How EAP module set the Auth-Type to EAP when using rlm_sim_file module?
Hi, all I am using rlm_sim_file module to perform the authorization function, so I have to add "sim_file" before "eap" in the authorize{} of radiusd.conf. In general, the authorization function can set the "Auth-Type" automatically, such as rlm_file or rlm_sql. But I find that the rlm_sim_file does not do that. In the rlm_sim_triplets of Doc, it says that :If this module is successful at retrieving three sets of triplets, then the EAP-Type: attribute will be set to SIM. The EAP module itself will set the Auth-Type to EAP when it sees the EAP-Message attribute. I only find that Auth-Type is set in the eap_authorize function. In my opinion, if rlm_sim_file is used, the eap_authorize will not be executed. So , I do not know how Auth-Type is set to EAP when using rlm_sim_file module? Best wishes! Lishuai.zhao
lishuai zhao wrote:
Hi, all I am using rlm_sim_file module to perform the authorization function, so I have to add "sim_file" before "eap" in the authorize{} of radiusd.conf. In general, the authorization function can set the "Auth-Type" automatically, such as rlm_file or rlm_sql. But I find that the rlm_sim_file does not do that.
Because it doesn't do authentication.
In the rlm_sim_triplets of Doc, it says that :If this module is successful at retrieving three sets of triplets, then the EAP-Type: attribute will be set to SIM. The EAP module itself will set the Auth-Type to EAP when it sees the EAP-Message attribute.
I only find that Auth-Type is set in the eap_authorize function. In my opinion, if rlm_sim_file is used, the eap_authorize will not be executed.
So , I do not know how Auth-Type is set to EAP when using rlm_sim_file module?
It doesn't happen. You have to use the EAP module. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Thank you, Alan.
lishuai zhao wrote:
Hi, all I am using rlm_sim_file module to perform the authorization function, so I have to add "sim_file" before "eap" in the authorize{} of radiusd.conf. In general, the authorization function can set the "Auth-Type" automatically, such as rlm_file or rlm_sql. But I find that the rlm_sim_file does not do that.
Because it doesn't do authentication.
I know that rlm_sim_files is an authorization only module, and it doesn't do authentication.
In the rlm_sim_triplets of Doc, it says that :If this module is successful at retrieving three sets of triplets, then the EAP-Type: attribute will be set to SIM. The EAP module itself will set the Auth-Type to EAP when it sees the EAP-Message attribute.
I only find that Auth-Type is set in the eap_authorize function. In my opinion, if rlm_sim_file is used, the eap_authorize will not be executed.
So , I do not know how Auth-Type is set to EAP when using rlm_sim_file module?
It doesn't happen. You have to use the EAP module.
If I use rlm_sim_files module through adding "sim_files" before "eap" in authorize {} of radiusd.conf, eap module's authorization component will not be called, am I right? If I am right, how can I use EAP module's authorization component to set Auth-Type when using rlm_sim_files? Waiting for your reply. Thank you! Lishuai.Zhao
lishuai zhao wrote:
If I use rlm_sim_files module through adding "sim_files" before "eap" in authorize {} of radiusd.conf, eap module's authorization component will not be called, am I right?
Yes.
If I am right, how can I use EAP module's authorization component to set Auth-Type when using rlm_sim_files?
The EAP module will do that for you. I don't understand why there is a problem. Just configure it as you said, and it will work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
participants (2)
-
Alan DeKok -
lishuai zhao