On 15/05/14 17:39, Arran Cudbard-Bell wrote:
On 15 May 2014, at 17:27, Phil Mayers <p.mayers@IMPERIAL.AC.UK> wrote:
On 15/05/14 17:17, Arran Cudbard-Bell wrote:
What's evaluating Post-Auth-Type == Challenge? Whatever it is remove it...
Nothing. That's the point I'm making. I've got a bunch of policy {} blocks with .authorize and .post-auth "methods" and mid-way through evaluating one of them - with no reference to Post-Auth-Type in sight - that error message gets logged.
Bizarre.
The actual error message is: (1) elsif (Cisco-AVPair =~ /^audit-session-id=(.+)$/) (1) ERROR: Condition evaluation failed because the value of an operand could not be determined: Unknown value 'Challenge' for attribute 'Post-Auth-Type' (1) elsif (State =~ /^0x(.{8}).{6}(.{18})$/) (1) elsif (State =~ /^0x(.{8}).{6}(.{18})$/) -> FALSE Which variable is the ERROR: referring to? Cisco-AVPair or State? The former is absent, the latter present.