Remove reply:User-Name only if there's a reply:CUI

FreeRADIUS · Jul 8, 2014 · 3d9a6e9 · 3d9a6e9
1 parent 9851f2c
commit 3d9a6e9
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/raddb/policy.d/cui b/raddb/policy.d/cui
@@ -73,17 +73,17 @@ cui.post-auth {
 		}
 	}
 
-	update reply {
-		User-Name !* ANY	# remove User-Name from the reply for security
-	}
-
 	#
 	#  The section below will store a CUI for the User in the DB.
 	#  You need to configure the cuisql module and your database for this to work.
 	#  If your NAS can do CUI based accounting themselves or you do not care about
 	#  accounting, comment out the three lines below.
 	#
 	if (reply:Chargeable-User-Identity) {
+		# remove User-Name from the reply for security
+		update reply {
+			User-Name !* ANY
+		}
 		cuisql
 	}
 }