Greetings !! I am using freeradius 1.0.4 server. I am trying to achieve the following. The radius client is supposed to send username, password and a text (say, abc). The server is supposed to authenticate using the system /etc/passwd and shadow (which it does currently). Apart from this the server should take the text and find another matching text (abc -> xyz). If such a matching entry exists, the radius server should send the matching text (xyz, here) along with the Access packet, or else it should send Access Reject packet. This can be achieved if we are able to define new attributes (like `Framed-IP-Address'), in which case we can add an entry Check-Item="abc", Reply-Item="xyz" for a user in the users file. But, unfortunately there are no user-defined attributes that are permitted ! Is there any other way to get this done ? Thanks in advance. - Dinil
On Wed, 7 Dec 2005, Alan DeKok wrote:
Dinil Divakaran <dinil@lantana.tenet.res.in> wrote:
... for a user in the users file. But, unfortunately there are no user-defined attributes that are permitted !
Huh? What do you mean by that?
I want the client to send one attribute and the server should check and reply with a matching entry - not the ones already used by radius. To be more specific, the client will send a `key' to the server, the server should check (may be in a table) for the `key', and if found reply with another `key' to the client (very much similar to lookup function). I believe this `key' has to be an attribute if it has to be sent.
participants (2)
-
Alan DeKok -
Dinil Divakaran