Identify request in post-auth section
Arnaud LAURIOU
arnaud.lauriou at renater.fr
Fri Jun 4 17:28:27 CEST 2021
On 6/4/21 4:06 PM, Alan DeKok wrote:
> On Jun 4, 2021, at 9:27 AM, Arnaud LAURIOU <arnaud.lauriou at renater.fr> wrote:
>> On our eduroam proxy server, we use a virtual server to reject requests with an unknown realm in our federation :
>> authorize {
>> update request {
>> &Module-Failure-Message += 'Rejected: Realm unknown in .fr'
>> }
>> reject
>> }
>>
>> We would also like to identify these requests in the 'Post-Auth-Type REJECT' of the default virtual server.
>> How can we do this ?
>>
>> Trying to match %{proxy-reply:Module-Failure-Message} doesn't seem to work.
> The "unlang" code above is updating the request, not the proxy reply. If you need it in the proxy reply, you'll need to add it to the reply list.
>
Indeed, works better with the reply list ...
Thank's
More information about the Freeradius-Users
mailing list