Re: can EAP-PEAP-GTC use email pop3 server to authenticate?

19 Mar 2015


      2015-03-19 20:40 GMT+08:00 Alan DeKok <aland@deployingradius.com>:
...
On Mar 18, 2015, at 10:26 PM, d tbsky <tbskyd@gmail.com> wrote:
...
rlm_eap_gtc: Unknown Auth-Type POP3
You have to list the perl script as “Auth-Type pop3” in the “authenticate” section.
hi Alan:
       I already add that to inner-tunnel. below is the working configuration.
but if I have not  add auth-type POP3 to dictionary, rlm_eap_gtc will
complain and fail.
or there is other "authenticate" section I am missing?

server inner-tunnel {
listen {
       ipaddr = 127.0.0.1
       port = 18120
       type = auth
}
authorize {
        pop3
        chap
        mschap
        suffix
        update control {
               Proxy-To-Realm := LOCAL
        }
        eap {
                ok = return
        }
        expiration
        logintime
        pap
}

authenticate {
        Auth-Type POP3 {
                pop3
        }
        Auth-Type PAP {
                pap
        }
        Auth-Type CHAP {
                chap
        }
        Auth-Type MS-CHAP {
                mschap
        }
        eap
}

session {
        radutmp
}

post-auth {
        Post-Auth-Type REJECT {
                attr_filter.access_reject
        }
}

pre-proxy {
}

post-proxy {
        eap
}
}