Re: Allow access to wrong password

13 Apr 2016

      On Apr 13, 2016, at 8:51 AM, Aurélio de Souza Ribeiro Neto <netolistas@mpc.com.br> wrote:
...
Is it possible to allow access to a different POOL for users who authenticate with invalid login or password?
Only for people who aren't using EAP.
...
Users who connect with correct credentials would use the POOL according to their groups, and users with login and password invalids would be directed to another POOL? I hope I was clear.
Sure.  In the "authenticate" section, do:

authenticate {
	...
	Auth-Type pap {
		pap {
			reject = 1
		}

		if (reject) {
			update control {
				Pool-Name := "rejected_pool"
			}

			ok
		}

	}

	...
}

  You'll have to customize it for your system, but the general idea is there.

  Alan DeKok.