MAC Authentication Queries

[Alan DeKok]

On Sep 27, 2024, at 11:18 AM, FreeRAD <yetifreerad at gmail.com> wrote:
> The problem is that the only documentation for this specific implementation
> states "Normal virtual server configuration goes here" and that's it. If I
> was taking it literally I would have assumed it meant the rest of the
> virtual server configuration since that's what it says.

  You're treating the MAC auth documentation as magic.  i.e. it's perfect, you have to follow it exactly, and you are forbidden from reading any other documentation, or learning from any other documentation.

  This is the wrong approach.

> The way I understand the authorize section to work is that it receives an
> Access-Request first, validates the information within the Access-Request,
> and ensures, based on the enabled modules, that the correct attributes are
> in the Access-Request for the Authentication section to be able to process.
> If they are, it then sets the Auth-Type for the Authentication section
> accordingly. Autz-Type is only going to be used if no other module takes
> responsibility for Authorization similar to how Auth-Type works in
> Authentication.

  I've told you that you can't put the Auto-Type into an "else" statement.  Did you read that?  Are you going to update your configuration to fix that?

  It seems like your approach here is to argue about just about everything, and not follow any advice other than the MAC auth guide.  I have no idea why.  It's not productive.

  Either follow instructions, or stop asking questions.

  Alan DeKok.