Authenticate users getting data from two different Data Sources
Hi list I 'd like to deploy FR to authenticate users, but I need FR to build the Authentication reply grabbing/merging info from two different data sources: - user/password checking -> from LDAP server - IP address assignment, DNS servers, etc -> from MySQL server Once FR has info from these two data sources, it should send the Access Reply... Is this config possible? Thanks in advance, M.
On 20 January 2020 10:41:48 GMT, "Ja. C.A." <magicboiz@hotmail.com> wrote:
- user/password checking -> from LDAP server - IP address assignment, DNS servers, etc -> from MySQL server
Once FR has info from these two data sources, it should send the Access Reply...
Is this config possible?
Sure. Use the ldap module to look up the password for checking and call 'ldap' in the authorize{} section. Configure the sql / sqlippool module and call in post_auth to allocate IPs. -- Matthew
Hi Matthew is it possible for sql/sqlippool modules to add some Vendor Specific Attributes (VSA) in the post-auth call?? Thanks, M. On 20/1/20 12:57, Matthew Newton wrote: On 20 January 2020 10:41:48 GMT, "Ja. C.A." <magicboiz@hotmail.com><mailto:magicboiz@hotmail.com> wrote: - user/password checking -> from LDAP server - IP address assignment, DNS servers, etc -> from MySQL server Once FR has info from these two data sources, it should send the Access Reply... Is this config possible? Sure. Use the ldap module to look up the password for checking and call 'ldap' in the authorize{} section. Configure the sql / sqlippool module and call in post_auth to allocate IPs.
On 20 January 2020 12:32:47 GMT, "Ja. C.A." <magicboiz@hotmail.com> wrote:
is it possible for sql/sqlippool modules to add some Vendor Specific Attributes (VSA) in the post-auth call??
Yes. Look at the rlm_sql documentation and the SQL schemas. You can also use the SQL xlat in an update section if it is more appropriate. -- Matthew
participants (2)
-
Ja. C.A. -
Matthew Newton