On Aug 25, 2022, at 6:10 AM, Can Paçacı <pacaci@servisnet.com.tr> wrote:
I have configured site default file as in the followings but it gives the same error on wrong User-Password and wrong NAS-Identifier. How can both cases be separated
You can't just put random things into the configuration files, and expect that it magically does what you want. The documentation describes how the configuration files works. Please read the documentation, including the Wiki page I pointed you to, and "man unlang". The configuration below works as documented.
###### update reply { Reply-Message = "test**** Wrong NAS: %{NAS-Identifier} " }
i.e. ALWAYS update the reply with a Reply-Message saying wrong NAS.
##### update reply { #Reply-Message = " Wrong Password..." Reply-Message = "%{Reply-Message} Wrong Password" }
This does nothing, because the reply already contains a Reply-Message attribute. See "man unlang", and the "=" operator.
-sql
This runs the SQL module.
[root@test-servisnet sites-enabled]# echo "User-Name='deneme1@kablonet',User-Password='1234',NAS-Identifier=06UlusRHUA0" | radclient -x 127.0.0.1 auth secret11
Read http://wiki.freeradius.org/list-help You cannot debug the SERVER by looking at the CLIENT output. I suggested that you read the Wiki page which documents how the SQL module works. It looks like you didn't do that. You will find it difficult to fix problems if you don't read the documentation, and therefore have no idea how the server works. Your original question was " If the NAS-identifier attribute in the radcheck table failed, we want it to send a separate reply-message" The SQL module doesn't do something *else* if the radcheck conditions fail. The Wiki page describes how the SQL module works. You can't make it behave differently through wishful thinking. If you want to send a reply based on some condition, then write the condition down, like this: if (NAS-Identifier != "foo") { update reply { Reply-Message := "foo" } } It looks like you're just trying to make the server "do what you want" by trying a bunch of things. This just won't work. You have to read the documentation and understand it. Alan DeKok.