DEFAULT access-reject Reply-Message

Alex M radiussupport at lrcommunications.net
Fri Dec 1 22:19:03 CET 2006


Well I know BASH, PHP, MS VB, Java, Pascal, and Assembler. I'm sure if I
look at brief docks on Perl I'll get it.

 

In your code, $RAD_REQUEST{'Module-Failure-Message'} what that variable
mean? Is there any doc on how to write scripts for radius?

 

As to Windows that doesn't read reply message, I don't care we will never
use windows, only Linux

 

  

 

  _____  

From:
freeradius-users-bounces+radiussupport=lrcommunications.net at lists.freeradius
.org
[mailto:freeradius-users-bounces+radiussupport=lrcommunications.net at lists.fr
eeradius.org] On Behalf Of Garber, Neal
Sent: Friday, December 01, 2006 2:30 PM
To: FreeRadius users mailing list
Subject: RE: DEFAULT access-reject Reply-Message

 

>Ok I got the idea how to initiate the the script on reject event, but what
should go in post_auth_reject.pl? I have absolutely no experience with Perl.
I probably would be >able to figure out something but not sure how. I assume
I would listen to something like if username exist, if username exist and
password incorrect. Still I have no idea >how to do this :-(

 

I don't have enough time or patience to teach you perl via E-mail.  Do you
know other scripting languages?  Have you ever done any script programming?
If not, I would suggest you find someone in your organization that has the
appropriate experience.  Here is an excerpt of perl code to check for the
existence of the Module-Failure-Message request attribute and if it exists
will set the Reply-Message reply attribute..

 

sub post_auth_reject {

     if (defined($RAD_REQUEST{'Module-Failure-Message'})) {

          $RAD_REPLY{'Reply-Message'} =
$RAD_REQUEST{'Module-Failure-Message'};

     }

     return RLM_MODULE_OK;

}

 

Since I don't know exactly what you want to do this probably doesn't exactly
match your requirements.  Also, as someone else pointed out, many clients
ignore the Reply-Message attribute (e.g., windows supplicant) so this could
all be a waste of time.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20061201/f3ea7ee7/attachment.html>


More information about the Freeradius-Users mailing list