rlm_python clears reply if rejecting
valts at datatechlabs.com
Thu Sep 15 11:33:29 CEST 2005
Nicolas Baradakis wrote:
> Valts Mazurs wrote:
>>There is one feature or bug in algorhytm in rlm_python module.
>>If rlm_python receives RLM_MODULE_REJECT as python script return code it
>>cleans all attributes from reply message.
> This was already reported on the bugzilla under bug #279.
>>But, as far as I know, it is allowed to return some attributes to
>>NAS in reject message. I would like to send h323-return-code in
>>authorization reject message to explain to NAS why particular
>>message was rejected.
> Even if the pairfree() is removed from the module, I think the server
> core will delete the attribute later.
Usually it does not :)
If python script exits with other code than RLM_MODULE_REJECT
(RLM_MODULE_INVALID, for example) then no attributes are removed. I use
rlm_perl for a while and have not seen any attribute removed on
RLM_MODULE_REJECT. The only case when reply message attributes are
removed is when (any) module exits with RLM_MODULE_FAIL.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 187 bytes
Desc: OpenPGP digital signature
More information about the Freeradius-Devel