Run sql Module after exec in radpostauth

Alan DeKok aland at
Sat Oct 3 18:22:29 CEST 2020

On Oct 3, 2020, at 11:01 AM, Muhammed Buvaydani via Freeradius-Users <freeradius-users at> wrote:
> I am using external php script for authentication which I configured in users file , the PHP script will return the reason of the reject and I want to save this reason in radpost auth table, the problem is if I set SQL module before exec and the user was accepted as PAP but rejected from my script then  the radpost auth will have access-accept even if he is rejected by my PHP script , this is the debug

  Move "sql" to after "exec" then.

> so if I put SQL module after exec , then the sqk will not run at all .

  Yes, you can also list "sql" in the "Post-Auth-Type Reject" section.  Which will log the reject.

  Alan DeKok.

More information about the Freeradius-Users mailing list