Hello all, I' running FreeRADIUS Version 2.1.5, and I'm trying to execute an external script when users authenticate. I have included the exec module. The script is executed in this form (in the users file): DEFAULT Simultaneous-Use := 1 Idle-Timeout = 600, Session-Timeout = 5400, Framed-IP-Address = 255.255.255.254, Framed-Compression = Van-Jacobson-TCP-IP, Exec-Program-Wait = "/etc/freeradius/somescript", Fall-Through = Yes but I want that the output of it to append to the AV pair reply that goes back to the client. So I have the problem that when the script is executed, its output doesn't append to the AV pair reply. (For example: Reply-Message=Email Only Account) I can post here my configuration files, if you tell me which. Thanks in advance ! -- View this message in context: http://www.nabble.com/Exec-Program-Wait-problem-tp23161038p23161038.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
enid wrote:
DEFAULT Simultaneous-Use := 1 Idle-Timeout = 600, Session-Timeout = 5400, Framed-IP-Address = 255.255.255.254, Framed-Compression = Van-Jacobson-TCP-IP, Exec-Program-Wait = "/etc/freeradius/somescript", Fall-Through = Yes
but I want that the output of it to append to the AV pair reply that goes back to the client. So I have the problem that when the script is executed, its output doesn't append to the AV pair reply. (For example: Reply-Message=Email Only Account) I can post here my configuration files, if you tell me which.
Use the "exec" module instead. It gives you a much more fine-grained control over the behavior of the program. Alan DeKok.
Thank you for your reply, to make it more precise, I'm trying to execute a script that checks the users accounting (hours and minutes generated from radiusreport tool). And when the users passes his limit he is then blocked access. The "exec" module allows only this syntax: Attribute-Name = `%{exec:/etc/freeradius/somescript}`, (this is passed as an AV pair to the client/nas, the freeradius is running as freerad user not root). how can I make this happen with this syntax? Thanks in advance. Alan DeKok-2 wrote:
enid wrote:
DEFAULT Simultaneous-Use := 1 Idle-Timeout = 600, Session-Timeout = 5400, Framed-IP-Address = 255.255.255.254, Framed-Compression = Van-Jacobson-TCP-IP, Exec-Program-Wait = "/etc/freeradius/somescript", Fall-Through = Yes
but I want that the output of it to append to the AV pair reply that goes back to the client. So I have the problem that when the script is executed, its output doesn't append to the AV pair reply. (For example: Reply-Message=Email Only Account) I can post here my configuration files, if you tell me which.
Use the "exec" module instead. It gives you a much more fine-grained control over the behavior of the program.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- View this message in context: http://www.nabble.com/Exec-Program-Wait-problem-tp23161038p23171482.html Sent from the FreeRadius - User mailing list archive at Nabble.com.
enid wrote:
to make it more precise, I'm trying to execute a script that checks the users accounting (hours and minutes generated from radiusreport tool). And when the users passes his limit he is then blocked access.
The exec module can do that.
The "exec" module allows only this syntax: Attribute-Name = `%{exec:/etc/freeradius/somescript}`,
No. Go back and read raddb/modules/echo Alan DeKok.
participants (2)
-
Alan DeKok -
enid