Re: Problem authenticating cleartext-passwords locally and proxy realms

17 Aug 2009

      mikoi wrote:
...
The problem:
When logging in with the user with Cleartext-Password all passwords are
accepted.
Because that's what you told it to do.
...
mysql> select * from radgroupcheck;
+----+-----------+----------------+----+-------------+
| id | groupname | attribute      | op | value       |
+----+-----------+----------------+----+-------------+
|  8 | VPN-AUTH  | Huntgroup-Name | == | VPN-Service |
|  9 | VPN-AUTH  | Auth-Type      | := | Accept      |
Why is the Auth-Type := Accept in there?
...
users-file
# On no match, the user is denied access.
DEFAULT         Auth-Type := Reject
This is ALWAYS the default.  There is no need for this line. Delete it.

  Alan DeKok.