unlang to customize error message
    Stefano Zanmarchi 
    zanmarchi at gmail.com
       
    Thu Apr 28 12:03:35 CEST 2016
    
    
  
According to MS-CHAP-V2 standard in case of authentication failure the
Failure Packet should contain the following text in the Message
field: "E=691 R=... ..." .
Freeradius does send "E=691" if send_error is set to yes
in mods-enabled/eap, but this may cause (as stated in the comments)  some
clients not to work.
This is sadly the case with iOS 9.3.1 supplicants.
Luckily we have a table relating MACs and OSs of the devices of our users.
Is it possible via unlang to have Freeradius conditionally send "E=691" (in
case authentication failure) based on a sql query?
I believe this is quite tricky, but it'd really help us a lot.
Thank you,
Stefano
    
    
More information about the Freeradius-Users
mailing list