Re: Transform reject to accept response with specific attributes

2012-09-07 Thread Kostas Zorbadelos
Arran Cudbard-Bell a.cudba...@freeradius.org writes:

 On 6 Sep 2012, at 15:10, Kostas Zorbadelos kzo...@otenet.gr wrote:

 
 Greetings to all,
 
 I would like to achieve the following functionality: in case a user's
 AUTHENTICATION fails, the user should not be rejected but be given an
 accept response with specific attributes.
 The reason behind this is to provide a captive portal functionality for
 users having wrong credentials in their CPEs. 
 Could you provide a few hints for how the config would look like (I am
 thinking of something in terms of unlang and utilizing virtual servers
 but I am not sure how it would look like. 

 authenticate {
   Auth-Type pap {
   pap {
   reject = 1
   }
   if (reject) {
   ok
   # Add extra attributes here...
   }
   }
 }


Thank you very much, this seems to work.

 -Arran

Kostas

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Transform reject to accept response with specific attributes

2012-09-06 Thread Kostas Zorbadelos

Greetings to all,

I would like to achieve the following functionality: in case a user's
AUTHENTICATION fails, the user should not be rejected but be given an
accept response with specific attributes.
The reason behind this is to provide a captive portal functionality for
users having wrong credentials in their CPEs. 
Could you provide a few hints for how the config would look like (I am
thinking of something in terms of unlang and utilizing virtual servers
but I am not sure how it would look like. 

Regards,

Kostas

-- 
Kostas Zorbadelos   
twitter:@kzorbadeloshttp://gr.linkedin.com/in/kzorba 

()  www.asciiribbon.org - against HTML e-mail  proprietary attachments
/\  
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Transform reject to accept response with specific attributes

2012-09-06 Thread Alan DeKok
Kostas Zorbadelos wrote:
 I would like to achieve the following functionality: in case a user's
 AUTHENTICATION fails, the user should not be rejected but be given an
 accept response with specific attributes.

  You can't turn a reject into an accept.

  You'll have to compare the passwords manually (perl, etc.) and manage
it that way.  If the passwords match, return A, otherwise return B.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Transform reject to accept response with specific attributes

2012-09-06 Thread Arran Cudbard-Bell

On 6 Sep 2012, at 15:10, Kostas Zorbadelos kzo...@otenet.gr wrote:

 
 Greetings to all,
 
 I would like to achieve the following functionality: in case a user's
 AUTHENTICATION fails, the user should not be rejected but be given an
 accept response with specific attributes.
 The reason behind this is to provide a captive portal functionality for
 users having wrong credentials in their CPEs. 
 Could you provide a few hints for how the config would look like (I am
 thinking of something in terms of unlang and utilizing virtual servers
 but I am not sure how it would look like. 

authenticate {
Auth-Type pap {
pap {
reject = 1
}
if (reject) {
ok
# Add extra attributes here...
}
}
}

-Arran
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html