09:36:22 2012 : Info: [sql] expand: INSERT INTO radpostauth (username, mac, client, reply, authdate,codreject,radauth) VALUES ( LOWER('%{User-Name}'), LOWER('%i'), '%C', '%{reply:Packet-Type}', NOW(), '%{reply:Codigo-Reject}','radius') -> INSERT INTO radpostauth (username, mac, client, reply, authdate,codreject,radauth) VALUES ( LOWER('02747632'), LOWER('66:77:99:B1:A0:2F'), 'PA', 'Access-Reject', NOW(), 'Credenciales-Erroneas','radius')<br>
Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, mac, client, reply, authdate,codreject,radauth) VALUES ( LOWER('02747632'), LOWER('66:77:99:B1:A0:2F'), 'PA', 'Access-Reject', NOW(), 'Credenciales-Erroneas','radius')<br>
Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 1..<br>Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 0..<br>Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 4..<br>
Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 3..<br>Tue Mar 27 09:36:22 2012 : Debug: rlm_sql (sql): Ignoring unconnected handle 2..<br>Tue Mar 27 09:36:22 2012 : Info: ++[sql] returns fail<br>
Tue Mar 27 09:36:22 2012 : Info: ++? if (fail)<br>Tue Mar 27 09:36:22 2012 : Info: ? Evaluating (fail) -> TRUE<br>Tue Mar 27 09:36:22 2012 : Info: ++? if (fail) -> TRUE<br>Tue Mar 27 09:36:22 2012 : Info: ++- entering if (fail) {...}<br>
Tue Mar 27 09:36:22 2012 : Info: +++[reply] returns fail<br>Tue Mar 27 09:36:22 2012 : Info: ++- if (fail) returns fail<br>Tue Mar 27 09:36:22 2012 : Info: Delaying reject of request 42 for 1 seconds<br>Tue Mar 27 09:36:22 2012 : Debug: Going to the next request<br>
Tue Mar 27 09:36:22 2012 : Debug: Waking up in 0.9 seconds.<br>Tue Mar 27 09:36:23 2012 : Info: Sending delayed reject for request 42<br>Sending Access-Reject of id 163 to 10.253.40.43 port 1314<br> EAP-Message = 0x04090004<br>
Message-Authenticator = 0x00000000000000000000000000000000<br><b> Codigo-Reject = Credenciales-Erroneas</b><br></div></div><br><br><br>I don't know what is the mening of the messages:<br><br>Tue Mar 27 09:36:22 2012 : Info: [eapeduroam] Handler failed in EAP/ttls<br>
Tue Mar 27 09:36:22 2012 : Info: [eapeduroam] Failed in EAP select<br>
Tue Mar 27 09:36:22 2012 : Info: ++[eapeduroam] returns invalid<br><br>And, Can I do?<br><br># inner-tunnel<br><br>post-auth {<br> sql{<br> fail=1<br> }<br> if (fail) {<br> update reply {<br> Codigo-Reject = Imposible-Contactar-Backend<br>
<b> Packet-Type := Access-Reject</b><br> }<br> reply_log<br> reject<br> }<br><br>Thank you for your time and sorry for my english<br><br>::::::::::::::::::::::::::::::::::::<br>:: Ana Gallardo Gómez ::<br>
::::::::::::::::::::::::::::::::::::<br><br>