Nicolas Baradakis wrote:
Valts Mazurs wrote:
There is one feature or bug in algorhytm in rlm_python module. If rlm_python receives RLM_MODULE_REJECT as python script return code it cleans all attributes from reply message.
This was already reported on the bugzilla under bug #279. http://bugs.freeradius.org/show_bug.cgi?id=279
But, as far as I know, it is allowed to return some attributes to NAS in reject message. I would like to send h323-return-code in authorization reject message to explain to NAS why particular message was rejected.
Even if the pairfree() is removed from the module, I think the server core will delete the attribute later.
Usually it does not :) If python script exits with other code than RLM_MODULE_REJECT (RLM_MODULE_INVALID, for example) then no attributes are removed. I use rlm_perl for a while and have not seen any attribute removed on RLM_MODULE_REJECT. The only case when reply message attributes are removed is when (any) module exits with RLM_MODULE_FAIL.