9 Feb
2023
9 Feb
'23
4:55 a.m.
On 09/02/2023 08:25, Steven Walters wrote:
I just would like to understand why (purpose) one needs to set 'reject=1'? If I remove the statement the policy doesn't work.
The default action for "reject" is to immediately return. So, if the pap module returns "reject", processing of the Auth-Type PAP section stops at that point. Updating the "reject" action to priority 1 means that it no longer returns, but returns the "reject" result code. The following "if" can then check the code that was returned and do something. It's explained at https://wiki.freeradius.org/config/Fail%20over -- Matthew