Merge tag 'release_3_0_14' into tr-integ

[freeradius.git] / raddb / sites-available / abfab-tr-idp

diff --git a/raddb/sites-available/abfab-tr-idp b/raddb/sites-available/abfab-tr-idp
index 30a671f..f1466da 100644 (file)
--- a/raddb/sites-available/abfab-tr-idp
+++ b/raddb/sites-available/abfab-tr-idp
@@ -12,7 +12,7 @@
 
 server abfab-idp {
 authorize {
-        psk_authorize
+       psk_authorize
        abfab_client_check
        filter_username
        preprocess
@@ -30,9 +30,9 @@ authorize {
 #      cui
 
        suffix {
-               updated = 1
+               updated = 1
                noop = reject
-        }
+       }
        eap {
                ok = return
        }
@@ -81,12 +81,6 @@ post-auth {
        -sql
 
        #
-       #  Instead of sending the query to the SQL server,
-       #  write it into a log file.
-       #
-#      sql_log
-
-       #
        #  Un-comment the following if you want to modify the user's object
        #  in LDAP after a successful login.
        #
@@ -96,6 +90,11 @@ post-auth {
        exec
        #  Remove reply message if the response contains an EAP-Message
        remove_reply_message_if_eap
+
+       # Uncomment to enable logging of certain Moonshot attributes. See
+       # mods-available/moonshot_custom_linelog.
+       # log_moonshot_authn_rp_proxy
+
        #  Access-Reject packets are sent through the REJECT sub-section of the
        #  post-auth section.
        #
@@ -103,6 +102,10 @@ post-auth {
        #  'edir_account_policy_check = yes' in the ldap module configuration
        #
        Post-Auth-Type REJECT {
+               # Uncomment to enable logging of certain Moonshot attributes. See
+               # mods-available/moonshot_custom_linelog.
+               # log_moonshot_authn_rp_proxy
+
                # log failed authentications in SQL, too.
                -sql
                attr_filter.access_reject
@@ -112,13 +115,17 @@ post-auth {
                # authentication failure And already has an EAP message
                # For non-ABFAB, we insert the failure all the time, but for ABFAB
                # It's more desirable to preserve reply-message when we can
-if &reply:Eap-Message {
+               if (&reply:Eap-Message) {
                        eap
-                       }
+               }
 
                #  Remove reply message if the response contains an EAP-Message
                remove_reply_message_if_eap
        }
+
+       # Uncomment to enable logging of certain Moonshot attributes. See
+       # mods-available/moonshot_custom_linelog.
+       # log_moonshot_authn_rp_proxy
 }
 #
 #  When the server decides to proxy a request to a home server,