[PATCH] authenticate only service type

[Muhammad Tayseer Alquoatli]

On 4/25/07, Frank Cusack <fcusack at fcusack.com> wrote:
>
> On April 25, 2007 3:05:54 PM -0400 Kevin Bonner <keb at pa.net> wrote:
> > On Wednesday 25 April 2007 04:35:13 Muhammad Tayseer Alquoatli wrote:
> >> Hi list:
> >> I've been working hard to let freeradius handles "Service-Type =
> >> AUTHENTICATE_ONLY" the proper way, but i couldn't achieve that till
> >> I've changed two lines in the source code
> >> with you this patch freeradius understands AUTHENTICATE_ONLY and
> >> doesn't complain about it, but handles it as all other service types
> >> (i.e. runs the post-auth module and sets network configuration in the
> >> reply) while it must only authenticate the user and returns a network
> >> configuration free accept/reject reply
> >> the patch below could be applied to freeradius-1.1.6
> >> Best regards
> >
> > I'm receiving Authenticate-Only requests and FreeRADIUS doesn't
> complain.
> >  What errors are you seeing?  Would attr_filter be able to strip all
> > unwanted  attributes for you, instead of making code modifications?
>
> I'll second that.  I can't imagine any case where configuration alone,
> using the existing code, can't make it work.


Thank you, I maybe miss some  configuration, but I'm not saying that
freeradius is complaining about receiving and Authenticate-Only service
type, but i'm saying its handling it the same way as a framed-user service
type.
I'm expecting FreeRadius to just authenticate me and not give me an IP
address if "Authenticate-Only" service type is desired, but freeradius is
always reserving an IP address for me even if Service-Type=Authenticate-Only
and this what i couldn't change without code modification
I hope I've made it clear, and i appreciate sending me the appropriate
configuration if anyone could send FreeRadius an access-request where
Service-Type=Authenticate-Only is set and receive just an access-reject or
access-accept without any network configuration returned in the reply
Thanks a lot


-- 
Muhammad Tayseer Alquoatli
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20070426/ad8c0f8e/attachment.html>