Question about processing multiple authorization sources

Will Saxon WillS at housing.ufl.edu
Thu Mar 16 20:48:33 CET 2006


Replying to my own post...

On Thu, 2006-03-16 at 11:25 -0500, Will Saxon wrote:

> Is it possible to have FreeRADIUS check a separate user database to
> provide the additional attributes? It seems like I could write a script
> to take the username, perform some database queries and return the
> appropriate information, but beyond that I don't know how to go about
> implementing such a solution. 


Nevermind, I have figured it out.

You just have to set up the sql module and insert it after the ldap
module in the authorize stanza. The user has to exist in the radcheck
table and have the 3 attributes (tunnel-type, tunnel-medium-type and
tunnel-private-group-id) set in the radreply table.

-Will

-- 
Will Saxon
Systems Programmer - Network Services
University of Florida Department of Housing



More information about the Freeradius-Users mailing list