Add support for Post-Auth-Type REJECT substanza of post-auth, run when a
[freeradius.git] / doc / Post-Auth-Type
1 This is now called Post-Auth-Type, for consistency.
2
3 Post-Auth-Type is used to select between groupings of
4 modules in the post-auth stanza using arbitrary attributes.
5 It is functionally identical to Acct-Type, apart from
6 the name of the attribute and its dealing with rejected
7 requests.. This means that (unlike Autz-Type) the attribute
8 must be set before the stanza is run. Changes to
9 Post-Auth-Type during post-auth will have no effect.
10
11 If a request has been rejected, the value of Post-Auth-Type
12 is overwritten with REJECT automatically, so anonymous
13 modules like my_ippool below will not be run, only
14 modules like my_detail below in the appropriate substanza
15 will be run.
16
17 post-auth {
18         my_ippool
19
20         Post-Auth-Type REJECT {
21                 my_detail
22         }
23 }