Using multiple authentication modules.
Mrinal K
sinha.mrinal at gmail.com
Tue Aug 9 10:35:42 CEST 2011
Thanks you Alexander for the reply. Yes I had all the configuration done for
the modules and they worked fine independently.
For using multiple modules, in users file I was trying to do
DEFAULT Auth-Type := Perl
Auth-Type := EAP
Which was giving me error because I was accessing run time variables from
EAP in rlm_perl which was wrong.
Now I am doing,
DEFAULT Auth-Type := EAP
Auth-Type := Perl
Which works like a charm.
Thank you once again.
On Thu, Aug 4, 2011 at 5:27 AM, Alexander Clouter <alex at digriz.org.uk>wrote:
> Mrinal K <sinha.mrinal at gmail.com> wrote:
> >
> > I am trying to authenticate users using client certificates and when
> > that is verified I intend to use perl module for checking other
> > attributes and verify that from database. Till now I was trying to
> > configure freeradius to do EAP-TLS and then execute the perl
> > module(rlm_perl). Both of them work perfectly fine independently but I
> > donot know if we can put them together. I believe I can do something
> > similar(checking certificate using EAP and then execute a script)
> > using exec-program-wait but considering its depricability and per
> > thread overhead will like the rlm_perl.
> >
> Without including your FreeRADIUS configuration there is very little
> anyone here can do to help you other than ask have you just tried using
> both modules?
> ----
> authorize {
> ...
>
> eap
>
> perl
>
> ...
> }
>
> authenticate {
> eap
> perl
> }
> ----
>
> Cheers
>
> --
> Alexander Clouter
> .sigmonster says: Yow! Is my fallout shelter termite proof?
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
--
-
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20110809/5006a869/attachment.html>
More information about the Freeradius-Users
mailing list