OK when we correct the syntax as you can said now returned only one the "Wrong Password" Reply-Message to NAS. It is ok but; the table radpostauth not updates as the Reply-Message (Wrong Password). It is blank, but when we request the wrong username it returned the correct reply-message "Reply-Message := "Please check your Username" and updates the reason field of the table radpostauth correctly. But when we request with the wrong password it doesnt update the reason field of the table radpostauth. radclient test session with the wrong username, debug output: (updated correctly reason field) (0) sql: --> INSERT INTO radpostauth (reason,username, pass, reply, authdate,callingstationid,.... ) VALUES('Please check your Username','133@kablonet', 'test123', 'Access-Reject', NOW......','','', '','','','','', '','','','', '','','','','') reply-message to nas: Received Access-Reject Id 103 from 127.0.0.1:1812 to 0.0.0.0:0 length 48 Reply-Message = "Please check your Username" (0) -: Expected Access-Accept got Access-Reject ---------------------------- radclient test session with the wrong password, debug output: ( NOT updated reason field) (0) sql: --> INSERT INTO radpostauth (reason,username, pass, reply, authdate,callingstationid,calledstationid,............... ) VALUES('','13@kablonet', 'test1233', 'Access-Reject', NOW()..................','','', '','','','','', '','','','', '','','','','') reply-message to nas: Received Access-Reject Id 69 from 127.0.0.1:1812 to 0.0.0.0:0 length 37 Reply-Message = " Wrong Password" (0) -: Expected Access-Accept got Access-Reject sql{ notfound = 1 reject = 2 } if(notfound){ update reply { Reply-Message := "Please check your Username" } reject } ... Post-Auth-Type REJECT { -sql update reply { Reply-Message = "%{Reply-Message} Wrong Password" } .. Regards On 6/20/22 15:12, Alan DeKok wrote:
On Jun 20, 2022, at 5:48 AM, Can Paçacı<pacaci@servisnet.com.tr> wrote:
We have an issue about reject message. As seen in the Figure , two reply messages were received. It must be only ' You are already loged in '
image.png One from simultaneous check setting (You are already loged in) and the other(wrong password) from etc/raddb/sites-enable/default file. İf we deactivate wrong password-check part (in the below) from ..raddb/sites-enable/default file, the replay message is blank returned to NAS. See "man users" or "man unlang". And read the section on operators.
... Post-Auth-Type REJECT { update reply { Reply-Message += "%{Reply-Message} Wrong Password..."
That *adds* a Reply-Message. If you want to over-write one, use ":=", not "+="
And use %{reply:Reply-Message} in the expansion, to refer to the reply list. See again "man users" or "man unlang" for documentation.
Alan DeKok.
- List info/subscribe/unsubscribe? Seehttp://www.freeradius.org/list/users.html
-- Can Paçacı pacaci@servisnet.com.tr Servisnet A.Ş. Tel: 90 216 9999677 90 530 5450952