Exec Module FreeRADIUS Version 2.1.8

Alan DeKok aland at deployingradius.com
Mon Jan 31 14:25:31 CET 2011

hollman.diaz wrote:
> I want to change Auth-Type from Accept to Reject based on the account
> expiration date from a user. All users have the same username and password
> but they are identified by the calling-station-id. So the external
> application verifies in a database the expiration date of the
> calling-station-id and changes the Auth-Type attribute.
> Can I change this attribute?

  Read raddb/modules/exec.  This is documented.

> Is it possible?


> In this way, Freeradius accepts the authentication requests, runs the
> external application but it does not change the Auth-Type attribute:

  Have your script return "Accept" or "Reject", and follow the
documentation in "man unlang".  It says how to assign values by
executing programs.

  Put the following into the "authorize" section:

	update control {
		Auth-Type := `/path/to/program args...`

  And it *will* work.

  Alan DeKok.

More information about the Freeradius-Users mailing list