On Sat, Jun 05, 2004 at 10:51:38PM +0200, jesk wrote: > hello, > > im having problems in understanding, how freeradius differentiate between > replyitems, which are replied everytime not matter about successful > authentication like the Attribute "Reply-Message" and Attributes, which are > only replied if the authentication is successful. > im asking this for integrating "Cisco AV-Pairs" correctly as ReplyItems, which > should be only replied if the authentication is successful. at the moment > they are replied every time, whether if the supplied User-Password is correct > or not.
Why not add the reply-items in post-auth, with the Post-Auth-Type not being Reject? That's how rlm_ippool is used, for example, so that you don't assign IPs to rejected clients. -- Paul "TBBle" Hampson, on an alternate email client. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html