Hi Tim, No "others" so I'll try. I assume that it should work like this: DEFAULT Auth-Type := System Fall-Through = Yes DEFAULT Auth-Type := LDAP I think that users will be checked against the system first and if not found against LDAP. Take this with a pinch of salt - I never used users file, System or LDAP, only MySQL. Ivan Kalik Kalik Informatika ISP Dana 12/3/2007, "Tim Tyler" <tyler@beloit.edu> piše:
Ivan, or others, Ok, I can't seem to find documentation on this. If I don't use the users file, I presume I should create the groups in the radiusd.conf file. How does one create a group for Students and Staff (syntax)? Can I assign Auth-Type = System for Staff and Auth-Type = LDAP for Staff and have a request against both groups? Note, there is no way ahead of time to distinguish between a user that is staff or student. So I need the solution to first check the system file and then check against ldap. Is there an example configuration somewhere I can follow that authenticates against a system file and ldap?
Tim
At 06:32 PM 3/9/2007, you wrote:
Don't put Auth-Type in users file. Make groups Students nad Staff, assign users to them and put the Auth-Type you want for that group as group check item.
Ivan Kalik Kalik Informatika ISP
Dana 9/3/2007, "Tim Tyler" <tyler@beloit.edu> piše:
Freeradius experts, I want to use one freeradius server to authenticate against a system file for students and against ldap for faculty/staff. I can get the system file to work alone. I can get the ldap module to work alone. But I can't seem to find a way to get both of them to work together. If I set DEFAULT Auth-Type = System in the users file, it authenticates the system files. If I set it to ldap, it authenticates to ldap. If I put both in the users file, it authenticates ldap users only. How do I allow both unix and ldap modules to authenticate their respective users? Note: users are unique to each module. A user in unix does not exist in ldap and vice versa.
Tim Tyler Network Engineer - Beloit College tyler@beloit.edu
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Tim Tyler Network Engineer - Beloit College tyler@beloit.edu
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html