On 2 May 2014, at 09:17, Stefan Winter <stefan.winter@restena.lu> wrote:
Hi,
I can confirm that today's GIT does what it's supposed to in terms of Access-Reject/Accept :-)
There is still something strange (but probably unrelated) which I see in debug mode:
(2) pap : Passwords don't match (2) [pap] = reject (2) } # Auth-Type PAP = reject (2) Failed to authenticate the user. (2) Using Post-Auth-Type Reject (2) WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. Sending Access-Reject Id 38 from 127.0.0.1:1812 to 127.0.0.1:55939
(this happens both when proxy-to-vserver, or when just running through unproxied)
I'm a bit worried about that - the dictionaries are auto-loaded, and they contain "Reject" as a value of Post-Auth-Type just fine.
Because you don't have a Reject section in Post-Auth?
So why is this not found?
And, more importantly, if my post-auth section has something to do inside Post-Auth-Type Reject: will these config items actually get executed?
They should do. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2