On 12 Feb 2016, at 12:53, Alan Batie <alan@peak.org> wrote:
I would like to send otherwise REJECTed users to a "suspended" ip pool and pass them. When things get rejected, it seems to abort processing (e.g. if I stick a perl module after pap, it doesn't get called if pap rejects), and it doesn't look like you can make them OK in the Post-Auth-Type REJECT section. Recommendations?
Do it in authenticate. You can override the priority/actions of return codes on a module call by module call basis e.g. authenticate { Auth-Type perl { perl { reject = 1 } if (reject) { # do extra things here } } } The NAS probably won't allow assignment unless you send back an accept though. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2