Post Auth and Logging Multiple MSCHAP modules

Alan DeKok aland at
Mon Jun 5 17:02:06 CEST 2017

> On Jun 5, 2017, at 10:56 AM, Arnab Roy <arnabroy at> wrote:
>   Thanks Alan, that would be my preference as well. Unfortunately we can
>   get some users who do not put in domain prefix/suffix...
>   So basically there isnt a way we can find out in that case ?

  Reject them if they don't use the proper domain.

  Or, use "unlang" to set the domain after they've successfully authenticated:

	if (ok) {
		update request {
			Realm := "mschap-a"

  And then use that in the post-auth section.

  Alan DeKok.

More information about the Freeradius-Users mailing list