Well I know BASH, PHP, MS VB, Java, Pascal, and Assembler. I'm sure if I look at brief docks on Perl I'll get it. In your code, $RAD_REQUEST{'Module-Failure-Message'} what that variable mean? Is there any doc on how to write scripts for radius? As to Windows that doesn't read reply message, I don't care we will never use windows, only Linux _____ From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Garber, Neal Sent: Friday, December 01, 2006 2:30 PM To: FreeRadius users mailing list Subject: RE: DEFAULT access-reject Reply-Message
Ok I got the idea how to initiate the the script on reject event, but what should go in post_auth_reject.pl? I have absolutely no experience with Perl. I probably would be >able to figure out something but not sure how. I assume I would listen to something like if username exist, if username exist and password incorrect. Still I have no idea >how to do this :-(
I don't have enough time or patience to teach you perl via E-mail. Do you know other scripting languages? Have you ever done any script programming? If not, I would suggest you find someone in your organization that has the appropriate experience. Here is an excerpt of perl code to check for the existence of the Module-Failure-Message request attribute and if it exists will set the Reply-Message reply attribute.. sub post_auth_reject { if (defined($RAD_REQUEST{'Module-Failure-Message'})) { $RAD_REPLY{'Reply-Message'} = $RAD_REQUEST{'Module-Failure-Message'}; } return RLM_MODULE_OK; } Since I don't know exactly what you want to do this probably doesn't exactly match your requirements. Also, as someone else pointed out, many clients ignore the Reply-Message attribute (e.g., windows supplicant) so this could all be a waste of time.