Freeradius + External PHP script

[J Doe]

1. Freeradius calls the external script for validating username/password
2. If the credentials are ok, script returns ok, else fail
3. If the credentials are ok, script also needs to provide a few attributes along with the Access-Accept packet (based on username)

How can this be achieved?

(in example of using EAP/TTLS)

I guess modifying only 3 files is enough...

*radiusd.conf*
exec php {
  wait = yes
  program = "/usr/bin/php -f myscript.php"
  input_pairs = request
  output_pairs = reply
}

and the other two are sites-enabled/inner_tunnel & users?

Is it possible to do it with 1 script? Or there needs to be a special script for user/pass validation and another one for getting attributes?
 		 	   		  
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=60969