On Wed, 2017-09-06 at 16:03 +0000, Bhagwat, Shrikant wrote:
exec default { wait = yes program = "/idm/idmt_home/PhoneFactor/Level1Factor.pl %{config:modules.ldap.identity} %{config:modules.ldap.password} %{config:modules.ldap.server} %{config:modules.ldap.basedn} not_found %{config:modules.ldap.level- 1_kdc} %{config:modules.ldap.logFILEname}" output_pairs = "none" shell_escape = yes } /etc/raddb/mods-enabled/exec[33]: Invalid output list 'none' /etc/raddb/mods-enabled/exec[33]: Instantiation failed for module "default"
Not sure why Invalid Output list none
Because that's invalid - the output lists are documented in mods- available/echo (which mods-available/exec points to), so you need to use one of the standard attribute list names. The release notes say that a config for version 2 won't just work on version 3 for a reason... the config likely won't "just work". So you have to look at the examples with the server and update your config where necessary. If you're looking at that anyway, it's probably a good time to consider if you can do whatever you are doing in the external script within FreeRADIUS directly. Running scripts is generally much slower than, for example, doing LDAP lookups or similar in the server. -- Matthew