Must set auth-type - but why?

[John Horne]

On Fri, 2007-05-11 at 13:47 +0200, Alan DeKok wrote:
> John Horne wrote:
> >   bob  Auth-Type = Local,User-Password := "abc",Proxy-To-Realm := LOCAL
> 
>   Don't set Auth-Type.  Use "Cleartext-Password", not "User-Password".
> The entry should look like:
> 
> bob	Cleartext-Password := "abc", Proxy-To-Realm := LOCAL
> 
No, that doesn't work. I get the exact same result as if I used
'Auth-type = Local'. 'radiusd -X' output shows:

=====================================================
 rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type  = mschap'
  modcall[authorize]: module "mschap" returns ok for request 0
    rlm_realm: No '@' in User-Name = "bob", looking up realm NULL
    rlm_realm: Found realm "NULL"
    rlm_realm: Adding Stripped-User-Name = "bob"
    rlm_realm: Proxying request from user bob to realm NULL
    rlm_realm: Adding Realm = "NULL"
    rlm_realm: Preparing to proxy authentication request to realm "NULL"
  modcall[authorize]: module "suffix" returns updated for request 0
modcall: leaving group authorize (returns updated) for request 0
  WARNING: You set Proxy-To-Realm = LOCAL, but it is a LOCAL realm!
Cancelling invalid proxy request.
  rad_check_password:  Found Auth-Type
auth: type Local
auth: No User-Password or CHAP-Password attribute in the request
=====================================================



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: John.Horne at plymouth.ac.uk       Fax: +44 (0)1752 233839