Overriding proxy response

[Alan DeKok]

Eric wrote:
> What I need to do is look for MS-CHAP-Error 648 (which means the
> password needs to be changed) and then add a different IP address and
> filter + DNS server information in order for the end-user to be
> redirected to a webserver.

  Right now, the server can't change a proxied Access-Reject to an
Access-Accept.  Even if it could, RADIUS doesn't support sending DNS
information.

  What you want is a captive portal.

  Alan DeKok.