19 Jun
2019
19 Jun
'19
11:26 a.m.
On Jun 19, 2019, at 11:16 AM, Gianni Costanzi <gianni.costanzi@gmail.com> wrote:
I was using the following syntax on Freeradius 2.x to determine if a user could connect to a particular IP address, even if the authentication succeeds, based on some parameters passed to a script:
XXX747 Auth-Type = System, Realm == imp Service-Type := Login-User, cisco-avpair = "shell:priv-lvl=2", Exec-Program-Wait = "/opt/script/radius/bin/check_operator_access.sh %{NAS-IP-Address} %{User-Name} %{Realm}"
Exec-Program-Wait goes in the first line. It's a check attribute, and isn't a reply attribute. Alan DeKok.