<div dir="ltr"><span style="font-family:arial,sans-serif;font-size:13px">Hi,</span><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">I'm using "freeradius-3.0.1-6.el7.x86_64" as proxy, between radius server and a mikrotik NAS for pppoe users, this is the scheme.</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">NAS --> Proxy freeradius --> freeradius Server</div><div style="font-family:arial,sans-serif;font-size:13px">10.200.0.34 10.100.1.100 10.100.1.101</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">My goal is to change the Access-Reject messaje recieved in the Proxy radius from the Radius server to send to the NAS an Access-Accept with some attributtes, like this more or less, i tried to put this just inside "Post-Auth-Type REJECT" in Post-Auth section without results</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px"><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif"> if (reject) { </span><br style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif"><span style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif"> ok # over-ride "reject" </span><br style="color:rgb(0,0,0);font-family:Verdana,Geneva,Helvetica,Arial,sans-serif"></div><div style="font-family:arial,sans-serif;font-size:13px"> update control {</div><div style="font-family:arial,sans-serif;font-size:13px"> Auth-Type := Accept</div><div style="font-family:arial,sans-serif;font-size:13px"> <font color="#000000" face="monospace"><span style="font-size:12px;line-height:18.1500015258789px;white-space:nowrap;background-color:rgb(250,250,250)">Framed-Pool</span></font> = 'BAN'</div><div style="font-family:arial,sans-serif;font-size:13px"> }</div><div style="font-family:arial,sans-serif;font-size:13px">}</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">i think i just miss to put before this update control the if condition before, but i dont know which one to use</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">This is what i can see in debug mode:</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px"><div>rad_recv: Accounting-Response packet from host 10.100.1.101 port 1813, id=225, length=25</div><div> Proxy-State = 0x323033</div><div>(0) # Executing section post-proxy from file /etc/raddb/sites-enabled/default</div><div>(0) post-proxy {</div><div>(0) eap : No pre-existing handler found</div><div>(0) [eap] = noop</div><div>(0) } # post-proxy = noop</div><div>Sending Accounting-Response of id 203 from 10.100.1.100 port 1813 to 10.200.0.34 port 56239</div><div>(0) Finished request 0.</div><div>Waking up in 0.3 seconds.</div><div>rad_recv: Access-Request packet from host 10.200.0.34 port 60374, id=204, length=157</div><div> Service-Type = Framed-User</div><div> Framed-Protocol = PPP</div><div> NAS-Port = 8546310</div><div> NAS-Port-Type = Ethernet</div><div> User-Name = 'USERNAME_XX'</div><div> Calling-Station-Id = 'D4:CA:6D:47:A5:27'</div><div> Called-Station-Id = 'pppoe-Excom'</div><div> NAS-Port-Id = 'bridge-pppoe'</div><div> User-Password = 'Password'</div><div> NAS-Identifier = 'PABELLON_RT1'</div><div> NAS-IP-Address = 10.200.0.34</div><div>(1) # Executing section authorize from file /etc/raddb/sites-enabled/default</div><div>(1) authorize {</div><div>(1) filter_username filter_username {</div><div>(1) ? if (User-Name != "%{tolower:%{User-Name}}")</div><div>(1) expand: "%{tolower:%{User-Name}}" -> 'username_xx'</div><div>(1) ? if (User-Name != "%{tolower:%{User-Name}}") -> TRUE</div><div>(1) if (User-Name != "%{tolower:%{User-Name}}") {</div><div>(1) [reject] = reject</div><div>(1) } # if (User-Name != "%{tolower:%{User-Name}}") = reject</div><div>(1) } # filter_username filter_username = reject</div><div>(1) } # authorize = reject</div><div>(1) Using Post-Auth-Type Reject</div><div>(1) # Executing group from file /etc/raddb/sites-enabled/default</div><div>(1) Post-Auth-Type REJECT {</div><div>(1) attr_filter.access_reject : expand: "%{User-Name}" -> 'USERNAME_XX'</div><div>(1) attr_filter.access_reject : Matched entry DEFAULT at line 11</div><div>(1) [attr_filter.access_reject] = updated</div><div>(1) eap : Request didn't contain an EAP-Message, not inserting EAP-Failure</div><div>(1) [eap] = noop</div><div>(1) remove_reply_message_if_eap remove_reply_message_if_eap {</div><div>(1) ? if (reply:EAP-Message && reply:Reply-Message)</div><div>(1) ? if (reply:EAP-Message && reply:Reply-Message) -> FALSE</div><div>(1) else else {</div><div>(1) [noop] = noop</div><div>(1) } # else else = noop</div><div>(1) } # remove_reply_message_if_eap remove_reply_message_if_eap = noop</div><div>(1) } # Post-Auth-Type REJECT = updated</div><div>(1) Finished request 1.</div><div>(0) Cleaning up request packet ID 203 with timestamp +5</div><div>Waking up in 0.2 seconds.</div><div>rad_recv: Access-Request packet from host 10.200.0.34 port 60374, id=204, length=157</div><div>(1) Discarding duplicate request from client Bejar port 60374 - ID: 204 due to unfinished request</div><div>Waking up in 0.6 seconds.</div><div>rad_recv: Access-Request packet from host 10.200.0.34 port 60374, id=204, length=157</div><div>(1) Discarding duplicate request from client Bejar port 60374 - ID: 204 due to delayed reject</div><div>Waking up in 0.3 seconds.</div><div>(1) Sending delayed reject</div><div>Sending Access-Reject of id 204 from 10.100.1.100 port 1812 to 10.200.0.34 port 60374</div><div><br></div></div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Can anyone help me??</div><div style="font-family:arial,sans-serif;font-size:13px"><br></div><div style="font-family:arial,sans-serif;font-size:13px">Best regards, JJ</div><div><br></div><div><br></div>-- <br><div dir="ltr"><div><br></div><span style="color:rgb(0,0,0)">------------------------------------</span><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">Juanjo Abenza Sánchez</span><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">Operaciones</span><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">Free Technologies Excom, S.L.</span><br style="color:rgb(0,0,0)"><a style="color:rgb(0,0,0)" href="http://www.excom.es/" target="_blank">http://www.excom.es</a><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">Tel. 902 02 02 34 Ext. 202</span><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">
Fax 902 87 66 41</span><br style="color:rgb(0,0,0)"><span style="color:rgb(0,0,0)">-----------------------------------</span><br><h1 style="font-weight:normal"><font><font size="1" face="Arial-BoldItalic"><font size="1" face="Arial-BoldItalic"><div><p style="margin:0cm 0cm 0pt;line-height:normal">
<span style="font-family:Arial-Bold"><font face="arial,helvetica,sans-serif">AVISO LEGAL</font></span></p><p style="margin:0cm 0cm 0pt;line-height:normal">
<i><span style="font-family:Arial-Italic"><font face="arial,helvetica,sans-serif">Este mensaje es CONFIDENCIAL, siendo para uso exclusivo de su destinatario. Si usted no es el destinatario,</font></span></i></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic"><font face="arial,helvetica,sans-serif">por favor, reenvíe el mensaje inmediatamente a la dirección remitente y proceda a su borrado.</font></span></i></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><font face="arial,helvetica,sans-serif"><i><span style="font-family:Arial-BoldItalic">Free Technologies Excom, s.l. </span></i><i><span style="font-family:Arial-Italic">incluirá su dirección de correo electrónico, así como los datos de contacto que</span></i></font></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic"><font face="arial,helvetica,sans-serif">le facilite en un fichero automatizado, con el fin de gestionar el envío de comunicaciones profesionales y/o</font></span></i></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic"><font face="arial,helvetica,sans-serif">personales. Para ejercitar sus derechos de acceso, rectificación, cancelación y oposición, remita su solicitud a:</font></span></i></p>
</div><p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-BoldItalic"><font face="arial,helvetica,sans-serif">Free Technologies Excom, s.l. - Avenida Valdeparra nº 27, edificio nº 1, planta 2, oficina 4 - 28108,</font></span></i></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-BoldItalic" lang="EN-US"><font face="arial,helvetica,sans-serif">Alcobendas (Madrid).</font></span></i></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><span style="font-family:Arial-Bold" lang="EN-US"><font face="arial,helvetica,sans-serif">LEGAL NOTICE</font></span></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic" lang="EN-US"><font face="arial,helvetica,sans-serif">This message is CONFIDENTIAL, being for exclusive use of the addressee. If you are not the addressee, please</font></span></i></p><div>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic" lang="EN-US"><font face="arial,helvetica,sans-serif">forward this message to sender inmediately and arrange for its deletion.</font></span></i></p>
</div><p style="margin:0cm 0cm 0pt;line-height:normal"><font face="arial,helvetica,sans-serif"><i><span style="font-family:Arial-BoldItalic" lang="EN-US">Free Technologies Excom, s.l. </span></i><i><span style="font-family:Arial-Italic" lang="EN-US">will include your address and contact details in an automated file, in order to</span></i></font></p>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic" lang="EN-US"><font face="arial,helvetica,sans-serif">manage the delivery of business and personal communications. To exercise your rights of access, rectification,</font></span></i></p><div>
<p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-Italic" lang="EN-US"><font face="arial,helvetica,sans-serif">cancellation and opposition, send your request to:</font></span></i></p>
</div><p style="margin:0cm 0cm 0pt;line-height:normal"><i><span style="font-family:Arial-BoldItalic"><font face="arial,helvetica,sans-serif">Free Technologies Excom, s.l. - Avenida Valdeparra nº 27, edificio nº 1, planta 2, oficina 4 - 28108,</font></span></i></p>
<p style="margin:0cm 0cm 10pt"><i><span style="line-height:115%;font-family:Arial-BoldItalic"><font face="arial,helvetica,sans-serif">Alcobendas (Madrid).</font></span></i></p></font></font></font></h1></div>
</div>