[SR-Users] negative www_authorize result codes

Juha Heinanen jh at tutpro.com
Wed Nov 9 03:10:55 CET 2011


auth_db/README tells this about www_authorize() negative result codes:

   Negative codes may be interpreted as follows:
     * -1 (generic error) - some generic error occurred and no reply was
       sent out;
     * -2 (invalid password) - valid user, but wrong password;
     * -3 (invalid user) - authentication user does not exist.

whereas in auth_radius i return:

   Negative result codes may be interpreted as follows:
     * -7 (internal error) - some internal error occurred (see syslog);
     * -6 (nonce reused) - nonce is used more than once;
     * -5 (no credentials) - credentials were not found in request;
     * -4 (stale nonce) - stale nonce;
     * -3 (authorization failed) - RADIUS responded with Access Reject
       which may be, for example, due to user not found or wrong password;
     * -1 (error) - some error occured during authorization (see syslog);

since both modules depend on the same auth module, why does
www_authorize return the full set of negative result codes or is its
README out of date?

-- juha



More information about the sr-users mailing list