On Aug 27, 2004, at 09:05, Kostas Zorbadelos wrote:

The module returns fail but no access-reject is sent back and radtest
keeps retransmitting.
What am I missing?

Alan responded to me on a similar issue some time ago with the response to use configurable failover. There is a very good document on that in the docs directory. I came up with the following approach based on that. However, it has never been tested and no one responded to my posting of it. I didn't want to do any more disruptive testing on a production machine so I reverted to an Exec-Program-Wait module which does it all very simply.



modules { ... exec l_auth { wait = yes program = "/etc/raddb/local %{HINT} R" input_pairs = request output_pairs = reply }

    always reject {
      rcode = reject
    }
...
}

post-auth {
        redundant {
                 l_auth {
                        fail = 1
                }
                reject
        }       
}


It also seems like I might be able to use the following in post-auth:

post-auth {
         l_auth {
                fail = reject
        }       
}



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to