Ok I got the idea how to initiate the the script on reject event, but what should go in post_auth_reject.pl? I have absolutely no experience with Perl. I probably would be >able to figure out something but not sure how. I assume I would listen to something like if username exist, if username exist and password incorrect. Still I have no idea >how to do this :-(
I don't have enough time or patience to teach you perl via E-mail. Do you know other scripting languages? Have you ever done any script programming? If not, I would suggest you find someone in your organization that has the appropriate experience. Here is an excerpt of perl code to check for the existence of the Module-Failure-Message request attribute and if it exists will set the Reply-Message reply attribute.. sub post_auth_reject { if (defined($RAD_REQUEST{'Module-Failure-Message'})) { $RAD_REPLY{'Reply-Message'} = $RAD_REQUEST{'Module-Failure-Message'}; } return RLM_MODULE_OK; } Since I don't know exactly what you want to do this probably doesn't exactly match your requirements. Also, as someone else pointed out, many clients ignore the Reply-Message attribute (e.g., windows supplicant) so this could all be a waste of time.
Well I know BASH, PHP, MS VB, Java, Pascal, and Assembler. I'm sure if I look at brief docks on Perl I'll get it. In your code, $RAD_REQUEST{'Module-Failure-Message'} what that variable mean? Is there any doc on how to write scripts for radius? As to Windows that doesn't read reply message, I don't care we will never use windows, only Linux _____ From: freeradius-users-bounces+radiussupport=lrcommunications.net@lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Garber, Neal Sent: Friday, December 01, 2006 2:30 PM To: FreeRadius users mailing list Subject: RE: DEFAULT access-reject Reply-Message
Ok I got the idea how to initiate the the script on reject event, but what should go in post_auth_reject.pl? I have absolutely no experience with Perl. I probably would be >able to figure out something but not sure how. I assume I would listen to something like if username exist, if username exist and password incorrect. Still I have no idea >how to do this :-(
I don't have enough time or patience to teach you perl via E-mail. Do you know other scripting languages? Have you ever done any script programming? If not, I would suggest you find someone in your organization that has the appropriate experience. Here is an excerpt of perl code to check for the existence of the Module-Failure-Message request attribute and if it exists will set the Reply-Message reply attribute.. sub post_auth_reject { if (defined($RAD_REQUEST{'Module-Failure-Message'})) { $RAD_REPLY{'Reply-Message'} = $RAD_REQUEST{'Module-Failure-Message'}; } return RLM_MODULE_OK; } Since I don't know exactly what you want to do this probably doesn't exactly match your requirements. Also, as someone else pointed out, many clients ignore the Reply-Message attribute (e.g., windows supplicant) so this could all be a waste of time.
I am getting the above error using radrelay on v1.12 server. The achive mailing list talks about changeing some close command in the code but it is not very detailed. Has anyone else run into this problem and fixed it. I noticed that when the above error occurs that if there is a auth request at theat very sec it will be rejected as in vaild password and logged that way to radius.log even though the password is correct. So that is more the reason I wish to get this fixed asap. All help would be greatly appreciated. Mark Jones
participants (3)
-
Alex M -
Garber, Neal -
Mark Jones