John T. Guthrie wrote:
So are you saying that FreeRADIUS sometimes needs some assistance when dealing with authentication oracles? That is, it needs to be told when to use them?
Yes. The oracles are things like Kerberos, Active Directory, or a proxying to another RADIUS server. There is nothing in the RADIUS Access-Request that tells the server to use an oracle. There is nothing in a DB that tells the server how to authenticate the user. So the server has to be explicitly told "use this oracle".
Moreover, is the problem in this case how to tell FreeRADIUS about that without setting an explicit Auth-Type? From what you said above, it seems that is not likely.
Yes. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog