I've checked and I'm not using that attribute. I checked the dictionary and it appears as if the attribute "EAP-Type" is what I'm looking for. However, it's an integer attribute and there is no information on what integer TTLS and PEAP are configured as. So I can't really guess at it. Is there anymore information about this attribute? Nathan Van Fleet
-----Original Message----- From: freeradius-users- bounces+nmcdavit=alcor.concordia.ca@lists.freeradius.org [mailto:freeradius-users- bounces+nmcdavit=alcor.concordia.ca@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Monday, September 14, 2009 5:05 PM To: FreeRadius users mailing list Subject: Re: Using Attributes to differentiate between different EAP types
So I�m pretty sure the simplest fix is to just have a if operator and for something like
If(rlm_eap_type == �EAP/TTLS�)
{ ldap_myconfig}
Check that you haven't enabled access attribute in ldap configuration. That will reject users not in ldap.
The only problem is that I have not seen any such attribute for freeradius. I figure there should very well be something akin to that as
a
run time variable correct?
Have a look in dictionary.freeradius.internal.
Ivan Kalik Kalik Informatika ISP
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html