Hello Brian -

On Sun, 30 Apr 2000, Brian Keefe wrote:
> The following outlines the test I wrote:
> 
>         AuthByPolicy ContinueWhileReject
> 
>         <AuthBy FILE>
>         Filename %{GlobalVar:sportbrain_reject_file}
>         </AuthBy>
> 
>         <AuthBy FILE>
>         Filename %{GlobalVar:sportbrain_password_file}
>         </AuthBy>
> 
> 
> In the reject file:
> reject User-Password="reject", Auth-Type="Reject:discontinued service"
> 
> In the password file:
> reject User-Password="reject"
> 
> The user reject always PASSES.
> 
> If I copy the line from the reject file and put it in the password file,
> rejection happens.
> 
> Or, if I change "Reject" to "Ignore" in the password file, I get a No Reply
> message.
> 
> Or, if I change Reject to Ignore in the reject file, I get a No Reply
> message.
> 
> These events suggests to me that the explicit rejection is not treated
> differently than other rejections.
> 

I would be interested in knowing what version of Radiator you are running, and
I would like to see the trace 4 debug from the above tests to see exactly what
is happening. It sounds like you may have a DEFAULt that is catching the
request.

> In addition, I am not getting the <msg> at the client if I have an Auth-Type
> of "Reject:<msg>"
> I am using mostly default behavior in the radpwtst client. For this reason
> it was hard to determine what caused my rejection.
> This prompted use of the Ignore Auth-Type to differentiate causes of
> rejection.
> 

You will need to set the Handler parameter "RejectHasReason". Our apologies as
this is not currently in the manual (it will be fixed in the next release).

thanks

Hugh


-- 
Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, Interbiller, TACACS+, PAM, external, etc, etc.
Available on Unix, Linux, FreeBSD, Windows 95/98/2000, NT, MacOS X.



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to