Passing Idle_timeout to reply message over Authentication reply
Hi, Is there a way to pass the idle timeout reply such as `Reached idle timeout on socket auth+acct from client` to the client as part of as an update to the reply message? Or as a special Access-Reject message? The client system believes that the radius server has disappeared and is using its default login method instead of denying authentication to a user. Thanks in advance for any assistance.
On Nov 29, 2024, at 1:21 PM, Joe Hardeman via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Is there a way to pass the idle timeout reply such as `Reached idle timeout on socket auth+acct from client` to the client as part of as an update to the reply message? Or as a special Access-Reject message? The client system believes that the radius server has disappeared and is using its default login method instead of denying authentication to a user.
Unfortunately, no. But the logs are on disk, and can be shared. Alan DeKok.
Hey Alan, Thank you for the reply. Is there any notification to a auth connecton that can be sent back to the client if either an idle timeout or session timeout happens? Thanks in advance. ________________________________ From: Freeradius-Users <freeradius-users-bounces+joe.hardeman=evosecurity.com@lists.freeradius.org> on behalf of Alan DeKok <aland@deployingradius.com> Sent: Friday, November 29, 2024 2:23 PM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: Passing Idle_timeout to reply message over Authentication reply On Nov 29, 2024, at 1:21 PM, Joe Hardeman via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Is there a way to pass the idle timeout reply such as `Reached idle timeout on socket auth+acct from client` to the client as part of as an update to the reply message? Or as a special Access-Reject message? The client system believes that the radius server has disappeared and is using its default login method instead of denying authentication to a user.
Unfortunately, no. But the logs are on disk, and can be shared. Alan DeKok. - List info/subscribe/unsubscribe? See https://url.avanan.click/v2/r01/___http://www.freeradius.org/list/users.html...
On Dec 2, 2024, at 9:47 AM, Joe Hardeman via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Thank you for the reply. Is there any notification to a auth connecton that can be sent back to the client if either an idle timeout or session timeout happens?
That's the same question as before. My answer is still the same. Alan DeKok.
Sounds good, thank you. Just wanted to make 100% certain. 🙂 ________________________________ From: Alan DeKok <aland@deployingradius.com> Sent: Monday, December 2, 2024 10:23 AM To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Cc: Joe Hardeman <joe.hardeman@evosecurity.com> Subject: Re: Passing Idle_timeout to reply message over Authentication reply On Dec 2, 2024, at 9:47 AM, Joe Hardeman via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Thank you for the reply. Is there any notification to a auth connecton that can be sent back to the client if either an idle timeout or session timeout happens?
That's the same question as before. My answer is still the same. Alan DeKok.
participants (2)
-
Alan DeKok -
Joe Hardeman