tbsky@annsky.us wrote:
i use eap-peap-mschapv2, and it was success. i can authenticate users via "users" file and i can authenticate users via winbind+windows 2000 ad server. the next step i want to do is mix both "users" and "windows 2000 ad" as authentication source, but i don't know how to do it.
What do you mean "mix" the two?
sorry i didn't clearify my question. mix the source means if windows wireless client enter a peap username and password, freeradius would first check windows domain via "ntlm_auth" program, if that fails, check the "users" file. any of them suceess, freeradius would give Access-accept.
i try to create two "mschap" modules, "mschap-1" and "mschap-2". but i found that the "mschapv2" module internally look at the module named "mschap", so the two modules i create are useless.
You're also not saying *why* you created two modules, or how creating two modules would help.
sorry again. i create two modules because i want to create a "redudant module" like the "sql1" and "sql2" example in freeradius "configurable_failover" document. but i found that i can not tell "mschapv2" module to use them, since "mschapv2" want only "mschap" internally. in my first thought, i create two "mschap" modules. mschap-1 use "ntlm_auth" to authenticate user. mschap-2 use "users" file to authenticate user. now if i can tell freeradius "mschapv2" to use the "mschap-1" and "mschap-2" as failover redudant, then i can solve my problem. but i don't know how to do. thanks a lot for ur help!!! Best Regards, sky_li