[RADIATOR] Rejecting requests from within PostSearchHook

Jon Smaller jesterx at gmail.com
Tue Oct 28 19:41:27 CST 2008


Hi everyone,
I run radiator version 4.3.1 on a redhat server. My current setup is as
follows:

A modem comes online and sends a request as a broadcast to a proxy device.
The proxy device then constructs a radius request with the mac address of
the modem as the username and its own mac address as the NAS-Identifier.
After the radius server accepts this request, the modem is associated/bound
to that particular proxy device. Because of the way this access technology
works, when a modem comes online, several proxy devices can receive the
request from a single modem and they all send radius requests to the same
radius server. I want to be able to configure radius in such a way that it
will reject requests from all proxy devices except the one that i specify (I
have all modems in an LDAP database along with an attribute called
'Fixed-master' which contains the mac address of the proxy device that I
want the modem to be associated with.)

I have written a PostSearchHook and have gotten so far as obtaining the
NAS-Identifier from the request packet and obtaining the mac address of
the authorized proxy device from the LDAP and comparing the two. But i can't
seem to figure out how to reject the request from within the
PostSearchHook.

I have tried the following:

$_[3]->{RadiusResult} = $main::REJECT;

and

$_[5]->set_code('Access-Reject');

but none of them seems to work. Could someone help me and let me know how i
would go about Rejecting the request from within PostSearchHook (if it is at
all possible).

Thank you,
Jon
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20081029/f32c84f7/attachment.html>


More information about the radiator mailing list