Hi, You can also set Auth-Type and then add an entry in authentication section like you did in authorize. it could look like this : in users files: user ...,Autz-Type := aldap1, Auth-Type := aldap1 and in radiusd.conf: Authorize{ ... Autz-Type aldap1 { ... } ... } Authenticate { ... Auth-Type aldap1 { ... } ... } Xav 2005/12/28, Gerald Richter <richter@ecos.de>:
Hi,
Use Autz-Type instead of Auth-Type and set "Autz-Type := aldap1" in the users file (in check items)
That's what I already do and authorization works correctly and accesses ldap1 or ldap2 as it should, but when it comes to authentication, Auth-Type is set to "LDAP" by the authorization phase and it didn't know about different ldap servers anymore
Gerald
2005/12/28, Gerald Richter <richter@ecos.de>:
Hi,
I want to use more than one ldap server to authenticate users. I have setup a users file that sets the Autz-Type so one of two ldap server are selected for authorization. Since it is not known which kind of authentication information is provied by the user, chap is also included, like
Authorize { preprocess suffix file Auth-Type aldap1 { chap ldap1 } Auth-Type aldap2 { chap ldap2 } }
My problem is now when it comes the authentication, because both instances of the ldap module sets the Auth-Type to LDAP, it will only work with one ldap server. Also I cannot set the Auth-Type in the users file, because it might also be set to CHAP by the chap module.
How can I specify which ldap server to use for authentication in such a case? Is there a possibility to include the module instance name in the Auth-Type?
Thanks
Gerald
-------------------------------------------------------------- -------------
Gerald Richter ecos electronic communication services gmbh IT-Securitylösungen * Webapplikationen mit Apache/Perl/mod_perl/Embperl
Post: Tulpenstrasse 5 D-55276 Dienheim b. Mainz E-Mail: richter@ecos.de Voice: +49 6133 939-122 WWW: http://www.ecos.de/ Fax: +49 6133 939-333
----------------------------------------------------------------------
----- ECOS BB-5000 Firewall- und IT-Security Appliance: www.bb-5000.info
----------------------------------------------------------------------
-----
** Virus checked by BB-5000 Mailfilter **
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
** Virus checked by BB-5000 Mailfilter ** !DSPAM:43b2754e166506533414836!
** Virus checked by BB-5000 Mailfilter **
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html