6 Jul
2007
6 Jul
'07
4:27 a.m.
Enrik Berkhan wrote: ...
Debuglog without cumbersome workaround (elsif case only): ...
Thu Jul 5 20:51:43 2007 : Debug: +++? if (ok) -> FALSE Thu Jul 5 20:51:43 2007 : Debug: ++- group pap-with-message returns reject
Because the default action for "reject" in "authenticate" sections is to return. You have to over-ride it via "pap {}" for the "if" to even be considered.
As you can see, the elsif is not even considered.
Yes. The solution, I think, is to *not* put logic into the "authenticate" section. As I said before, put it in "post-auth", where it belongs. Alan DeKok.