On 09/10/12 14:47, Thomas Raabo - Zitcom A/S wrote:
Here is my External module
exec MOTP { wait = yes program = "/etc/raddb/otpverify.sh %{User-Name} %{User-Password} %{reply:Secret} %{reply:Pin} %{reply:Offset}"
What do you think that does? What is "reply:Secret" and "reply:Pin" ?
-Well a select is done on radcheck for the user name. I would think that output_pairs would be filled with attributes from radcheck?
No. This is not how it works. radcheck pairs are *compared* against the request. Certain special pairs assume that "comparison" means "add me to the control list". But radcheck pairs are NEVER added to the reply. radreply pairs are added to the reply. Hence the name.
ATTRIBUTE Secret 3001 string ATTRIBUTE Pin 3002 string ATTRIBUTE Offset 3003 string
That is better. But you still need to actually populate them, which will entail moving the pairs from radcheck to radreply.