<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000099" bgcolor="#FFFFFF">
<div class="moz-cite-prefix"><small><br>
Hi Alan, <br>
<br>
Thanks for your answer.<br>
<br>
There 4000 users! And the priority is the authentication with
token.<br>
SQL database should be use only if a user loses his token.<br>
<br>
The solution would be to have 2 freeradius, one for token
authentication and the other one for SQL database ?<br>
<br>
Regards, <br>
Jérôme</small><br>
<br>
<font color="#0617AE"><font size="0"><font face="verdana">L</font></font></font>e
07/05/2014 13:14, Alan DeKok a écrit :<br>
</div>
<blockquote cite="mid:536A157A.60408@deployingradius.com"
type="cite">
<pre wrap="">Jérôme MATER wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I have made both configurations and it works separately. However, the
goal is :
1) I want to authenticate users with Windows Radius server and
authentication with token
2) If authentication 1 failed, then user tries to connect on the SQL
database automatically.
</pre>
</blockquote>
<pre wrap="">
That's not really how RADIUS works. If the user is rejected, you
can't turn that into an accept.
</pre>
<blockquote type="cite">
<pre wrap="">I've tried with post-auth section, post-proxy section...
Is it possible ? How can I do that.
</pre>
</blockquote>
<pre wrap="">
You can't.
Instead, determine which users should use SQL, and which users should
authenticate via the Windows RADIUS server. Then, make them do that.
Alan DeKok.
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
</body>
</html>