Ok, Here's what I did: 1. I've removed all the rlm_perl configurations from the radiusd.conf file, and enabled the digest authentication back. 2. I've added to my users file the following lines: 101@192.168.2.80 Auth-Type := Digest, User-Password == "101" Reply-Message = "Authenticated" 102@192.168.2.80 Auth-Type := Digest, User-Password == "102" Reply-Message = "Authenticated" test@192.168.2.80 Auth-Type := Digest, User-Password == "test" Reply-Message = "Authenticated" Now, when I try to authorize on FreeRadius, i'm getting the following: modcall: entering group authenticate for request 1 rlm_digest: Configuration item "User-Password" or Digest-HA1 is required for authentication. modcall[authenticate]: module "digest" returns invalid for request 1 modcall: leaving group authenticate (returns invalid) for request 1 I'm using version 1.1.7pre3 Z2L ----- Original Message ----- From: "Alan DeKok" <aland@deployingradius.com> To: freeradius@zap2link.com, "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: 20:59:53 (GMT+0200) Asia/Jerusalem יום שלישי 17 יולי 2007 Subject: Re: RLM_PERL Integration Issue FreeRadius-ML wrote:
Well, the perl script is currently setup to return OK on every request.
Which won't work for digest authentication. Please see the "sterman" draft distributed in doc/rfc/
I had enabled the perl section in the authentication part of the configuration, I'm not that dimwitted.
That's nice. Enabling it is one thing. Telling the server to *use* it is another.
Essentially, I need to work with rlm_perl because I don't want to use user flat files or an SQL, as my end target is to authenticate to some propietary system that we've developed here.
Then you're doing it wrong. List the "digest" module in "authorize" and "authenticate". Then, have the perl authorize function set Cleartext-Password, as suggested in the FAQ. Once that's done, you don't *need* a Perl "authenticate" function. As I said a few messages ago: 1) Get digest working 2) Get Perl working You're still insisting on trying to do both at once. That's why it isn't working. Alan DeKok.