Re: Want to set Auth-Type to pam if Auth-type ist unset

5 May 2008


      Have you tried

  if (!control:Auth-Type) {

Jim L.

----- Original Message ----- 
From: "Hans-Peter Fuchs" <Fuchs@rrz.uni-koeln.de>
To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org>
Sent: Monday, May 05, 2008 11:30 AM
Subject: Want to set Auth-Type to pam if Auth-type ist unset
...
freeradius-2.0.4 under rhel el 5.
If no module sets Auth-Type I want it to set to: pam.
Config:
authorize {
...
        eap {
               ok = return
       }
#
       #  Pull crypt'd passwords from /etc/passwd or /etc/shadow,
       #  using the system API's to get the password.  If you want
       #  to read /etc/passwd or /etc/shadow directly, see the
       #  passwd module in radiusd.conf.
       #
#       unix
#
       #  Read the 'users' file
       files
pap
      if (Control:Auth-type == "") {
                      update control {
                              Auth-Type := pam
                      }
      }
authenticate {
       #
       #  PAP authentication, when a back-end database listed
       #  in the 'authorize' section supplies a password.  The
       #  password can be clear-text, or encrypted.
      Auth-Type PAP {
               pap
      }
       Auth-Type CHAP {
               chap
       }
...
       Auth-Type pam {
               pam
       }
radiusd -X show that even if no authetication method is found the
condition is not empty.
++? if ('%{Control:Auth-type}' == "")
? Evaluating ('%{Control:Auth-type}' == "") -> FALSE
++? if ('%{Control:Auth-type}' == "") -> FALSE
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.
Do you have a suggestion?
Thank You for Your time.
-- 
Grüße
Hans-Peter Fuchs
Hans-Peter Fuchs - RRZK Zimmer 20
Zentrum für angewandte Informatik - Universitätsweiter Service RRZK
Universität zu Köln - Tel: 0221-470-6972
-
List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html