problem with attributes in access-reject
Rob Mason
rob.mason at ammeon.com
Wed Dec 5 11:23:02 CET 2007
Freeradius version:1.1.8 with jradius
Hi I am trying to send some attributes in an access-reject message , viz:
User-Name: value 'echoed' from Access-Request
Service-Type: 1 (Login-user)
Reply-Message: Wrong user name or password
However freeradius appears to be blocking all but Reply-Message from
getting to the client.
I can see these being set in the output of my jradius going towards the
free radius server, however I am only seeing Reply-Message in the reply
coming to the client (User-Name and Service-Type come through OK on my
Access-Accept case). Attached are attrs config file and radiusd
Output from jradius:
================
--- packet 2 of 2
Class: class net.jradius.packet.AccessReject
Attributes:
User-Name := bill
Service-Type := Login-User
Reply-Message := Wrong user name or password
Output from Freeradius
=================
modcall[authorize]: module "jradius" returns reject for request 11
modcall: leaving group authorize (returns reject) for request 11
Invalid user: [bill at AMMEON/billpass] (from client local port 1819 cli
0851234567)
Delaying request 11 for 1 seconds
Finished request 11
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 32 to 127.0.0.1 port 32796
Reply-Message := "Wrong user name or password"
Output to client (pyrad):
access denied
Attributes returned by server:
Reply-Message: ['Wrong user name or password']
Rgds
Rob Mason
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom
they are addressed. If you have received this email in error please
notify the system manager. This message contains confidential
information and is intended only for the individual named. If you
are not the named addressee you should not disseminate, distribute
or copy this e-mail.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: attrs
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071205/f5cc1f69/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: radiusd.conf
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20071205/f5cc1f69/attachment-0001.ksh>
More information about the Freeradius-Users
mailing list