reply messages in access-reject

[Hegedus Gabor]

Hegedus Gabor wrote:
> Hi I have a question.
>
> How can I send attributes(for example reply-message, cvpn3000, ...) in 
> access-reject packet.
> I tried to put my exec to the post-auth section Post-Auth-Type 
> REJECT{}, but in this
> section radius dosen't send the attribs in the reject packet.
>
> Radius send only if i run the exec program in the files modul:
>
> DEFAULT NAS-Port-Type == "Virtual", Autz-Type = "LDAP"
>        exec-program-wait ="/usr/local/etc/raddb/scripts/vpn.php"
>
> debug:
>
> Using Post-Auth-Type Reject
> +- entering group REJECT {...}
> [attr_filter.access_reject]     expand: %{User-Name} -> test
> attr_filter: Matched entry DEFAULT at line 11
> ++[attr_filter.access_reject] returns updated
> ++? if (NAS-Port-Type=="Virtual")
> ? Evaluating (NAS-Port-Type=="Virtual") -> TRUE
> ++? if (NAS-Port-Type=="Virtual") -> TRUE
> ++- entering if (NAS-Port-Type=="Virtual") {...}
> [script-bad]    expand: %{User-Name} -> test
> [sctipt-bad]    expand: %{User-Password} -> test
> Exec-Program output: CVPN3000-IPSec-Banner2 = 'sorry',
> Exec-Program-Wait: value-pairs: CVPN3000-IPSec-Banner2 = 'sorry',
> Exec-Program: returned: 0
> +++[script-bad] returns ok
> ++- if (NAS-Port-Type=="Virtual") returns ok
> Delaying reject of request 7 for 1 seconds
> Going to the next request
> Waking up in 0.9 seconds.
> Sending delayed reject for request 7
> Sending Access-Reject of id 79 to 192.168.1.1 port 1147
> Waking up in 4.9 seconds.
> Cleaning up request 7 ID 79 with timestamp +388
> Ready to process requests.
>
>
> what is wrong?
> what is the solution?
>
>
> thank you!
> br
> Gabor
>
>
> -
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
any idea?