Conditional Auth Response?

Arran Cudbard-Bell a.cudbardb at
Sat Feb 8 10:22:18 CET 2014

On 8 Feb 2014, at 01:03, Darren Ward (darrward) <darrward at> wrote:

> Hi All
> I'm looking for a way to change the response to an auth request based on the attributes in the request
>  -   if I receive a request for user 'bob' with just the password then send the response with normal attributes and one that has 'Cisco-Control-Info += "QV50000000"
>  -   if I receive a request for user 'bob' with password and 'Cisco-Control-Info = QV<value>' then respond with 'Cisco-Control-Info += "QV0"
> Basically that value in the first response sets a volume quota limit of 50Meg but when the device sends back a 're-auth' request when it thinks the volume has been used up I ned to respond with the QV0 so FreeRADIUS confirms that is all used up
> Apologies I just can't make sense of the way to write conditional rules for a user

See documentation on rlm_counter.

See man unlang.

Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 881 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list