Works of course! First class idiot for not spotting this... My head is
full of DHCP configs and I am not thinking RADIUS!
On Wed, 2008-11-19 at 11:20 +0000, Phil Mayers wrote:
> Barry Dean wrote:
> > Back in January Alan DeKok kindly helped me out with some config I
> > needed, see below. I have only just go back to reviewing RADIUS as I
> > have been involved in loads of other projects... and now can't get this
> > working! Typical...
> >
> > On Fri, 2008-01-18 at 16:23 +0100, Alan DeKok wrote:
> >> authorize {
> >> ...
> >> if ("%{User-Name}" =~ /special/i) {
> >> update reply {
> >> Reply-Message = "Cannot use this user account"
> >> reject
> >> }
> >> }
> >> ...
> >
> > I added this to the authorize section of my config in
> > sites-available/local-auth a file defining my policies for local users
> > on our wireless etc and got the errors:
> >
> > "ERROR: Unknown attribute reject"
> > "Failed to parse "update" subsection.".
> >
> > Can't fathom that as it seems perfectly OK to me having read the unlang
> > man page.
>
> """The only contents permitted in an "update" section are attributes and
> values"""
>
> ...from "man unlang"
>
> Move the reject to outside the "update" section (but inside the "if")
>
> >
> > I am using version 2.0.2.
> >
> > Any ideas?
> >
>
--
Barry Dean
Networks Team
Computing Services Department
Tel: 45641, Web: http://pcwww.liv.ac.uk/~bvd/
---
Nice boy, but about as sharp as a sack of wet mice.
-- Foghorn Leghorn
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
