rlm_exec use

Alan DeKok aland at deployingradius.com
Thu Mar 20 09:28:50 CET 2008


T Kid82 wrote:
>>   Could you explain why you think that?  None of the documentation or
>>  default configuration files say that.  Note that the module return code
>>  "OK" or "success" does NOT mean "let the user in without checking their
>>  password".
> 
> That is a revelation to me.

  A simple explanation:  There are many modules that are executed for
each authentication request.  If "ok" meant "let the user in", then
*any* time a module worked, it would let the user in.  This just doesn't
make sense.

>>   You set Auth-Type just like setting any other attribute.  See "man
>>  unlang" for examples.
> 
> I will definitely look through the documentation. Is there a specfic
> Auth-Type that would be appropriate for my simple case. I guess what I
> am asking is, can you give me an example of an Auth-Type other than
> the Perl example?

  If you want your "exec" module to be run, create an Auth-Type for it.
 This is the purpose of the Auth-Type sub-sections of "authenticate".

  Alan DeKok.



More information about the Freeradius-Users mailing list