rlm_exec use
Alan DeKok
aland at deployingradius.com
Thu Mar 20 09:28:50 CET 2008
T Kid82 wrote:
>> Could you explain why you think that? None of the documentation or
>> default configuration files say that. Note that the module return code
>> "OK" or "success" does NOT mean "let the user in without checking their
>> password".
>
> That is a revelation to me.
A simple explanation: There are many modules that are executed for
each authentication request. If "ok" meant "let the user in", then
*any* time a module worked, it would let the user in. This just doesn't
make sense.
>> You set Auth-Type just like setting any other attribute. See "man
>> unlang" for examples.
>
> I will definitely look through the documentation. Is there a specfic
> Auth-Type that would be appropriate for my simple case. I guess what I
> am asking is, can you give me an example of an Auth-Type other than
> the Perl example?
If you want your "exec" module to be run, create an Auth-Type for it.
This is the purpose of the Auth-Type sub-sections of "authenticate".
Alan DeKok.
More information about the Freeradius-Users
mailing list