Post-Auth-Type REJECT "broken" in 3.1.x

Alan DeKok aland at deployingradius.com
Thu Jun 23 15:33:52 CEST 2016


> On Jun 22, 2016, at 7:32 PM, Matthew Newton <mcn4 at leicester.ac.uk> wrote:
> Unlike previous behaviour,
> 
>  post auth {
>    Post-Auth-Type REJECT {
>      ...
>    }
>  }
> 
> does not get found and called in 3.1.x - you get
> 
> (1)  ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject
> (1)  Failed to authenticate the user
> (1)  Using Post-Auth-Type Reject
> (1)  Post-Auth-Type Reject sub-section not found.  Using default return values.

  Arg...

> If it's changed to
> 
>    Post-Auth-Type Reject {
> 
> then all is fine.

  That's annoying.

> This broke in
> 
>  commit 0b2e4da0c574dedd9309c9dbbdf4f8cb9d869d27
>  Author: Alan T. DeKok <aland at freeradius.org>
>  Date:   Tue May 24 17:00:29 2016 -0400
> 
>      Use CONF_SECTIONs directly in unlang_interpret
> 
> The easiest fix is to change the default config to be "Reject"
> rather than "REJECT", but that will seemingly unnecessarily break
> configs when people upgrade from 3.0 so I'm not sure that's the
> best solution.

  TBH, we could just revert that commit.  I was making changes in v3.1.x branch before they became too invasive.  I rolled back many of the changes, and went on to re-do them in a newly created v4.0.x branch.

  If reverting that commit works, just go ahead and do it.  At this point, I won't be touching v3.0.x or v3.1.x for anything other than bug fixes.

  Alan DeKok.




More information about the Freeradius-Devel mailing list