The clouds of radius are slowly beginnging to part, and I'm almost afraid to
admit that I'm kind of starting to enjoying messing with it.
I've got what amounts to a pretty basic freeradius 0.2 install from the
tarball, not CVS. I'm running MySQL from the FreeBSD ports, and the radius
tables are successfully built from the provided schema.
The goal is to have a radius server that will first attempt to authenticate
from the FreeBSD system files ( /etc/passwd ) and if that fails, try to
authenticate from the MySQL database.
I can get either unix authentication to work, or SQL authentication, but not
both. I'm pertty sure the problem is in the configuration of my raddb/users
file, but I'm not sure. Here's the default entries in question:
# Unix auth
DEFAULT Auth-Type := System
Fall-Through = 1
# Defaults for all framed connections.
# seems to hit against MySQL
DEFAULT Service-Type == Framed-User
Framed-IP-Address = 255.255.255.254,
Framed-MTU = 576,
Service-Type = Framed-User,
Fall-Through = Yes
# These are the entries from my radiusd.conf
authorize {
preprocess
suffix
sql
files
}
authenticate {
sql
unix
}
Do I need to have a line for "unix" in my authorize module? Thanks in
advance for any help.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html