Radiator Server Documentation — latest

must

Convert ignore action results to reject

Table of Contents
  • must
  • Syntax
  • Example
  • Result Handling
  • Related Actions

must

Requires another action to return an accept or reject result. If the wrapped action returns ignore, must converts the result to reject and sets aaa.reason.

Use must when an action should be applicable to the current request. For example, use it to reject a request that does not contain credentials for the configured authentication method.

Syntax

must <action>;
must <action> { }

Example

@execute {
    must pap;
}

If the request does not contain a PAP password, pap returns ignore. The must action converts that ignore result to reject.

Result Handling

must preserves accept and reject results from the wrapped action:

  • Accept remains accept.
  • Reject remains reject.
  • Ignore becomes reject.

When ignore becomes reject, must sets aaa.reason to must: unexpected ignore from the wrapped '<action-name>' action

  • try - convert action errors to ignore
  • reject - explicitly reject a request
  • pap - authenticate a PAP password
Navigation
  • accept

  • append

  • assert

  • backend

  • challenge

  • chap

  • conditions

  • copy

  • count

  • debug

  • discard

  • EAP

  • error

  • filter

  • hotp

  • http-basic-auth

  • if

  • ignore

  • invoke

  • log

  • map

  • message

  • modify

  • mschap

  • mschapv2

  • must

  • pap

  • reason

  • reject

  • reject_errors

  • replace

  • reply

  • rewrite

  • set

  • sleep

  • sometimes

  • stop

  • totp

  • trace

  • try

  • until

  • yubikey

Related
  • try
  • pap
  • reject