Problem authenticating cleartext-passwords locally and proxy realms

[Alan DeKok]

mikoi wrote:
> The problem:
> When logging in with the user with Cleartext-Password all passwords are
> accepted.

  Because that's what you told it to do.


> mysql> select * from radgroupcheck;
> +----+-----------+----------------+----+-------------+
> | id | groupname | attribute      | op | value       |
> +----+-----------+----------------+----+-------------+
> |  8 | VPN-AUTH  | Huntgroup-Name | == | VPN-Service |
> |  9 | VPN-AUTH  | Auth-Type      | := | Accept      |

  Why is the Auth-Type := Accept in there?

> users-file
> # On no match, the user is denied access.
> DEFAULT         Auth-Type := Reject

  This is ALWAYS the default.  There is no need for this line. Delete it.

  Alan DeKok.