Hello,
I've made some additional investigation and it seems, the problem
is only present when request is rejected in post-auth section.
Any cue how to overcome this.
I need to reject requests based on some attributes received from
proxied response. But the same code is also used when no proxying
is performed.
Any suggestions ?
I'm not as fluent in C programing to debug the code and locate the
problem. Besides I even don't know if it is a bug or planned
feature.
Could some please point the part of code where to look for the
issue ?
W dniu 2014-11-27 15:49, Wiesław Bieniek pisze:
Hello,
I've used default server configured as follows:
post-auth {
# my module decides to allow or reject request
rtdps2
Post-Auth-Type REJECT {
attr_filter.access_reject
}
}
When I run this on 2.2.0 I got debug:
Thu Nov 27 14:28:44 2014 : Info: ++[rtdps2] returns reject
Thu Nov 27 14:28:44 2014 : Info: Using Post-Auth-Type REJECT
Thu Nov 27 14:28:44 2014 : Info: # Executing group from file
../etc/raddb/sites-enabled/default
Thu Nov 27 14:28:44 2014 : Info: +- entering group REJECT {...}
Thu Nov 27 14:28:44 2014 : Info: [attr_filter.access_reject]
expand: %{User-Name} -> testing
Thu Nov 27 14:28:44 2014 : Debug: attr_filter: Matched entry
DEFAULT at line 11
Thu Nov 27 14:28:44 2014 : Info: ++[attr_filter.access_reject]
returns updated
Sending Access-Reject of id 80 to 192.168.1.4 port 33304
Cisco-AVPair := "h323-return-code=8"
Which is correct, but when I run it in 2.2.6 I got:
Thu Nov 27 14:19:35 2014 : Info: ++[rtdps2] = reject
Thu Nov 27 14:19:35 2014 : Info: +} # group post-auth = reject
Sending Access-Reject of id 186 to 192.168.1.4 port 49975
Service-Type = 0
Framed-Protocol = 0
Cisco-AVPair := "h323-return-code=8"
Thu Nov 27 14:19:35 2014 : Info: Finished request 0.
Which is wrong, because attributes was not filtered out.
Am I missing something ?
Is this a bug ?
What to do to make version 2.2.6 to work the same way 2.2.0 does ?
Regards-
Wiesław Bieniek
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Wiesław Bieniek
Projektant Telco BSS R&D
tel. +48 12 646 12 66
website: www.comarch.pl