Hello, I have rlm_perl module which performs some checks of Access-Request and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, but this Access-Reject doesn't appear in detail log. is there any way to log Access-Reject's generated in authorize section ? Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke@donpac.ru | PGP key: wwwkeys.pgp.net
Andrey Panin wrote:
I have rlm_perl module which performs some checks of Access-Request and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, but this Access-Reject doesn't appear in detail log.
is there any way to log Access-Reject's generated in authorize section ?
See http://www.freeradius.org/radiusd/doc/Post-Auth-Type -- Nicolas Baradakis
On 181, 06 30, 2005 at 11:47:31AM +0200, Nicolas Baradakis wrote:
Andrey Panin wrote:
I have rlm_perl module which performs some checks of Access-Request and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, but this Access-Reject doesn't appear in detail log.
is there any way to log Access-Reject's generated in authorize section ?
Been here, done that. It doesn't help, looks like Access-Reject's generated during authorize phase are never passed to post_auth phase. -- Andrey Panin | Linux and UNIX system administrator pazke@donpac.ru | PGP key: wwwkeys.pgp.net
Andrey Panin wrote:
I have rlm_perl module which performs some checks of Access-Request and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, but this Access-Reject doesn't appear in detail log.
is there any way to log Access-Reject's generated in authorize section ?
Been here, done that. It doesn't help, looks like Access-Reject's generated during authorize phase are never passed to post_auth phase.
Are you using the latest release of FreeRADIUS? It was a bug in version 1.0.2 and earlier. -- Nicolas Baradakis
On 181, 06 30, 2005 at 01:29:48PM +0200, Nicolas Baradakis wrote:
Andrey Panin wrote:
I have rlm_perl module which performs some checks of Access-Request and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, but this Access-Reject doesn't appear in detail log.
is there any way to log Access-Reject's generated in authorize section ?
Been here, done that. It doesn't help, looks like Access-Reject's generated during authorize phase are never passed to post_auth phase.
Are you using the latest release of FreeRADIUS? It was a bug in version 1.0.2 and earlier.
CVS snapshot. -- Andrey Panin | Linux and UNIX system administrator pazke@donpac.ru | PGP key: wwwkeys.pgp.net
Andrey Panin wrote:
I have rlm_perl module which performs some checks of Access-Request and if rlm_perl returns RLM_MODULE_REJECT freeradius sends Access-Reject, but this Access-Reject doesn't appear in detail log.
is there any way to log Access-Reject's generated in authorize section ?
Been here, done that. It doesn't help, looks like Access-Reject's generated during authorize phase are never passed to post_auth phase.
Indeed. I didn't read carefully enough, but you said the request was rejected in 'authorize' phase, therefore neither 'authenticate' nor 'post-auth' phases will be run. I think you could catch the reject in 'authorize' using a 'group' stanza. authorize { group { my_perl { ok = return reject = 1 } my_detail } } -- Nicolas Baradakis
participants (2)
-
Andrey Panin -
Nicolas Baradakis