Attribute to show authentication method

Alan DeKok aland at deployingradius.com
Thu Mar 31 17:07:19 CEST 2016


On Mar 31, 2016, at 11:03 AM, Jonathan Gazeley <Jonathan.Gazeley at bristol.ac.uk> wrote:
> 
> Is there an easy well to determin in post-auth which authentication method was used to authenticate a user?

  control:Auth-Type.  That works for the default authentication types.

> We have a fairly complex setup where a user can be "authenticated" by MAC address in the Authorize section or via EAP-TLS or EAP-PEAP, both with their own virtual servers.

  That's a bit different.

> In the outer post-auth I want to call a logging module that explicitly says how the user was authenticated but I can't find an attribute which I can reliably check.

  If you're manually authenticating users via MAC address in the "authorize" section, you MUST also manually track which authentication method they used.

  Alan DeKok.




More information about the Freeradius-Users mailing list