Check EAP Type in Unlang/Post Auth

Matthew Newton mcn4 at leicester.ac.uk
Wed Apr 26 13:01:04 CEST 2017


On Wed, Apr 26, 2017 at 12:40:11PM +0200, Arnab Roy wrote:
>    //This is my way of trying to explain the requirements not the real
>    unlang syntax :)
>    if(eap-type == "PEAP"){
> 
>    VSA:=Blah
> 
>    }
>    elseif(eap-type=="TLS")
>    {
>    VSA:=Blah
>    }

Something like

  if (EAP-Type == "PEAP") {
    # PEAP
    update reply {
      ...
    }
  }
  elsif (EAP-Type == "TLS") {
    # EAP-TLS
    update reply {
      ...
    }
  }
  else {
    # default case
    update reply {
      ...
    }
  }

I can't remember offhand exactly where EAP-Type is available - you
may need to do it in the inner-tunnel and copy the attributes back
to the outer.

Matthew


-- 
Matthew Newton, Ph.D. <mcn4 at leicester.ac.uk>

Systems Specialist, Infrastructure Services,
I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom

For IT help contact helpdesk extn. 2253, <ithelp at le.ac.uk>


More information about the Freeradius-Users mailing list