Greetings. I am using freeradius and want to do the following: 1. proxy authentication to a secondary server for two-factor authentication 2. if the user is authenticated via the home server, add attributes via definitions from the local freeradius server from a sql database I can do either 1 or 2, but have not figured out how to get both to work. Can someone point me in the right direction? Sorry if this is a noob question and I am missing the obvious
freeradius@reshetar.us wrote:
Greetings. I am using freeradius and want to do the following: 1. proxy authentication to a secondary server for two-factor authentication 2. if the user is authenticated via the home server, add attributes via definitions from the local freeradius server from a sql database
See postauth_query. Alan DeKok.
freeradius@reshetar.us wrote:
Greetings. I am using freeradius and want to do the following: 1. proxy authentication to a secondary server for two-factor authentication 2. if the user is authenticated via the home server, add attributes via definitions from the local freeradius server from a sql database
See postauth_query.
Alan DeKok.
From what I can tell, that only enters accounting data into the database. is there something I am missing?
The other thing I don't get: I ran radiusd in debug mode, and saw the following line: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'xxxxx' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id This query select the attributes that I want to have sent back. However, the reply detail logs show that the attributes are not sent. The only thing I can think of is that the user I am testing with is a memmber of several groups and only one of them has attributes to return at the moment. Thanks
participants (2)
-
Alan DeKok -
freeradius＠reshetar.us