Andreas,

> Please excuse if I say something stupid now, as I do not know how
> exactly LDAP works with FreeRADIUS, but why do you not supply these
> attributes via LDAP on a per users base ? LDAP seems to provide
> that functionality.

this does not work for the following reason: What I want is to
accept *any* user, even if there is no corresponding entry in
the LDAP database. If a user "steve1234" logs in, the LDAP database
has to know about this user - but this is not the case for "unkown"
users.

Roland

----- Original Message -----
From: "Andreas Faust" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 25, 2001 6:47 PM
Subject: Re: Authenticating "unknown" or "wrong" users with special attributes?


> On Thu, Oct 25, 2001 at 06:20:50PM +0200, [EMAIL PROTECTED] wrote:
> > Hi,
> >
> >     # LDAP - most attributes come out of the LDAP database
> >     DEFAULT         Auth-Type := LDAP
> >                     Service-Type = Framed,
> >                     Framed-Protocol = PPP,
> >                     Framed-MTU = 1500,
> >                     Framed-Compression = Van-Jacobsen-TCP-IP
> >
> >     DEFAULT         Auth-Type := Accept
> >                     Framed-IP-Address = 255.255.255.254,
> >                     Framed-IP-Netmask = 255.255.255.255,
> >                     Framed-Filter-Id = "diabled",
> >                     Session-Timer = 600
> >
> > on the other hand, the "Fall-Through = yes" does not work
> > here, because I want no fall-through if the user is a valid
> > LDAP user.
> >
> > Has anyone an idea on this issue?
> Please excuse if I say something stupid now, as I do not know how exactly LDAP works 
>with FreeRADIUS, but why do you not supply
these attributes via LDAP on a per users base ?
> LDAP seems to provide that functionality.
>
> cheers
> Andreas Faust
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to