Rejections

[Alan DeKok]

Jack D. Martin Jr. wrote:
> I wasn't questioning your skills - trust me.  I have read many of your
> responses on the list, you helped me deploy my server without ever talking
> to me.  I am just looking for a solution.  Basically what I have is a
> billing solution that automatically suspends customers by scrambling their
> passwords.  When that happens - I don't want the customers to be rejected,
> but to be assigned to a different group.  Is that a better way of asking? 
> What I am looking for is to not reject people with bad passwords, but to
> assign them a particular IP pool.

  What kind of authentication methods are you using?  If it's PAP, then
the answer is easy:


authenticate {
	...

	Auth-Type PAP {
		if (User-Password == "%{control:Cleartext-Password}") {
			update control {
				Pool-Name := "pool-for-good-users"
			}
		}
		else {
			update control {
				Pool-Name := "pool-for-bad-users"
			}
		}

		ok # mark them as authenticated
	}

	...
}

  And configure the two pools, including putting them in the post-auth
section.

  Alan DeKok.