Accept user if his account expired
hello I am using freeradius v3 . I want when expired user trying to access his account the freeradius will send accept packet with new ip pool for example 'expired ' I am using this code in authorize section expiration{ userlock = 1 } if(userlock){ # Let him connect with EXPIRED pool in reply ok update reply { Reply-Message := "Your account has expired, %{User-Name} / Reason: DATE LIMIT REACHED / " Framed-Pool := "expired" } } but user still get reject , without get new ip pool I tried to insert that same code in to Post-Auth-Type REJECT section the users rejected but get new ip pool where is my error thank you
Hello Mohamed, If I understood what you want, I do this in authenticate session, with this code: Auth-Type MS-CHAP { mschap { reject = 1 } if(reject) { update control { Pool-Name := "expired" } ok } } Aurelio Em 13/02/2019 13:02, mohamad buvaydanı escreveu:
hello I am using freeradius v3 . I want when expired user trying to access his account the freeradius will send accept packet with new ip pool for example 'expired ' I am using this code in authorize section
expiration{ userlock = 1 } if(userlock){ # Let him connect with EXPIRED pool in reply ok update reply { Reply-Message := "Your account has expired, %{User-Name} / Reason: DATE LIMIT REACHED / " Framed-Pool := "expired" } }
but user still get reject , without get new ip pool
I tried to insert that same code in to Post-Auth-Type REJECT section the users rejected but get new ip pool where is my error thank you - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Feb 13, 2019, at 10:21 AM, Aurélio de Souza Ribeiro Neto <netolistas@mpc.com.br> wrote:
If I understood what you want, I do this in authenticate session, with this code:
That will not work. MS-CHAP does mutual authentication of client & server. You can't just bypass it. Alan DeKok.
On Feb 13, 2019, at 10:02 AM, mohamad buvaydanı <starking123eng@gmail.com> wrote:
I want when expired user trying to access his account the freeradius will send accept packet with new ip pool for example 'expired ' I am using this code in authorize section
Which might work.
but user still get reject , without get new ip pool
Read the debug log as suggested in the FAQ, Wiki, "man" page, web pages, and the email you get when you join this list.
I tried to insert that same code in to Post-Auth-Type REJECT section the users rejected but get new ip pool where is my error
Read the debug output. Alan DeKok.
participants (3)
-
Alan DeKok -
Aurélio de Souza Ribeiro Neto -
mohamad buvaydanı