Invalid location for 'if' on 3.0.4

[Alan Buxey]

hi,

post-proxy etc statements live in virtual servers - that kind of stuff
would normally live in your virtual server section - I'm guessing
your 2.x config may have just been lifted from an even older 1.x config or
such with loads of INCLUDE things rather than taking
the standard layout/config.

alan

On Wed, 28 Nov 2018 at 17:22, MDS Test <mdstest.99999 at gmail.com> wrote:

> Hi folks,
>
> We  have freeradius running on version 2.2.6 running on CentOS6 for a
> few years now.  Now we need to build a need a new host on CentOS7.  I
> installed version 3.0.4 from repo.  As I copied my proxy.conf file
> from the old host.  I encounter an error and couldn't figure out what
> is wrong.
>
> $radiusd -X 2>&1 | tee debugfile
> radiusd: FreeRADIUS Version 3.0.4, for host x86_64-redhat-linux-gnu,
> built on Mar  5 2015 at 23:41:36
> Copyright (C) 1999-2014 The FreeRADIUS server project and contributors
> There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
> PARTICULAR PURPOSE
> You may redistribute copies of FreeRADIUS under the terms of the
> GNU General Public License
> For more information about these matters, see the file named COPYRIGHT
> Starting - reading configuration files ...
> including dictionary file /usr/share/freeradius/dictionary
> including dictionary file /usr/share/freeradius/dictionary.dhcp
> including dictionary file /usr/share/freeradius/dictionary.vqp
> including dictionary file /etc/raddb/dictionary
> including configuration file /etc/raddb/radiusd.conf
> including configuration file /etc/raddb/proxy.conf
> /etc/raddb/proxy.conf[103]: Invalid location for 'if'
> Errors reading or parsing /etc/raddb/radiusd.conf
>
> proxy.conf
>
> post-proxy {
>   update proxy-reply {
>     Filter-Id !* ""
>     Fortinet-Access-Profile !* ""
>     Juniper-Local-User-Name !* ""
>     Cisco-AVPair !* ""
>  #   Raritan-VSA-Placeholder !* ""
>     PaloAlto-Admin-Role !* ""
>     PaloAlto-Panorama-Admin-Role !* ""
>     F5-LTM-User-Info-1 !* ""
>   }
>
>
>   if("%{proxy-reply:Packet-Type}" == Access-Accept) {
>       perl
>       update proxy-reply {
>         Reply-Message := "Welcome user!"
>       }
>   }
> }
>
> Please pardon me for maybe this is a simple error but I am new to
> freeradius and have read doc but couldn't figure it out.
>
> Mike
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html