nicolas.clo at nicolas.clo at
Tue Feb 18 09:57:25 CET 2014

See below an old post message that I found on a forum

Ok it's not up to date but the problem is the same :

On 05/24/2011 05:03 PM, Alan Buxey wrote:
> so, in inner-tunnel post-auth, set "outer.reply" to be whatever you want..
> you can then, in the outer layer, query/check or use that reply.

Unfortunately, outer.reply is an Access-Challenge.

Post by Phil mayers.

nicolas.clo at wrote:
> Thanks Alan,
> I tested with this but it won't works in Post-Auth Reject section in
> inner-tunnel
> I can't update reply-Message called in default virtual server, it is empty.
> Actually, the only way that I have is to enable logging in the two
> virtual servers, but I have two lines in logs for 1 reject.

  Set "use_tunneled_reply = yes"

  The in the inner-tunnel post-auth section, do:

		 update reply {
		 		 Reply-Message := "... text ..."

  That should work.

  Alan DeKok.
List info/subscribe/unsubscribe? See
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Freeradius-Users mailing list