2.2.1: if-block leads to reject

Jakob Hirsch jh at plonk.de
Mon Sep 30 14:46:43 CEST 2013


Alan DeKok, 2013-09-29 15:19:
>   Your test case should now work.

As I wrote, it does. But now reject is not working if the status is
already set to noop, e.g. by an update section:

authenticate {
  Auth-Type Test {
    if (1) {
      update reply {
        Reply-Message := "some message"
      }
      reject
    }
    ok
  }
}

->

+group Test {
++? if (1)
? Evaluating (1) -> TRUE
++? if (1) -> TRUE
++if (1) {
+++update reply {
+++} # update reply = noop
+++[reject] = reject
++} # if (1) = reject
++[ok] = ok
+} # group Test = ok
Login OK: [test-user] (from client TESTlocalhost port 12345)


If I replace the update section with a simple noop, the result is the same:

+group Test {
++? if (1)
? Evaluating (1) -> TRUE
++? if (1) -> TRUE
++if (1) {
+++[noop] = noop
+++[reject] = reject
++} # if (1) = reject
++[ok] = ok
+} # group Test = ok
Login OK: [test-user] (from client TESTlocalhost port 12345)




More information about the Freeradius-Devel mailing list