Le vendredi 25 janvier 2008 12:55, Boian Jordanov a écrit :
Try with RLM_MODULE_FAIL in post_proxy
Best Regards, Boian Jordanov SNE Orbitel - Next Generation Telecom tel. +359 2 4004 723 tel. +359 2 4004 002
On Jan 25, 2008, at 12:35 PM, Jean-Michel Caricand wrote:
doesn't make sense to use RLM_MODULE_REJECT in post_proxy. May be you need pre_proxy ?
From radius.conf file
# # When the server decides to proxy a request to a home server, # the proxied request is first passed through the pre-proxy # stage. This stage can re-write the request, or decide to # cancel the proxy. # # Only a few modules currently have this method. #
Best Regards, Boian Jordanov SNE Orbitel - Next Generation Telecom tel. +359 2 4004 723 tel. +359 2 4004 002
On Jan 25, 2008, at 11:52 AM, Jean-Michel Caricand wrote:
I have a question on rlm_perl and RLM_MODULE_REJECT. If in a function (post_proxy) I return RLM_MODULE_REJECT I can see this in log :
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
But I must check some attributes defined by my home server. I can't check them in pre_proxy because they are not set. No ?
I want to reject the access if by example the Framed-IP-Address is not in a valid range.
Thank.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/ users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Well. I made a lot of tests without success. I'm not yet able to REJECT a request in a post_proxy function, but that works fine in a authorize function. Does someone have ideas ? -- Jean-Michel Caricand Tél: 03.81.66.20.63 E-mail: jean-michel.caricand@lifc.univ-fcomte.fr Equipe systèmes Laboratoire d'Informatique de l'Université de Franche-Comté 16, route de Gray - 25030 BESANÇON CEDEX