Re: module-failure-message in exec module

2013-06-07 Thread Phil Mayers
On 07/06/13 14:05, stefan.pae...@diamond.ac.uk wrote: Andy, You may want to try and set it in inner-tunnel's post-auth section: if (Module-Failure-Message) { update outer.reply { Module-Failure-Message := "%{Module-Failure-Message}" } } That way the response is

Re: module-failure-message in exec module

2013-06-07 Thread Phil Mayers
On 07/06/13 13:15, Franks Andy (RLZ) IT Systems Engineer wrote: Hi, Ok so I've played about and can get a decent failure reply from a script based solution. Moving on to those NAS clients that actually do PEAP/MSCHAP .. I would like to get a response when a failure occurs from them, but it see

RE: module-failure-message in exec module

2013-06-07 Thread stefan.paetow
rs mailing list Subject: RE: module-failure-message in exec module Ok, so the other questions stand, but an update to say the problem is the variable is not coming back to the default VS from the inner tunnel which I didn't at first spot. I had this problem recently and couldn't work

RE: module-failure-message in exec module

2013-06-07 Thread Franks Andy (RLZ) IT Systems Engineer
ne 2013 13:15 To: FreeRadius users mailing list Subject: RE: module-failure-message in exec module Hi, Ok so I've played about and can get a decent failure reply from a script based solution. Moving on to those NAS clients that actually do PEAP/MSCHAP .. I would like to get a response

RE: module-failure-message in exec module

2013-06-07 Thread Franks Andy (RLZ) IT Systems Engineer
Andy -Original Message- From: freeradius-users-bounces+andy.franks=sath.nhs...@lists.freeradius.org [mailto:freeradius-users-bounces+andy.franks=sath.nhs.uk@lists.freeradiu s.org] On Behalf Of Phil Mayers Sent: 06 June 2013 17:48 To: freeradius-users@lists.freeradius.org Subject: Re:

Re: module-failure-message in exec module

2013-06-06 Thread Phil Mayers
On 06/06/13 16:48, Franks Andy (RLZ) IT Systems Engineer wrote: Questions are – does the exec module return to the Module-Failure-Message variable or another I can use, and why doesn’t No, sorry. "mschap" does when it does the internal "exec", but the "exec" module does not. You might be able

module-failure-message in exec module

2013-06-06 Thread Franks Andy (RLZ) IT Systems Engineer
Hi all, Trying to use the provided ntlm_auth exec module to authenticate users where the NAS uses pap, which works fine. I just want to improve my error reporting and pick up the return string from the failure of the module, .e.g - Exec plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc