See below an old post message that I found on a forum Ok it's not up to date but the problem is the same : On 05/24/2011 05:03 PM, Alan Buxey wrote:
so, in inner-tunnel post-auth, set "outer.reply" to be whatever you want.. you can then, in the outer layer, query/check or use that reply.
Unfortunately, outer.reply is an Access-Challenge. Post by Phil mayers. nicolas.clo@ricoh-industrie.fr wrote:
Thanks Alan,
I tested with this but it won't works in Post-Auth Reject section in inner-tunnel I can't update reply-Message called in default virtual server, it is empty. Actually, the only way that I have is to enable logging in the two virtual servers, but I have two lines in logs for 1 reject.
Set "use_tunneled_reply = yes" The in the inner-tunnel post-auth section, do: update reply { Reply-Message := "... text ..." } That should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html