Andrea Gabellini <[EMAIL PROTECTED]> wrote: > But If I reject the request via the rlm_perl module (returning > RLM_MODULE_REJECT) I can't see anything. > > In debug mode the server doesn't execute the post-auth module in such > situation.
Try using the "Post-Auth-Type Reject" block in 1.0.0.
I'm using it with 1.0.0pre2.
I read the src/main/auth.c file and I noticed that in certain situation the program returns directly without call the rad_postauth function. Following my little patch.
Andrea
@@ -518,7 +501,7 @@
(request->proxy_reply->code != PW_ACCESS_CHALLENGE)) {
rad_authlog("Login incorrect (Home Server says so)", request, 0);
request->reply->code = PW_AUTHENTICATION_REJECT;
- return rad_postauth(request);
+ return RLM_MODULE_REJECT;
}
}
@@ -583,7 +566,7 @@
}
request->reply->code = PW_AUTHENTICATION_REJECT;
}
- return rad_postauth(request);
+ return r;
}
if (!autz_retry){
VALUE_PAIR *autz_type_item = NULL;
@@ -916,7 +899,7 @@
rad_authlog("Login incorrect (external check failed)",
request, 0);- return rad_postauth(request);
+ return RLM_MODULE_REJECT;
}
}Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--------------------------------------- If trains stop at a train station, what happens at a workstation? --------------------------------------- Ing. Andrea Gabellini Email: [EMAIL PROTECTED] Tel: 0549 886111 (Italy) Tel. +378 0549 886111 (International)
Intelcom San Marino S.p.A. Strada degli Angariari, 3 47891 Rovereta Repubblic of San Marino
http://www.omniway.sm http://www.intelcom.sm
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
