Post Auth and Logging Multiple MSCHAP modules

Arnab Roy arnabroy at mail.com
Mon Jun 5 16:16:11 CEST 2017


   Hi ,

   I have multiple MSCHAP definitions in my setup each pointing to
   different ad domains and all is working well. The authenticate section
   is defined as such

   Auth-Type MS-CHAP {
                                                   mschap-a {
                                                                   reject
   =2
                                                           }
                                                           if(reject) {

   mschap-b

   reject=2
                                                           }
           }


   Now I am trying to check in post auth if user authenticated via
   mschap-a go to VLAN A(vsa) else goto VLAN B(vsa). What I cant figure
   out is how do I reference these in the post auth block as if I try
   looking for return code from the modules

   mschap-a ===> this always seems to return a noop ?
   if(ok){


   }

   Also I need to log in linelog which mschap module authenticated the
   user ?

   Is this possible somehow...

   Many Thanks
   Arnab


More information about the Freeradius-Users mailing list