rlm_python clears reply if rejecting

[Valts Mazurs]

Nicolas Baradakis wrote:
> Valts Mazurs wrote:
>
>
>>There is one feature or bug in algorhytm in rlm_python module.
>>If rlm_python receives RLM_MODULE_REJECT as python script return code it
>>cleans all attributes from reply message.
>
>
> This was already reported on the bugzilla under bug #279.
> http://bugs.freeradius.org/show_bug.cgi?id=279
>
>
>>But, as far as I know, it is allowed to return some attributes to
>>NAS in reject message. I would like to send h323-return-code in
>>authorization reject message to explain to NAS why particular
>>message was rejected.
>
>
> Even if the pairfree() is removed from the module, I think the server
> core will delete the attribute later.
>

Usually it does not :)
If python script exits with other code than RLM_MODULE_REJECT
(RLM_MODULE_INVALID, for example) then no attributes are removed. I use
rlm_perl for a while and have not seen any attribute removed on
RLM_MODULE_REJECT. The only case when reply message attributes are
removed is when (any) module exits with RLM_MODULE_FAIL.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20050915/c2c00e0b/attachment.pgp>