Transform reject to accept response with specific attributes

Kostas Zorbadelos kzorba at otenet.gr
Fri Sep 7 14:20:33 CEST 2012


Arran Cudbard-Bell <a.cudbardb at freeradius.org> writes:

> On 6 Sep 2012, at 15:10, Kostas Zorbadelos <kzorba at otenet.gr> wrote:
>
>> 
>> Greetings to all,
>> 
>> I would like to achieve the following functionality: in case a user's
>> AUTHENTICATION fails, the user should not be rejected but be given an
>> accept response with specific attributes.
>> The reason behind this is to provide a captive portal functionality for
>> users having wrong credentials in their CPEs. 
>> Could you provide a few hints for how the config would look like (I am
>> thinking of something in terms of unlang and utilizing virtual servers
>> but I am not sure how it would look like. 
>
> authenticate {
> 	Auth-Type pap {
> 		pap {
> 			reject = 1
> 		}
> 		if (reject) {
> 			ok
> 			# Add extra attributes here...
> 		}
> 	}
> }
>

Thank you very much, this seems to work.

> -Arran

Kostas



More information about the Freeradius-Users mailing list