Hi, i m trying to enabled policies in my AAA, but i m getting the following error: Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/policy.d/filter[66]: Failed to find "reject" as a module or policy. Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/policy.d/filter[66]: Please verify that the configuration exists in ~/etc/raddb/mods-enabled/reject. Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/policy.d/filter[66]: Failed to parse "reject" entry. Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/policy.d/filter[65]: Failed to parse "if" subsection. Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/sites-enabled/default[220]: Errors parsing authorize section. i have enabled policies in radius.conf: policy { $INCLUDE policy.d/ } i have defined the policy in the ~/etc/raddb/policy.d/filter filter_username { if (User-Name != "%{tolower:%{User-Name}}") { reject } } and i configured sites-available/default to call the policy in the authorize section by simply calling the name of the filter: filter_username but i get the above error, i would appreciate where to look for more info about this. thanks!!
On May 1, 2015, at 10:06 AM, Juan Pablo L. <jpablolorenzetti@hotmail.com> wrote:
Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/policy.d/filter[66]: Failed to find "reject" as a module or policy.
You edited the configuration and broke it. Don't do that. The "reject" module is defined in raddb/mods-available/always. Please be sure that module is defined and enabled. Alan DeKok.
Hi, thanks for the reply. i did not touch mods-available/always module, this is the contents for the reject module error: always reject { rcode = reject } the only file i modifed was the filter under policy.d. thanks!
Subject: Re: adding policies From: aland@deployingradius.com Date: Fri, 1 May 2015 10:34:10 -0400 To: freeradius-users@lists.freeradius.org
On May 1, 2015, at 10:06 AM, Juan Pablo L. <jpablolorenzetti@hotmail.com> wrote:
Thu Apr 30 13:02:22 2015 : Error: ~/etc/raddb/policy.d/filter[66]: Failed to find "reject" as a module or policy.
You edited the configuration and broke it. Don't do that.
The "reject" module is defined in raddb/mods-available/always. Please be sure that module is defined and enabled.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On May 1, 2015, at 10:49 AM, Juan Pablo L. <jpablolorenzetti@hotmail.com> wrote:
Hi, thanks for the reply. i did not touch mods-available/always module, this is the contents for the reject module error:
always reject { rcode = reject }
Is the "always" module listed in raddb/mods-enabled/ ? Which version are you running? Alan DeKok.
the always was not linked in the mod-enabled (it was but the link was broken after all) ... so i re-linked ... sending a HUP to the server will make it start applying the filters ? thanks!!
Subject: Re: adding policies From: aland@deployingradius.com Date: Fri, 1 May 2015 11:34:01 -0400 To: freeradius-users@lists.freeradius.org
On May 1, 2015, at 10:49 AM, Juan Pablo L. <jpablolorenzetti@hotmail.com> wrote:
Hi, thanks for the reply. i did not touch mods-available/always module, this is the contents for the reject module error:
always reject { rcode = reject }
Is the "always" module listed in raddb/mods-enabled/ ?
Which version are you running?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
i have made the link in mod-enabled and send a HUP from the radmin but i m still getting the exact same error, should i restart the server all together ? thanks!
From: jpablolorenzetti@hotmail.com To: freeradius-users@lists.freeradius.org Subject: RE: adding policies Date: Fri, 1 May 2015 15:48:29 +0000
the always was not linked in the mod-enabled (it was but the link was broken after all) ... so i re-linked ... sending a HUP to the server will make it start applying the filters ? thanks!!
Subject: Re: adding policies From: aland@deployingradius.com Date: Fri, 1 May 2015 11:34:01 -0400 To: freeradius-users@lists.freeradius.org
On May 1, 2015, at 10:49 AM, Juan Pablo L. <jpablolorenzetti@hotmail.com> wrote:
Hi, thanks for the reply. i did not touch mods-available/always module, this is the contents for the reject module error:
always reject { rcode = reject }
Is the "always" module listed in raddb/mods-enabled/ ?
Which version are you running?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Juan Pablo L.