Dan Perik <[EMAIL PROTECTED]> wrote:
> I've been testing out the 0.5 release.  But now it seems to not let me
> auth to sql.  I've looked over the messages to the list over the last
> bit, and noticed others with the same problem.  The "answers" didn't
> seem clear to me, so perhaps I can beg some more help.

  I don't know what's unclear about the answers.

  You cannot list SQL in the authenticate section now.

  The fake "authentication" that the SQL module was doing was wrong.
It duplicated code existing elsewhere, and prevented other
kinds of authentication from working.

> This would allow me to auth to either LDAP or SQL.

  You weren't authenticating from LDAP or SQL.  You were getting the
user password from LDAP or SQL.  Bullshit code in the SQL module then
compared the password in SQL to the password in the packet.

> How do I do what I want to do now?  What should I put in my
> "authenticate" section of radiusd.conf (if sql can't be there any
> more)?

  You list SQL 1in the *authorize* section.  Then the password is taken
from the SQL database.

  The *authentication* you do is PAP, CHAP, MS-CHAP, EAP, or
whatever.  List *those* in the authentication section.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to