DEFAULT and users file

[Alan DeKok]

Erico Augusto wrote:
> Hi,
> 
> I'm using EAP-TTLS to supplicant authentication.
> 
> to authenticate the users at freeradius, I'm using users file to match
> user's password:
> ....
> user       User-Password == "test"
>               Reply-Message = "success"

  No.  Do NOT match the users password.  Instead, tell the server what
the correct password is, and it will figure out what to do.

user	Cleartext-Password := "test"
	...


> Is there a way, using DEFAULT, for example, to return success to all
> users without the necessity to match the User-Password(bypass freeradius
> authentication). What I'm trying to do is authenticate users just at
> post-auth. I'm using some examples from doc directory, but without
> success...

  You can't authenticate users at post-auth.  And if you're using EAP,
you can't just return "success", because part of EAP involves validating
the password.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog