Jevos, Peter wrote:
I have in the modules/ntlm_auth_vpn command: .. Is it possible to add another command ( with different domain ) and to add OR in order to choose which one will pass ?
Something like this:
exec ntlm_auth_vpn { program = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain} --username=%{mschap:User-Name} --password=%{User-Password} --require-membership-of=domain1"
OR
program = "/usr/bin/ntlm_auth --request-nt-key --domain=%{mschap:NT-Domain} --username=%{mschap:User-Name} --password=%{User-Password} --require-membership-of=domain2"
}
It means that auth-type ntml_auth_vpn is right if one of these command will pass
You can write a shell script to do that. There's no need to do anything in the server. #1/bin/sh /usr/bin/ntlm_auth ... if [ "$?" = "0"]; then ... Alan DeKok.