On 14 Sep 2011, at 03:27, 2394263740 wrote:
Arran,
I'm using PEAP. Do you have any suggestion to grant access?
PEAP uses MSCHAPv2 as the inner method, and MSCHAPv2 requires that the client and the server both know the password, else authentication will fail. One option is to set some static credentials for when the database is offline. But honestly that'll just cause more trouble, because A) Users won't remember what the emergency credentials were, and B) even if they do enter the new password, half of them will screw up re-entering their original password when the service returns to normal. You could also dump the list of SQL users out into a password file and use that instead? Same syntax that I posed before, but change:
update control { Auth-Type := 'Accept' }
To an instance of the password module. -Arran
Thanks!
------------------ Original ------------------ From: "freeradius-users"<freeradius-users-request@lists.freeradius.org>; Date: Tue, Sep 13, 2011 11:59 PM To: "freeradius-users"<freeradius-users@lists.freeradius.org>; Subject: Freeradius-Users Digest, Vol 77, Issue 50
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Grant Access ( 2394263740 ) 2. Re: Grant Access (Arran Cudbard-Bell) 3. Quick enable/disable user account. ( 2394263740 ) 4. Re: Quick enable/disable user account. (Alan DeKok) 5. Re: Quick enable/disable user account. (Arran Cudbard-Bell) 6. RE: Quick enable/disable user account. (Tim Sylvester)
----------------------------------------------------------------------
Message: 1 Date: Tue, 13 Sep 2011 23:07:31 +0800 From: " 2394263740 " <2394263740@qq.com> Subject: Grant Access To: " freeradius-users " <freeradius-users@lists.freeradius.org> Message-ID: <tencent_1ABBB04B470455063AD97831@qq.com> Content-Type: text/plain; charset="iso-8859-1"
Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql
When the system goes wrong, I would like temporary grant all access request.
Which means during the service is down, any username/password will be grant access.
Can you please advise the solution?
Thanks!
Tom