Problem writing config attributes from script

Ignacio DelTroo deltroo at gmail.com
Wed Dec 21 01:14:19 CET 2005


I'm trying to write an external script for authorization (rlm_exec)
I want this script to pass some attributes (beyond clear text
Password) in the config attributes, so that another post-auth external
script can re-use this information without re-querying the database.

It seems that my authorization script cannot write anything beyond
Password. IT works fine when it justs output PAssword="XXXX".
For instance, if it writes Post-Auth-Type= create_prepaid_account and
Password = "XXX"  to config attributes, the chap authentication
modules does not get anything (log says clear text password not
available)

Relevant parts of radiusd.conf
=========================================================
modules {
   ........
 exec dump {
    wait = yes
    program = "/etc/raddb/scripts/dump %{User-Name}"
    input_pairs = config
    output_pairs = reply
    packet_type = Access-Request
 }

 exec authorize_prepaid_account {
    wait = yes
    program = "/etc/raddb/scripts/authorize %{User-Name}"
    output_pairs = config
    packet_type = Access-Request
 }

 exec create_prepaid_account {
    wait = yes
    program = "/etc/raddb/scripts/new %{User-Name}"
    input_pairs = config
    output_pairs = reply
    packet_type = Access-Request
 }
}

authorize {
 preprocess
 auth_log
 chap
 mschap
 authorize_prepaid_account
 files
 sql
 dump
}

authenticate {
 Auth-Type PAP { pap }
 Auth-Type CHAP {  chap }
 Auth-Type MS-CHAP {  mschap }
 unix
}


post-auth {
 reply_log
 create_prepaid_account
}

=========================================================

What am I doing wrong ?
Thanks for your help.

Yannick Deltroo




More information about the Freeradius-Users mailing list