rlm_perl and RLM_MODULE_REJECT

[Jean-Michel Caricand]

Le vendredi 25 janvier 2008 12:55, Boian Jordanov a écrit :
> Try with RLM_MODULE_FAIL in post_proxy
>
>
> Best Regards,
> Boian Jordanov
> SNE
> Orbitel - Next Generation Telecom
> tel. +359 2 4004 723
> tel. +359 2 4004 002
>
> On Jan 25, 2008, at 12:35 PM, Jean-Michel Caricand wrote:
> >> doesn't make sense to use RLM_MODULE_REJECT in post_proxy. May be you
> >> need pre_proxy ?
> >>
> >>  From radius.conf file
> >>
> >> #
> >> #  When the server decides to proxy a request to a home server,
> >> #  the proxied request is first passed through the pre-proxy
> >> #  stage.  This stage can re-write the request, or decide to
> >> #  cancel the proxy.
> >> #
> >> #  Only a few modules currently have this method.
> >> #
> >>
> >>
> >> Best Regards,
> >> Boian Jordanov
> >> SNE
> >> Orbitel - Next Generation Telecom
> >> tel. +359 2 4004 723
> >> tel. +359 2 4004 002
> >>
> >> On Jan 25, 2008, at 11:52 AM, Jean-Michel Caricand wrote:
> >>> I have a question on rlm_perl and RLM_MODULE_REJECT. If in a
> >>> function
> >>> (post_proxy) I return RLM_MODULE_REJECT I can see this in log :
> >>
> >> -
> >> List info/subscribe/unsubscribe? See
> >> http://www.freeradius.org/list/users.html
> >
> > But I must check some attributes defined by my home server. I can't
> > check
> > them in pre_proxy because they are not set. No ?
> >
> > I want to reject the access if by example the Framed-IP-Address is
> > not in
> > a valid range.
> >
> > Thank.
> >
> > -
> > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/
> > users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html

Well. I made a lot of tests without success. I'm not yet able to REJECT a 
request in a post_proxy function, but that works fine in a authorize 
function. 

Does someone have ideas ?

 

-- 
Jean-Michel Caricand
Tél: 03.81.66.20.63
E-mail: jean-michel.caricand at lifc.univ-fcomte.fr

Equipe systèmes
Laboratoire d'Informatique de l'Université de Franche-Comté
16, route de Gray - 25030 BESANÇON CEDEX