Local User with multiple passwords (or RegEX passwords) possible?

Fajar A. Nugraha list at fajar.net
Thu Jul 7 14:41:41 CEST 2011


On Thu, Jul 7, 2011 at 7:18 PM, Equin Nix <equin.nix at googlemail.com> wrote:
> Hi Phil,
>
> thanks a lot for the fast answer! Unfortunatelly your radius-skills seem to
> be far far from mine, but I think I get the point.
>
> I tried to add the following to sites-enabled/default (int authorize
> section) (Its not a full copy of your text, I wanted to start step by step):
>
> [...]
>         #
>         #  Read the 'users' file
>         files {
>                 # compare them
>                 if (User-Password != control:Cleartext-Password) {
>                         reject
>                 }
>
>
>                 # probably need to set Auth-Type := Accept here
>                 update control {
>                         Auth-Type := Accept
>                 }
>         }
> [...]
>
> and freeradius won't start (even if I remove the update control section).
> This is the error:
> [...]
> /etc/freeradius/sites-enabled/default[154]: Subsection of module instance
> call not allowed

Don't put the comparison as a subsection of module instance. i.e. do NOT use

files {
  <your stuff here>
}


instead use

files
<your stuff here>

also see "man unlang". Among others, it explains how to use
attributes, variables, and regex.

-- 
Fajar




More information about the Freeradius-Users mailing list