Thanks Alan, I had tried that already, but must be missing something. When I use: if (!reply:Session-Timeout) { reject } I get the following in the debug: /etc/raddb/sites-enabled/default[209]: Failed to load module "reject". /etc/raddb/sites-enabled/default[209]: Failed to parse "reject" entry. /etc/raddb/sites-enabled/default[201]: Errors parsing post-auth section. I have looked through all the modules (as I had removed some of them), but couldn't find the reference to the reject module. thanks, On Fri, Mar 11, 2011 at 6:50 AM, Alan DeKok <aland@deployingradius.com> wrote:

paul smith wrote:

...

I've been trying to set reject in the post-auth section if a certain attribute hasn't been set, but it doesn't seem to work (obviously I've messed it up)

$ man unlang

 You can just use the word "reject"

 Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

paul smith wrote:

I had tried that already, but must be missing something. When I use:

if (!reply:Session-Timeout) { reject }

I get the following in the debug:

/etc/raddb/sites-enabled/default[209]: Failed to load module "reject".

You edited the default configuration, and broke it. Don't do that.

I have looked through all the modules (as I had removed some of them), but couldn't find the reference to the reject module.

raddb/modules/always Alan DeKok.