users-file overruling anything else UPDATE

florian.prester Florian.Prester at rrze.uni-erlangen.de
Fri Oct 6 16:04:43 CEST 2006


Hi,

I am using freeradius+perl+ldap.
Meaning for every request I get the users information from a
LDAP-Server, run it through some perl-code to distinguish some users
form others for some reason (:-)).

Now my problem are users not listed in the ldap-system. I want to use
the  users-file to overrule the ldap-system. Meaning if a user is found
in the users-file and the password matches, ignore everything else.

I think I had it working already, but somehow it does not work anymore! :-(

My authorization-section looks as follows:
authorize {
     preprocess
     chap
     mschap
     eap
        #
        #  Read the 'users' file
        files
       #
       #  The ldap module will set Auth-Type to LDAP if it has not
       #  already been set
        ldap  # needed to get user information
        perl  # needed to twist the users a little bit :-)
}

my users-file is standard, containing:
"help"     Auth-Type := Local, User-Password == "support"
                       Idle-Timeout := 30

UPDATE:
Maybe my perl-code is the problem, because I do a REJECT by the 
Perl-module if the user is not found in the LDAP!
Hm, I should not do that, should I? I can grant access, but I should not 
deny it, if want to grant it later?!


Thanks for your help,
Florian  Prester




More information about the Freeradius-Users mailing list