Force Auth-Type

[Alan DeKok]

Markus Moeller wrote:

>>  if ("%{ldap: stuff... }" == "bar") {
>> ...
> I didn't know that is possible. Where is this documented ? I thought I
> read all FAQ and documentations.

  It's not really well documented, because it's not well tested.  If it
works, great.  If not...

> The other questions I have is about the AV pairs used. As far as I
> understand freeradius uses request, reply, check_tmp, internal only AV
> pairs. Is there a document which module uses which for what purpose ?

  doc/aaa.txt

> Is there a process flow diagram somewhere describing how freeradius works ?

  Nope.

> I understand
> 1)client -> server sends a request AV pair
> 2) server processes first authorisation modules and if fails end ?
> 3) server processes authentication modules and if fails end ?
> 4) server -> client sends reply AV pair
> 
> What is the use of check(item) AV  pairs ? Is it to communicate between
> modules ?

  Among other things.  It's for things associated with the request that
don't need to go into a packet.

  Alan DeKok.