On 4/25/07, Frank Cusack <fcusack@fcusack.com> wrote:
On April 25, 2007 3:05:54 PM -0400 Kevin Bonner <keb@pa.net> wrote:
> On Wednesday 25 April 2007 04:35:13 Muhammad Tayseer Alquoatli wrote:
>> Hi list:
>> I've been working hard to let freeradius handles "Service-Type =
>> AUTHENTICATE_ONLY" the proper way, but i couldn't achieve that till
>> I've changed two lines in the source code
>> with you this patch freeradius understands AUTHENTICATE_ONLY and
>> doesn't complain about it, but handles it as all other service types
>> (i.e. runs the post-auth module and sets network configuration in the
>> reply) while it must only authenticate the user and returns a network
>> configuration free accept/reject reply
>> the patch below could be applied to freeradius-1.1.6
>> Best regards
>
> I'm receiving Authenticate-Only requests and FreeRADIUS doesn't complain.
> What errors are you seeing? Would attr_filter be able to strip all
> unwanted attributes for you, instead of making code modifications?
I'll second that. I can't imagine any case where configuration alone,
using the existing code, can't make it work.
Thank you, I maybe miss some configuration, but I'm not saying that freeradius is complaining about receiving and Authenticate-Only service type, but i'm saying its handling it the same way as a framed-user service type.
I'm expecting FreeRadius to just authenticate me and not give me an IP address if "Authenticate-Only" service type is desired, but freeradius is always reserving an IP address for me even if Service-Type=Authenticate-Only and this what i couldn't change without code modification
I hope I've made it clear, and i appreciate sending me the appropriate configuration if anyone could send FreeRadius an access-request where Service-Type=Authenticate-Only is set and receive just an access-reject or access-accept without any network configuration returned in the reply
Thanks a lot