Want to set Auth-Type to pam if Auth-type ist unset

Hans-Peter Fuchs Fuchs at rrz.uni-koeln.de
Mon May 5 17:30:37 CEST 2008


freeradius-2.0.4 under rhel el 5.

If no module sets Auth-Type I want it to set to: pam.

Config:

authorize {

	...
	        eap {
                ok = return
        }

        #
        #  Pull crypt'd passwords from /etc/passwd or /etc/shadow,
        #  using the system API's to get the password.  If you want
        #  to read /etc/passwd or /etc/shadow directly, see the
        #  passwd module in radiusd.conf.
        #
#       unix

        #
        #  Read the 'users' file
        files
	pap
       if (Control:Auth-type == "") {
                       update control {
                               Auth-Type := pam
                       }
       }


authenticate {
        #
        #  PAP authentication, when a back-end database listed
        #  in the 'authorize' section supplies a password.  The
        #  password can be clear-text, or encrypted.
       Auth-Type PAP {
                pap
       }
        Auth-Type CHAP {
                chap
        }
...
        Auth-Type pam {
                pam
        }


radiusd -X show that even if no authetication method is found the
condition is not empty.
++? if ('%{Control:Auth-type}' == "")
? Evaluating ('%{Control:Auth-type}' == "") -> FALSE
++? if ('%{Control:Auth-type}' == "") -> FALSE
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.

Do you have a suggestion?

Thank You for Your time.



-- 
Grüße

Hans-Peter Fuchs

Hans-Peter Fuchs - RRZK Zimmer 20
Zentrum für angewandte Informatik - Universitätsweiter Service RRZK
Universität zu Köln - Tel: 0221-470-6972





More information about the Freeradius-Users mailing list