Exec Module FreeRADIUS Version 2.1.8

[Alan DeKok]

hollman.diaz wrote:
> I want to change Auth-Type from Accept to Reject based on the account
> expiration date from a user. All users have the same username and password
> but they are identified by the calling-station-id. So the external
> application verifies in a database the expiration date of the
> calling-station-id and changes the Auth-Type attribute.
> 
> Can I change this attribute?

  Read raddb/modules/exec.  This is documented.

> Is it possible?

  Yes.

> In this way, Freeradius accepts the authentication requests, runs the
> external application but it does not change the Auth-Type attribute:

  Have your script return "Accept" or "Reject", and follow the
documentation in "man unlang".  It says how to assign values by
executing programs.

  Put the following into the "authorize" section:

	update control {
		Auth-Type := `/path/to/program args...`
	}

  And it *will* work.

  Alan DeKok.