Using multiple authentication modules.
Hello everyone, I am trying to authenticate users using client certificates and when that is verified I intend to use perl module for checking other attributes and verify that from database. Till now I was trying to configure freeradius to do EAP-TLS and then execute the perl module(rlm_perl). Both of them work perfectly fine independently but I donot know if we can put them together. I believe I can do something similar(checking certificate using EAP and then execute a script) using exec-program-wait but considering its depricability and per thread overhead will like the rlm_perl. Any help is appreciated. Regards, Kumar Mrinal
Mrinal K <sinha.mrinal@gmail.com> wrote:
I am trying to authenticate users using client certificates and when that is verified I intend to use perl module for checking other attributes and verify that from database. Till now I was trying to configure freeradius to do EAP-TLS and then execute the perl module(rlm_perl). Both of them work perfectly fine independently but I donot know if we can put them together. I believe I can do something similar(checking certificate using EAP and then execute a script) using exec-program-wait but considering its depricability and per thread overhead will like the rlm_perl.
Without including your FreeRADIUS configuration there is very little anyone here can do to help you other than ask have you just tried using both modules? ---- authorize { ... eap perl ... } authenticate { eap perl } ---- Cheers -- Alexander Clouter .sigmonster says: Yow! Is my fallout shelter termite proof?
Thanks you Alexander for the reply. Yes I had all the configuration done for the modules and they worked fine independently. For using multiple modules, in users file I was trying to do DEFAULT Auth-Type := Perl Auth-Type := EAP Which was giving me error because I was accessing run time variables from EAP in rlm_perl which was wrong. Now I am doing, DEFAULT Auth-Type := EAP Auth-Type := Perl Which works like a charm. Thank you once again. On Thu, Aug 4, 2011 at 5:27 AM, Alexander Clouter <alex@digriz.org.uk>wrote:
Mrinal K <sinha.mrinal@gmail.com> wrote:
I am trying to authenticate users using client certificates and when that is verified I intend to use perl module for checking other attributes and verify that from database. Till now I was trying to configure freeradius to do EAP-TLS and then execute the perl module(rlm_perl). Both of them work perfectly fine independently but I donot know if we can put them together. I believe I can do something similar(checking certificate using EAP and then execute a script) using exec-program-wait but considering its depricability and per thread overhead will like the rlm_perl.
Without including your FreeRADIUS configuration there is very little anyone here can do to help you other than ask have you just tried using both modules? ---- authorize { ...
eap
perl
... }
authenticate { eap perl } ----
Cheers
-- Alexander Clouter .sigmonster says: Yow! Is my fallout shelter termite proof?
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- -
participants (2)
-
Alexander Clouter -
Mrinal K