Identify request in post-auth section

Arnaud LAURIOU arnaud.lauriou at
Fri Jun 4 17:28:27 CEST 2021

On 6/4/21 4:06 PM, Alan DeKok wrote:
> On Jun 4, 2021, at 9:27 AM, Arnaud LAURIOU <arnaud.lauriou at> wrote:
>> On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation :
>> authorize {
>>           update request {
>>                 &Module-Failure-Message += 'Rejected: Realm unknown in .fr'
>>           }
>>           reject
>> }
>> We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server.
>> How can we do this ?
>> Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work.
>    The "unlang" code above is updating the request, not the proxy reply.  If you need it in the proxy reply, you'll need to add it to the reply list.
Indeed, works better with the reply list ...

More information about the Freeradius-Users mailing list