Harry Hoffman wrote:
I'm following along with the docs for Autz-Type in freeradius-2.1.8, specifically the section about selecting between multiple instances of a module.
In 2.x, there are better ways to do this. See "man unlang" for conditionally calling a module.
In users.conf I have: DEFAULT Realm == "siteone.edu", Autz-Type := siteone_ldap, Auth-Type := siteone_ldap
Please don't say "users.conf". It's the "users" file. The issue is that 2.x has the "inner-tunnel" virtual server, and the documentation is left over from 1.1.x. The solution is instead to *not* use the "users" file. Instead, do: authorize { ... if (Realm == "siteone.edu") { siteone_ldap } ... } This will *also* have it automatically set "Auth-Type" to siteone_ldap, too. That's simpler than the "users" file entry, and gives less room for mistakes. Alan DeKok.