Hello again, 

Thanks for your help. So external script support is possible for only PAP? I wanted to authenticate windows 7 wireless interfaces via radius server cause of an old/non-supported sql db so i had to use my own external/customized php script.

2012/9/20 Alan DeKok <aland@deployingradius.com>
Taręk Kabak wrote:
> we are trying to external php script to authenticate user pass.
> radius return access-accept to nas but client ask user pass again ...

  Read scripts/exec-program-wait.

> script;
>
> <?php
>   $user = getenv("USER_NAME");
>   $password = getenv("USER_PASSWORD");
>
>
> echo "Access-Accept\n";

  Huh?  Why is that there?

> ?>
>
> exec module;
>
> exec {
>     wait = yes
>     program = "/usr/local/bin/php-5.3 /etc/raddb/php.php %{User-Name}
> %{User-Password}"

  So... you're putting the password on the command line, and also using
getenv() to get it?

  I would suggest clarifying how PHP works.

>     input_pairs = request
>     output_pairs = reply
>     shell_escape = yes
> }

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html