Possible to have 2 authentications in sequence?

Alan DeKok aland at deployingradius.com
Wed Mar 9 16:05:50 CET 2016


On Mar 9, 2016, at 4:09 AM, Andy P. <pmaspec at gmail.com> wrote:
> Can someone tell if it is possible to have FreeRADIUS perform (as a proxy)
> 2 authentications in sequence on a user, such as the 1st - against an AD
> and if that succeeds - against another RADIUS server?

  In general, no.  But you're free to run ntlm_auth as a shell script in the "authorize" section.

  This will only work if the packets contain MS-CHAP or PAP authentication.

> Is it simply a matter
> of the the Authorization/Authentication sections definition, or requires
> some development?

  A better question is: why do you need this?

  Alan DeKok.




More information about the Freeradius-Users mailing list