using external script in virtual server config

Alan DeKok aland at deployingradius.com
Mon Jan 26 23:00:25 CET 2015


On Jan 26, 2015, at 4:54 PM, the2nd at otpme.org wrote:
> i tried it with the config below but the attribute Tmp-Octets-0 is always "0x". it think thats because the mschap module is disabled.

  Well…. then fix that.

> but if i enable it i get no auth request from rlm_python. i guess thats because the mschap module always tries to do authentication, via ntlm_auth or via users file!?

  The MSCHAP module does MSCHAP authentication.  That’s why it exists.

  If you *don’t* want it to set “Auth-Type = MSCHAP”, then don’t list “mschap” in the “authorize” section.

> i also noticed that authData includes a challange/response pair but they are different (longer) from what i get from mschap module when running otpme as ntlm_auth replacement.

  No idea...

> the request EAP-Type is set to MS-CHAP-V2. is this an encapsulated mschap request?

  Yes.

  Alan DeKok.



More information about the Freeradius-Users mailing list