See below an old post message that I found on a forum

Ok it's not up to date but the problem is the same :



On 05/24/2011 05:03 PM, Alan Buxey wrote:
>
> so, in inner-tunnel post-auth, set "outer.reply" to be whatever you want..
> you can then, in the outer layer, query/check or use that reply.

Unfortunately, outer.reply is an Access-Challenge. 

Post by Phil mayers.



nicolas.clo@ricoh-industrie.fr wrote:
>
> Thanks Alan,
>
> I tested with this but it won't works in Post-Auth Reject section in
> inner-tunnel
> I can't update reply-Message called in default virtual server, it is empty.
> Actually, the only way that I have is to enable logging in the two
> virtual servers, but I have two lines in logs for 1 reject.

 Set "use_tunneled_reply = yes"

 The in the inner-tunnel post-auth section, do:

update reply {
Reply-Message := "... text ..."
}

 That should work.

 Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html