Possible to limit user access to different types of authentication?

[Alan DeKok]

Ryan wrote:
> Did some further searching on the listing and noticed that it is
> possible to do a string compared in the authorize and authenticate
> sections.

$ man unlang

> However running radius in debug mode will return the following error.
> 
> (Attribute Cisco-AVPair was not found)

  Because the attribute isn't in the request.  Go look at the packet
that the server received.  There is no such attribute in it.

> I know that it is possible to match the Cisco-AVPair in the users
> file. Can we do the same in the authorize/authenticate sections as
> well?

  Yes.  This is documented in the "unlang" man page.  But if the
attribute isn't in the request, you can't compare it to anything.

  Alan DeKok.