post-auth not being entered in inner-tunnel

Matthew Newton mcn4 at
Wed Mar 13 17:43:29 CET 2013


On Wed, Mar 13, 2013 at 04:09:55PM +0000, Alex Sharaz wrote:
> On 13 Mar 2013, at 13:05, Olivier Beytrison <olivier at> wrote:
> > On 13.03.2013 12:46, Alex Sharaz wrote:
> >> coming in the inner-tunnel deals with them. About a week ago
> >> I downloaded the latest 2.2 code from git.freeradius, built
> >> that and upgraded one of my FR2.2 servers. Since then  I
> >> can't see an invocation of post-auth within the inner-tunnel.
> >> I can see it for the "default" site but not the inner-tunnel.
> >> Everything else seems to work but not that. Same hardware
> >> platform, same config files just different  FR code.
> > 
> > Sounds weird. But again hard to tell without a radius -X output. Just
> > send it here on the list, a complete request output, and maybe the
> > relevant virtual-server configuration snippet

I hacked around on master in September (see commits 5f03313da,
00cadac7 and c625bf173) to fix up auth.c so that inner-tunnel
post-auth worked properly.

It looks like Arran may have backported 5f03313da to 2.2 in commit
a00c4432, which means that rad_postauth is called from event.c,
rather than from auth.c

Unfortunately, this also means that the inner-tunnel code needs
fixing, as it then won't call post-auth at all.

I'd suggest that either a00c4432 needs backing out, or 00cadac7
and need backporting as well.



Matthew Newton, Ph.D. <mcn4 at>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at>

More information about the Freeradius-Users mailing list