Identify request in post-auth section

Arnaud LAURIOU arnaud.lauriou at renater.fr
Fri Jun 4 17:28:27 CEST 2021



On 6/4/21 4:06 PM, Alan DeKok wrote:
> On Jun 4, 2021, at 9:27 AM, Arnaud LAURIOU <arnaud.lauriou at renater.fr> wrote:
>> On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation :
>> authorize {
>>           update request {
>>                 &Module-Failure-Message += 'Rejected: Realm unknown in .fr'
>>           }
>>           reject
>> }
>>
>> We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server.
>> How can we do this ?
>>
>> Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work.
>    The "unlang" code above is updating the request, not the proxy reply.  If you need it in the proxy reply, you'll need to add it to the reply list.
>
Indeed, works better with the reply list ...
Thank's



More information about the Freeradius-Users mailing list