From cf98b8dd816765586c2ec791530c3dfe7830c6dc Mon Sep 17 00:00:00 2001
From: "noussair.hamrit" <noussair.hamrit@helmholz.de>
Date: Wed, 9 Sep 2026 16:26:59 +0200
Subject: [PATCH] fix(freeradius): log no-IP rejection reason

---
 files/sites-available/default | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/files/sites-available/default b/files/sites-available/default
index ec71f61..bd463cc 100644
--- a/files/sites-available/default
+++ b/files/sites-available/default
@@ -446,6 +446,15 @@ authorize {
 			Pool-Name := "engineers-%{sql:SELECT split_part('%{User-Name}', '@', 2)}"
 		}
 	}
+	#
+	# HARD CHECK: must have IP
+	#
+	if (!&reply:Framed-IP-Address) {
+		update reply {
+			Reply-Message := "No IP assigned - access denied"
+		}
+		reject
+	}
 	#  If you are using /etc/smbpasswd, and are also doing mschap authentication, the un-comment this line, and configure the 'smbpasswd' module.
 #	smbpasswd
 
@@ -800,15 +809,6 @@ post-auth {
 
 		sqlippool
 	}
-	#
-	# HARD CHECK: must have IP
-	#
-	if (!&reply:Framed-IP-Address) {
-		update reply {
-			Reply-Message := "No IP assigned - access denied"
-		}
-		reject
-	}
 
 	# Query VLAN ID from your DB
 	# VLAN assignment is no longer used