From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 15 Oct 2024 18:44:15 +0000 (-0400)
Subject: document more authorization replies
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=cbb45e04c0d17f7c4bdb408479f7b0dddf1bb377;p=thirdparty%2Ffreeradius-server.git

document more authorization replies
---

diff --git a/raddb/sites-available/tacacs b/raddb/sites-available/tacacs
index a0da50e22d2..a60be2c3cc4 100644
--- a/raddb/sites-available/tacacs
+++ b/raddb/sites-available/tacacs
@@ -274,6 +274,8 @@ server tacacs {
 	#
 	#  ### Send
 	#
+	#  Note that "follow" is officially deprecated, and is not supported.
+	#
 	send Authentication-Pass {
 		&reply.Server-Message := "Hello %{User-Name}"
 
@@ -347,6 +349,8 @@ server tacacs {
 	#
 	#	### Send
 	#
+	#	Add the arguments to whatever the user entered.
+	#
 	send Authorization-Pass-Add {
 		&reply.Authorization-Status := Pass-Add
 		&reply.Server-Message := "authorization-response-server"
@@ -354,6 +358,30 @@ server tacacs {
 		&reply.Argument-List := "key1=var1"
 	}
 
+	#
+	#	Replace whatever the user entered with the following arguments
+	#
+	send Authorization-Pass-Reply {
+		&reply.Authorization-Status := Pass-Repl
+		&reply.Server-Message := "authorization-response-server"
+		&reply.Data := "authorization-response-data"
+		&reply.Argument-List := "key1=var1"
+	}
+
+	#
+	#	Reject the request
+	#
+	send Authorization-Fail {
+		&reply.Authorization-Status := Fail
+	}
+
+	#
+	#	An error processing the request
+	#
+	send Authorization-Fail {
+		&reply.Authorization-Status := Error
+	}
+
 	#
 	#	## Accounting
 	#