Identify request in post-auth section
Hi, On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation : authorize { update request { &Module-Failure-Message += 'Rejected: Realm unknown in .fr' } reject } We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server. How can we do this ? Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work. Thank's. -- Direction des Services Applicatifs RENATER - Rennes https://www.renater.fr/
On Jun 4, 2021, at 9:27 AM, Arnaud LAURIOU <arnaud.lauriou@renater.fr> wrote:
On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation : authorize { update request { &Module-Failure-Message += 'Rejected: Realm unknown in .fr' } reject }
We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server. How can we do this ?
Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work.
The "unlang" code above is updating the request, not the proxy reply. If you need it in the proxy reply, you'll need to add it to the reply list. Alan DeKok.
On 6/4/21 4:06 PM, Alan DeKok wrote:
On Jun 4, 2021, at 9:27 AM, Arnaud LAURIOU <arnaud.lauriou@renater.fr> wrote:
On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation : authorize { update request { &Module-Failure-Message += 'Rejected: Realm unknown in .fr' } reject }
We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server. How can we do this ?
Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work. The "unlang" code above is updating the request, not the proxy reply. If you need it in the proxy reply, you'll need to add it to the reply list.
Indeed, works better with the reply list ... Thank's
participants (2)
-
Alan DeKok -
Arnaud LAURIOU