Want to set Auth-Type to pam if Auth-type ist unset
freeradius-2.0.4 under rhel el 5. If no module sets Auth-Type I want it to set to: pam. Config: authorize { ... eap { ok = return } # # Pull crypt'd passwords from /etc/passwd or /etc/shadow, # using the system API's to get the password. If you want # to read /etc/passwd or /etc/shadow directly, see the # passwd module in radiusd.conf. # # unix # # Read the 'users' file files pap if (Control:Auth-type == "") { update control { Auth-Type := pam } } authenticate { # # PAP authentication, when a back-end database listed # in the 'authorize' section supplies a password. The # password can be clear-text, or encrypted. Auth-Type PAP { pap } Auth-Type CHAP { chap } ... Auth-Type pam { pam } radiusd -X show that even if no authetication method is found the condition is not empty. ++? if ('%{Control:Auth-type}' == "") ? Evaluating ('%{Control:Auth-type}' == "") -> FALSE ++? if ('%{Control:Auth-type}' == "") -> FALSE auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Do you have a suggestion? Thank You for Your time. -- Grüße Hans-Peter Fuchs Hans-Peter Fuchs - RRZK Zimmer 20 Zentrum für angewandte Informatik - Universitätsweiter Service RRZK Universität zu Köln - Tel: 0221-470-6972
Have you tried if (!control:Auth-Type) { Jim L. ----- Original Message ----- From: "Hans-Peter Fuchs" <Fuchs@rrz.uni-koeln.de> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, May 05, 2008 11:30 AM Subject: Want to set Auth-Type to pam if Auth-type ist unset
freeradius-2.0.4 under rhel el 5.
If no module sets Auth-Type I want it to set to: pam.
Config:
authorize {
... eap { ok = return }
# # Pull crypt'd passwords from /etc/passwd or /etc/shadow, # using the system API's to get the password. If you want # to read /etc/passwd or /etc/shadow directly, see the # passwd module in radiusd.conf. # # unix
# # Read the 'users' file files pap if (Control:Auth-type == "") { update control { Auth-Type := pam } }
authenticate { # # PAP authentication, when a back-end database listed # in the 'authorize' section supplies a password. The # password can be clear-text, or encrypted. Auth-Type PAP { pap } Auth-Type CHAP { chap } ... Auth-Type pam { pam }
radiusd -X show that even if no authetication method is found the condition is not empty. ++? if ('%{Control:Auth-type}' == "") ? Evaluating ('%{Control:Auth-type}' == "") -> FALSE ++? if ('%{Control:Auth-type}' == "") -> FALSE auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user.
Do you have a suggestion?
Thank You for Your time.
-- Grüße
Hans-Peter Fuchs
Hans-Peter Fuchs - RRZK Zimmer 20 Zentrum für angewandte Informatik - Universitätsweiter Service RRZK Universität zu Köln - Tel: 0221-470-6972
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hans-Peter Fuchs wrote:
freeradius-2.0.4 under rhel el 5.
If no module sets Auth-Type I want it to set to: pam. ... if (Control:Auth-type == "") { ... radiusd -X show that even if no authetication method is found the condition is not empty. ++? if ('%{Control:Auth-type}' == "")
That isn't what you typed above. - use the example suggested earlier - single quotes mean it does *not* expand the string. See "man unlang". This is how single quotes work in most interpret languages.
Do you have a suggestion?
Make sure you're using the config files you think you're using. Alan DeKok.
participants (3)
-
Alan DeKok -
Hans-Peter Fuchs -
Jim L.