#
#  PRE: update if
#
update control {
	Cleartext-Password := 'hello'
}

if (User-Name == "bob") {
	update reply {
		Filter-Id := "filter"
	}

	#
	#  We need this because the "return" below
	#  will prevent the "pap" module from being run
	#  in the "authorize" section.
	#
	update control {
		Auth-Type := PAP
	}

	#
	#  Stop processing "authorize", and go to the next section.
	#
	return {	# ERROR
	       ok = 1
	}

	#
	#  Shouldn't reach this
	#
	update reply {
		Filter-Id := "fail"
	}
}