Hi I did google alot and still did not manage to find an answer, so I ask here, hope someone can help on this, my freeradius is running as a proxy, and I want to add a exec command when authentication is successful. so I add exec in the post-proxy { , but how to filter by the authentication result ? I want to trigger it only when Access-Accept, if dont have this filter, then how to pass the Access-Accept or Access-Reject into my script ? thanks very much
that means I want to differentiate the "Access-Accept" or "Access-Reject" in the post-proxy section, On Wed, Jun 19, 2013 at 2:27 PM, Bill Yuan <bycn82@gmail.com> wrote:
Hi
I did google alot and still did not manage to find an answer, so I ask here, hope someone can help on this,
my freeradius is running as a proxy, and I want to add a exec command when authentication is successful.
so I add exec in the post-proxy { ,
but how to filter by the authentication result ? I want to trigger it only when Access-Accept,
if dont have this filter, then how to pass the Access-Accept or Access-Reject into my script ?
thanks very much
On 19 Jun 2013, at 08:14, Bill Yuan <bycn82@gmail.com> wrote:
that means I want to differentiate the "Access-Accept" or "Access-Reject" in the post-proxy section,
In 3.0.0. Post-Proxy-Type Access-Reject { } Just like you would in Post-Auth. Honestly can't remember if it's supported in 2.0.0. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
but the latest release version is 2.2.0, Can someone help to explain how to filter it on 2.2.0
On Wed, Jun 19, 2013 at 04:10:49PM +0800, Bill Yuan wrote:
but the latest release version is 2.2.0,
Can someone help to explain how to filter it on 2.2.0
I've got on debian freeradius 2.1.12 this in post-auth config, so I guess it should be working just the same. Post-Auth-Type REJECT { # log failed authentications in SQL, too. # sql attr_filter.access_reject } mk
On 19 Jun 2013, at 13:50, Martin Kraus <lists_mk@wujiman.net> wrote:
On Wed, Jun 19, 2013 at 04:10:49PM +0800, Bill Yuan wrote:
but the latest release version is 2.2.0,
Can someone help to explain how to filter it on 2.2.0
I've got on debian freeradius 2.1.12 this in post-auth config, so I guess it should be working just the same.
Post-Auth-Type REJECT { # log failed authentications in SQL, too. # sql attr_filter.access_reject }
No, that's not the same. That will be run for non proxied requests to. Just try the Post-Proxy-Type section, it might work in 2.0, if it doesn't I know there's a way to get the proxy response code, I just can't remember what it is. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
participants (3)
-
Arran Cudbard-Bell -
Bill Yuan -
Martin Kraus