Conditional Auth Response?

Alan DeKok aland at deployingradius.com
Mon Feb 10 19:13:30 CET 2014


Darren Ward (darrward) wrote:
> I'm looking for a way to change the response to an auth request based on the attributes in the request

$ man unlang

  You can write the rules below pretty much as-is.

>   -   if I receive a request for user 'bob' with just the password then send the response with normal attributes and one that has 'Cisco-Control-Info += "QV50000000"
>   -   if I receive a request for user 'bob' with password and 'Cisco-Control-Info = QV<value>' then respond with 'Cisco-Control-Info += "QV0"

 if (User-Name == 'bob') {
    if (Cisco-Control-Info = QV123) {
	update reply {
		Cisco-Control-Info += "QV0
	}
    }
    else {
	update reply {
		Cisco-Control-Info += "QV50000000
	}
    }

  Alan Dekok.


More information about the Freeradius-Users mailing list