Hi All, I am seeing this in detail logs Module-Failure-Message = "Failed retrieving values required to evaluate condition" This is in response to authorize section entry: if (Calling-Station-Id =~ /^121.32/) { update reply { Reply-Message := "Geographical Access Failure" } reject } Hosts in that range do get the reject, but not the message, many google posts/blogs all seem to point that my entry is correct, it is probably something so obvious that I cant see the trees for the woods. Secondly, I don't want to start a new thread just for this unrelated question so, we have another regional ISP that can auth our customers on their network talking to our radius, do I treat their radius as just another local NAS? They nor us have ever does this before, and when our new poP in yet a third region is built we will proxy to them (through freeradius's proxy conf) longish, maybe I should have started new thread, Sorry :) Loz
What auth method is in use, why do you think the host rather than the N AS will get that message? alan
On 23 Jul 2016, at 07:40, Laura Steynes <laura.steynes72@gmail.com> wrote:
Hi All,
I am seeing this in detail logs Module-Failure-Message = "Failed retrieving values required to evaluate condition"
This is in response to authorize section entry:
if (Calling-Station-Id =~ /^121.32/) { update reply { Reply-Message := "Geographical Access Failure" } reject }
Hosts in that range do get the reject, but not the message, many google posts/blogs all seem to point that my entry is correct, it is probably something so obvious that I cant see the trees for the woods.
Yeah, you don’t have Calling-Station-ID set… -Arran
if (&Calling-Station-Id && &Calling-Station-Id =~ /^121.32/) { Should stop the module failure message. I've had to do a similar change across all my unlang when I started logging it to stop it logging errors unnecessarily. On 24/07/2016 02:06, "Arran Cudbard-Bell" <a.cudbardb@freeradius.org> wrote:
On 23 Jul 2016, at 07:40, Laura Steynes <laura.steynes72@gmail.com> wrote:
Hi All,
I am seeing this in detail logs Module-Failure-Message = "Failed retrieving values required to evaluate condition"
This is in response to authorize section entry:
if (Calling-Station-Id =~ /^121.32/) { update reply { Reply-Message := "Geographical Access Failure" } reject }
Hosts in that range do get the reject, but not the message, many google posts/blogs all seem to point that my entry is correct, it is probably something so obvious that I cant see the trees for the woods.
Yeah, you don’t have Calling-Station-ID set…
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks, just commented it out, but might re-enable it with above condition test On Sun, Jul 24, 2016 at 5:15 AM, Peter Lambrechtsen <peter@crypt.nz> wrote:
if (&Calling-Station-Id && &Calling-Station-Id =~ /^121.32/) {
Should stop the module failure message.
I've had to do a similar change across all my unlang when I started logging it to stop it logging errors unnecessarily.
On 24/07/2016 02:06, "Arran Cudbard-Bell" <a.cudbardb@freeradius.org> wrote:
On 23 Jul 2016, at 07:40, Laura Steynes <laura.steynes72@gmail.com> wrote:
Hi All,
I am seeing this in detail logs Module-Failure-Message = "Failed retrieving values required to evaluate condition"
This is in response to authorize section entry:
if (Calling-Station-Id =~ /^121.32/) { update reply { Reply-Message := "Geographical
Failure" } reject }
Hosts in that range do get the reject, but not the message, many google posts/blogs all seem to point that my entry is correct, it is probably something so obvious that I cant see the trees for the woods.
Yeah, you don’t have Calling-Station-ID set…
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Access - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thank you, makes sense On Sun, Jul 24, 2016 at 12:06 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 23 Jul 2016, at 07:40, Laura Steynes <laura.steynes72@gmail.com> wrote:
Hi All,
I am seeing this in detail logs Module-Failure-Message = "Failed retrieving values required to evaluate condition"
This is in response to authorize section entry:
if (Calling-Station-Id =~ /^121.32/) { update reply { Reply-Message := "Geographical Access Failure" } reject }
Hosts in that range do get the reject, but not the message, many google posts/blogs all seem to point that my entry is correct, it is probably something so obvious that I cant see the trees for the woods.
Yeah, you don’t have Calling-Station-ID set…
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Oh forgot, am I right in assuming that other radius's talking to ours, are just seen as just other NAS ? On Sun, Jul 24, 2016 at 12:06 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 23 Jul 2016, at 07:40, Laura Steynes <laura.steynes72@gmail.com> wrote:
Hi All,
I am seeing this in detail logs Module-Failure-Message = "Failed retrieving values required to evaluate condition"
This is in response to authorize section entry:
if (Calling-Station-Id =~ /^121.32/) { update reply { Reply-Message := "Geographical Access Failure" } reject }
Hosts in that range do get the reject, but not the message, many google posts/blogs all seem to point that my entry is correct, it is probably something so obvious that I cant see the trees for the woods.
Yeah, you don’t have Calling-Station-ID set…
-Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks Alan! On Mon, Jul 25, 2016 at 8:36 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Jul 25, 2016, at 5:25 AM, Laura Steynes <laura.steynes72@gmail.com> wrote:
Oh forgot, am I right in assuming that other radius's talking to ours,
are
just seen as just other NAS ?
Yes.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Alan Buxey -
Alan DeKok -
Arran Cudbard-Bell -
Laura Steynes -
Peter Lambrechtsen