Behaviour of multiple sequenced authorization modules ?

Robert Roll Robert.Roll at
Mon Mar 21 23:23:24 CET 2011

  I would like to have multiple authorization modules invoked and then reject if
ANY do NOT authorize ?

 For instance..

   authorize {


 It appears if just one returns OK, then the subsequent authentication works.
 BTW.. The subsequent authentication is actually a PEAP/MSCHAPV2... Therefore,
the ldap modules are ONLY used for authorization...

Is there somewhere that discusses the various options on how to control the behaviour
when multiple authorization modules are involved ?



Robert Roll
Computer Professiona
University of Utah
Robert.Roll at

More information about the Freeradius-Users mailing list