diff --git a/freeradius_utils/auth.py b/freeradius_utils/auth.py index e53127fa..15a8d902 100644 --- a/freeradius_utils/auth.py +++ b/freeradius_utils/auth.py @@ -163,10 +163,22 @@ def post_auth(data): nas_instance = find_nas_from_request(nas) # All non proxified requests if not nas_instance: + user = data.get("User-Name", "") + user = user.split("@", 1)[0] + user = User.objects.filter(pseudo__iexact=username).first() + if not user or not user.has_access(): + logger.info("Proxified request, user has no internet access: %s" % (username)) + return radiusd.RLM_MODULE_REJECT logger.info("Proxified request, nas unknown") return radiusd.RLM_MODULE_OK nas_type = Nas.objects.filter(nas_type=nas_instance.machine_type).first() if not nas_type: + user = data.get("User-Name", "") + user = user.split("@", 1)[0] + user = User.objects.filter(pseudo__iexact=username).first() + if not user or not user.has_access(): + logger.info("Proxified request, user has no internet access: %s" % (username)) + return radiusd.RLM_MODULE_REJECT logger.info("This kind of nas is not registered in the database!") return radiusd.RLM_MODULE_OK