<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<TITLE>Message</TITLE>
<META content="MSHTML 6.00.6000.16705" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=857544006-09042009><FONT face=Arial color=#0000ff
size=2> > </FONT></SPAN>I'm sure these are questions that have been
asked a thousand times, but can't for the life of me find the answers I'm
looking for.<BR><BR><SPAN class=857544006-09042009><FONT face=Arial
color=#0000ff size=2> <FONT face="Times New Roman" color=#000000
size=3>></FONT> </FONT></SPAN>My first problem is this: I want to store
reply attributes for my users in a MySQL database, however I want them to
authenticate against an LDAP server. No problem, I sort of have this <SPAN
class=857544006-09042009><FONT face=Arial color=#0000ff
size=2> </FONT></SPAN>working.<FONT face=Arial><FONT
color=#0000ff><FONT size=2><SPAN class=857544006-09042009>
></SPAN><SPAN
class=857544006-09042009> </SPAN></FONT></FONT></FONT>Except the reply
attributes get sent even on an Access-Reject packet. This seems undesirable to
me.<BR><SPAN class=857544006-09042009><FONT face=Arial color=#0000ff
size=2> </FONT></SPAN></DIV>
<DIV><SPAN class=857544006-09042009><FONT face=Arial color=#0000ff size=2>Have
you done something to attribute filter in Post-Auth-Type
REJECT?</FONT></SPAN></DIV>
<DIV><SPAN class=857544006-09042009> </SPAN><BR><SPAN
class=857544006-09042009><FONT face=Arial color=#0000ff size=2> <FONT
face="Times New Roman" color=#000000 size=3>></FONT> </FONT></SPAN>My
second problem is this: The LDAP server isn't necessarily in the same building
as the radius server. I want users to be able to fall back on locally stored
passwords in the MySQL database should <SPAN class=857544006-09042009><FONT
face=Arial color=#0000ff size=2> > </FONT></SPAN>the LDAP server
be down for some reason. I'd thought that setting Fall-Through=yes and having a
DEFAULT Auth-Type = local would have done this, but no dice. Any
suggestions?<BR><SPAN class=857544006-09042009><FONT face=Arial color=#0000ff
size=2> </FONT></SPAN></DIV>
<DIV><SPAN class=857544006-09042009><FONT face=Arial color=#0000ff size=2>man
unlang - redundant.</FONT></SPAN></DIV>
<DIV><SPAN class=857544006-09042009><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=857544006-09042009>Ivan
Kalik</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=857544006-09042009>Kalik Informatika
ISP</SPAN></FONT></DIV></BODY></HTML>