Johan Meiring wrote:
> I disagree with the logic slightly.
> In my opinion it will also be rejected if ADSL-Agent-Circuit-Id does not
> exist.
Yes. It all depends on what you want.
> As fas as I understand, the desireable result is:
> If the ADSL-Agent-Circuit-Id does *not* exist, normal authentication
> must happen.
> If it *does* exist, accept or reject, depending on its value.
>
> Would this not work better?
>
> authorize {
> ...
> if (ADSL-Agent-Circuit-Id) {
> if ("%{sql: select ...}") {
> update control {
> Auth-Type := Accept
> }
> }
> else {
> reject
> }
> }
> }
Yes, that will do what you want.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
