feat: implement RadiusService for guest management and configure mschap to return explicit authentication error codes

2026-07-27 11:59:14 +02:00
parent 3b20b7481e
commit f8b96853f4
2 changed files with 7 additions and 1 deletions
@@ -272,7 +272,8 @@ public class RadiusService : IRadiusService

        profile.Status = "Revoked";

-        // Remove Cleartext-Password and insert Auth-Type := Reject
+        // Remove Cleartext-Password from radcheck so FreeRADIUS rejects future auth with MS-CHAP error 691,
+        // prompting iOS / clients to re-enter credentials instead of requiring 'Forget Network'.
        var checks = await _db.RadCheck.Where(rc => rc.Username == profile.Username).ToListAsync();
        _db.RadCheck.RemoveRange(checks);