"Kliment Toshkov" <[EMAIL PROTECTED]> wrote:
> It seems that you are the most qualified in FreeRadius.
> Why do you reply with quotes? I have read them lot of times.
Uh... I have no idea what you mean by that.
> Probably most usefull answer will be the one to "WHAT exactly Auth-Type
> should be set in DEFAULT to allow authorization through MySQL module"?
You don't. Authorization has nothing to do with authentication.
> Setting DEFAULT to Local or System results in accounting request being
> rejected and you are perfectly aware of that!
Uh, no I'm not. Again, I have no idea what you mean by that.
"Local" or "System" usually refer to authentication types.
Authentication types have NOTHING to do with accounting requests. If
you think they do, either there's something you've missed, or you've
misconfigured your system.
I don't use SQL, so I'm not that familiar with it, sorry. If you're
looking for SQL specific questions, I *can't* answer them.
The 'User-Password' attribute SHOULD be pulled out of the SQL
database during authorization. After that, any type of authentication
you want, pap, chap, EAP, or whatever.
The DEFAULT statement can be used in the SQL database to set default
replies. Exactly how do you do that? Sorry, I don't use SQL, and I
just don't know.
That being said, it should be pretty simple to list 'files' after
'sql' in the 'authorize' section of the configuration file. You
'users' file can then be nothing more than:
DEFAULT
Exec-Program = "/foo/bar"
I would suggest that you be very clear as to what you want to do,
and be very clear as to how the server behaves. Mixing up
"authorization", "authentication", and "accounting" is a guaranteed
way of confusing the issue, and of making it impossible to solve your
problem.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
