wildcard/regex Auth-Type in authenticate section

Zenon Mousmoulas zmousm at noc.grnet.gr
Sun Jul 20 18:35:41 CEST 2014


On 2014-07-20 17:10, Alan DeKok wrote:
> Zenon Mousmoulas wrote:
>> Right. I suppose it makes sense for rlm_eap to set Auth-Type to the
>> instance name, while other modules don't do that, for example rlm_ldap
>> (in 2.x)?
> 
>   All of the other modules which authenticate users do this.

Apparently rlm_pap and rlm_mschap don't do this. Can you say more 
specifically what other modules do this?

>> I don't want to use one instance for authenticate, but rather just use
>> one section to match the Auth-Type and call the actual instance by 
>> other
>> means. For example:
> ...
>> This is obviously less efficient but would allow for more compact
>> configuration.
> 
>   I don't see why.  It's not only inefficient, it's confusing.
> 
>   This is really not a recommended practice.

And not really possible anyway, as I can only use unlang within 
Auth-Type subsections and not directly in the authenticate section. 
Right?



More information about the Freeradius-Users mailing list