fix(freeradius): check IP after pool allocation
This commit is contained in:
@@ -446,15 +446,6 @@ authorize {
|
|||||||
Pool-Name := "engineers-%{sql:SELECT split_part('%{User-Name}', '@', 2)}"
|
Pool-Name := "engineers-%{sql:SELECT split_part('%{User-Name}', '@', 2)}"
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
#
|
|
||||||
# HARD CHECK: must have IP
|
|
||||||
#
|
|
||||||
if (!&reply:Framed-IP-Address) {
|
|
||||||
update reply {
|
|
||||||
Reply-Message := "No IP assigned - access denied"
|
|
||||||
}
|
|
||||||
reject
|
|
||||||
}
|
|
||||||
# If you are using /etc/smbpasswd, and are also doing mschap authentication, the un-comment this line, and configure the 'smbpasswd' module.
|
# If you are using /etc/smbpasswd, and are also doing mschap authentication, the un-comment this line, and configure the 'smbpasswd' module.
|
||||||
# smbpasswd
|
# smbpasswd
|
||||||
|
|
||||||
@@ -809,7 +800,16 @@ post-auth {
|
|||||||
|
|
||||||
sqlippool
|
sqlippool
|
||||||
}
|
}
|
||||||
|
#
|
||||||
|
# HARD CHECK: must have IP
|
||||||
|
#
|
||||||
|
if (!&reply:Framed-IP-Address) {
|
||||||
|
update reply {
|
||||||
|
Reply-Message := "No IP assigned - access denied"
|
||||||
|
}
|
||||||
|
reject
|
||||||
|
}
|
||||||
|
|
||||||
# Query VLAN ID from your DB
|
# Query VLAN ID from your DB
|
||||||
# VLAN assignment is no longer used
|
# VLAN assignment is no longer used
|
||||||
#vlan_test
|
#vlan_test
|
||||||
|
|||||||
Reference in New Issue
Block a user