Trigger EDIR-Intruder Lockout in FR3
Anja.Ruckdaeschel at rz.uni-regensburg.de
Tue Sep 8 10:09:38 CEST 2015
I wonder what is the designated way in FR 3.0.9 to trigger an eDirectory-Intruder Lockout
with edir_autz=yes in addition?
I want to use
a, universal password retrieval
b, grace login consumation, account expire check, password expire check, login time restrictions check, attribute checks, etc.
c, intruder lockout trigger (I do a named ldap bind with the login-user with a password which is bad, if mschap rejects)
in one radius config for PEAP/MSCHAPv2 with eDIR.
So far, I only manage to get a and b OR a and c running.
Perhaps you can give me a hint?
Thank you for your time.
More information about the Freeradius-Users