Re: Access-Reject in a php script
Hi, I have put exit(2) but as Patric said, freeradius thinks that the script failed and does not respond to the access-request. In the client side, there is a server time out...I don't know if that server time out is assumed as an Access-Reject? May be the problem comes from PHP and I could use the UNIX system() function send back the code 2. Please, if you have a better solution, I would be very grateful! Cheers. Khalid Alan DeKok wrote:
Patric wrote:
But when you exit(2) in PHP, freeradius thinks that the script failed and does not respond to the access-request...
It delays the Access-Reject. See the debug output.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Ah is that what happens! That delay was causing the access requests time out, and it appeared from the NAS point of view that it was getting no response...
Thanks Alan
--
Q: I want to be a sysadmin. What should I do?
A: Seek professional help.
---------------------------------------------------------------------- Finally - A spam blocker that actually works. http://www.bluebottle.com/tag/4
manIP wrote:
Hi,
I have put exit(2) but as Patric said, freeradius thinks that the script failed and does not respond to the access-request. In the client side, there is a server time out...I don't know if that server time out is assumed as an Access-Reject?
No it does not assume an access-reject - it registers it as no response, which is undesirable. As Alan said : "It delays the Access-Reject. See the debug output." I tried setting "reject_delay = 0" in the radius.conf but that did not help.
May be the problem comes from PHP and I could use the UNIX system() function send back the code 2.
I believe that this specific scenario only occurs with PHP as I said before, because of the way it sends its status codes (in the exit call). I don't know how else to do it, which is why I changed the code for my use... -- Q: I want to be a sysadmin. What should I do? A: Seek professional help. ---------------------------------------------------------------------- Free pop3 email with a spam filter. http://www.bluebottle.com/tag/5
manIP wrote:
I have put exit(2) but as Patric said, freeradius thinks that the script failed and does not respond to the access-request. In the client side, there is a server time out...I don't know if that server time out is assumed as an Access-Reject?
Set "reject_delay = 0" in radiusd.conf. Alan DeKok.
participants (3)
-
Alan DeKok -
manIP -
Patric