Bob Franklin wrote: > However, I can't seem to do this with locally-handled packets -- I have > 'post-auth' which runs for 'Access-Accept' and (optionally, through > 'Post-Auth-Type REJECT'), 'Access-Reject'. But I would like to be able > to log the intermediate 'Access-Challenge' packets. > > Putting %{reply:Packet-Type} at the end of the 'authorize' section > doesn't work (I just get '0').
The issue is that the response *might* be an Access-Challenge, or it might be an Access-Reject. The final decision isn't made until after all of the modules have been executed. But I don't see why you want to log the intermediate Access-Challenges... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html