FreeRadius different authorization and authentication methods

Jason Carr jcarr at andrew.cmu.edu
Tue Aug 30 20:13:17 CEST 2005


Alan DeKok wrote:
> Jason Carr <jcarr at andrew.cmu.edu> wrote:
> 
>>I'm attempting to use a FreeRadius server for authentication of wireless
>> using 802.1x.  I would also like to use a SQL database for
>>authorization.  I've done some limited testing without success.  It
>>looks like the authorization method also is the authentication method,
> 
> 
>   No, they're completely independent.
> 
> 
>>for example if I use sql for the authorization and eap for the
>>authentication, the authentication request fails:
>>
>>modcall[authorize]: module "sql" returns ok for request 1
>>modcall: group authorize returns ok for request 1
>>auth: type Local
> 
> 
>   Don't set "Auth-Type := Local".
> 
>   The server doesn't do this by default, so it must be something in
> your site's configuration.
> 
>   Alan DeKok.
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 

I grepped for local in the raddb directory, and I'm not seeing anything
related to Auth-Type := Local in any config file.  I saw that I'm not
supposed to explicitly define Auth-Type := EAP, but perhaps this is what
I want?

-- 
Jason Carr
Carnegie Mellon University
Network Development



More information about the Freeradius-Users mailing list