-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, - From a typical radiusd.conf: authenticate { Auth-Type PAP { pap } ... snip ... eap } Why the "Auth-Type PAP { }" construct? I tried RTFM and RTFC, but I have not seen an actual description of why that is there. From the "authenticate" radiusd.conf documentation: # Note that it does NOT mean 'try each module in order'. It means # that a module from the 'authorize' section adds a configuration # attribute 'Auth-Type := FOO'. That authentication type is then # used to pick the apropriate module from the list below. So why specify "Auth-Type PAP { pap }" at all if the system will select authentication 'pap' when Auth-Type == PAP? Thanks, - -- ============== +----------------------------------------------+ Martin Gadbois | "Windows might take you from 0 to 60 faster, | S/W Developer | but to go to 100 you need Unix." | Colubris Networks Inc. +----------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFbIvs9Y3/iTTCEDkRAqf0AJ9Phxbej5KtfSVULJwtCnmMV1GbjACeJbGO aDtM2jrSJ+rO5zgGLbrJu5U= =q6pD -----END PGP SIGNATURE-----
Martin Gadbois <martin.gadbois@colubris.com> wrote:
Why the "Auth-Type PAP { }" construct? I tried RTFM and RTFC, but I have not seen an actual description of why that is there.
It's not strictly necessary, but it doesn't hurt to have it. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alan DeKok wrote:
Martin Gadbois <martin.gadbois@colubris.com> wrote:
Why the "Auth-Type PAP { }" construct? I tried RTFM and RTFC, but I have not seen an actual description of why that is there.
It's not strictly necessary, but it doesn't hurt to have it.
Does it mean if(Auth-Type == PAP) then { call pap } ? Is it general purpose? Could I do "Group == "staff" { pap }" in the authenticate {} section? Could you give me a function name in the source where this is done? (I like to RTFC!) Thanks! - -- ============== +----------------------------------------------+ Martin Gadbois | "Windows might take you from 0 to 60 faster, | S/W Developer | but to go to 100 you need Unix." | Colubris Networks Inc. +----------------------------------------------+ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFbZH19Y3/iTTCEDkRAssbAJ4oVPsDLGI2xeMJUdDdiBYE5Q2k7gCfW6W+ MpY30iG/NGAlrb+bgBrcbCg= =5ra6 -----END PGP SIGNATURE-----
Martin Gadbois wrote:
Does it mean if(Auth-Type == PAP) then { call pap } ?
No. When the "authenticate" section is run, the Auth-Type is used to choose a particular module or section. It is NOT more general than that.
Is it general purpose? Could I do "Group == "staff" { pap }" in the authenticate {} section?
No.
Could you give me a function name in the source where this is done? (I like to RTFC!)
src/main/modules.c && src/main/modcall.c Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
Martin Gadbois