external auth script

[Janis Heller]

heyho,

first of all, big thanks to all this help.
I’m a newbie to RADIUS.
I’ve taken a look into my modules folder, there’s no rest module. How can I built this fast? Many of you told me to use rest instead of exec to perform a simple web request to some script.

I’ve used your code (A.L.M. Buxey), so my config file now looks like this:

authorize {

}

authenticate {
	Auth-Type exec {
      exec
	}
}

I get this error all the time (provided username & password are correct)

(0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject

I’m a bit confused about this. I think I only need to use authorize to validate username & password. My accounts won’t have custom permissions etc.

All the best;

janis



> Am 22.07.2016 um 11:00 schrieb <A.L.M.Buxey at lboro.ac.uk> <A.L.M.Buxey at lboro.ac.uk>:
> 
> Hi,
> 
>> I’ve done some research nearly the whole night.
>> From my point of view I only need the authorize{} part. Here’s my entry in the default config file:
>> 
>> authorize {
>> 	    update control { 
>> 	        Auth-Type := exec
>> 	    }
>> }
> 
> urgh. no need. just call the module in authenticate. 
> 
>> 
>> authenticate {
>> 	exec
>> }
> 
> if you are goign off-piste you need to hack in a lot more eg
> 
> authenticate {
> 	Auth-Type exec {
>       exec
> 	}
> }
> 
> I doubt that works though - you cant just go freestyle and make up your own syntax
> 
>> 
>> Why did I need to fill exec into the authenticate section too? I just want to use radius to send the username & password to my script and whole checking process is made by the script.
> 
> because you are checking passwords and authenticating someone. so you use authenticate
> 
> alan
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html