reject request in post-proxy

[Alan DeKok]

On Aug 24, 2020, at 5:40 PM, Matt Zagrabelny via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> I am trying to use unlang in the post-proxy section of my default site to
> reject certain requests. The following config example is a test condition
> and contrived.
> 
> post-proxy {
>    eap
>    if (User-Name == 'mzagrabe') {
>        reject
>    }
> }
> 
> However, I am not getting the expected reject when I successfully
> authenticate.

  You can't reject users in the post-proxy section.  Instead, just do:

post-proxy {
   eap
   if (User-Name == 'mzagrabe') {
       update parent.reply {
		Packet-Type := Reject
	}
   }
}

  Alan DeKok.