Problem writing config attributes from script
Ignacio DelTroo
deltroo at gmail.com
Wed Dec 21 01:14:19 CET 2005
I'm trying to write an external script for authorization (rlm_exec)
I want this script to pass some attributes (beyond clear text
Password) in the config attributes, so that another post-auth external
script can re-use this information without re-querying the database.
It seems that my authorization script cannot write anything beyond
Password. IT works fine when it justs output PAssword="XXXX".
For instance, if it writes Post-Auth-Type= create_prepaid_account and
Password = "XXX" to config attributes, the chap authentication
modules does not get anything (log says clear text password not
available)
Relevant parts of radiusd.conf
=========================================================
modules {
........
exec dump {
wait = yes
program = "/etc/raddb/scripts/dump %{User-Name}"
input_pairs = config
output_pairs = reply
packet_type = Access-Request
}
exec authorize_prepaid_account {
wait = yes
program = "/etc/raddb/scripts/authorize %{User-Name}"
output_pairs = config
packet_type = Access-Request
}
exec create_prepaid_account {
wait = yes
program = "/etc/raddb/scripts/new %{User-Name}"
input_pairs = config
output_pairs = reply
packet_type = Access-Request
}
}
authorize {
preprocess
auth_log
chap
mschap
authorize_prepaid_account
files
sql
dump
}
authenticate {
Auth-Type PAP { pap }
Auth-Type CHAP { chap }
Auth-Type MS-CHAP { mschap }
unix
}
post-auth {
reply_log
create_prepaid_account
}
=========================================================
What am I doing wrong ?
Thanks for your help.
Yannick Deltroo
More information about the Freeradius-Users
mailing list