Identify request in post-auth section

Alan DeKok aland at
Fri Jun 4 16:06:11 CEST 2021

On Jun 4, 2021, at 9:27 AM, Arnaud LAURIOU <arnaud.lauriou at> wrote:
> On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation :
> authorize {
>          update request {
>                &Module-Failure-Message += 'Rejected: Realm unknown in .fr'
>          }
>          reject
> }
> We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server.
> How can we do this ?
> Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work.

  The "unlang" code above is updating the request, not the proxy reply.  If you need it in the proxy reply, you'll need to add it to the reply list.

  Alan DeKok.

More information about the Freeradius-Users mailing list