Same file above:
Authorize { update control { Auth-Type := `bash /opt/verify_date.sh '%{User-Name}'` } }
Content of “verify_date.sh” file is an ldapsearch with filters to return the values of “expiredate” or “userenabled” with “if” statements to check the results, my question is:
How can I work with the results of this script to allow or deny access to networks?
Well if you're intent on ABSOLUTELY CRIPPLING THE PERFORMANCE OF THE RADIUS SERVER FOR NO GOOD REASON, then call the exec module instead of using backticks. Different exit codes map to different FreeRADIUS rcodes. See raddb/mods-available/echo for the mappings. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2