Hello all pam_radius_auth users!
 
Since some servers require vendor-specific attributes, I wonder if the pam_module 
supports these:
- in Access-request, the radius client sends one or more vendor-specific attributes on 
top of the usual attributes
- in the Access-challenge, the radius client reports the reply-message + one or more 
vendor-specific attributes to the application on top of the regular attributes
- in the second Access request, the radius client sends in the response one or more 
vendor specific attributes +  regular attributes.  
 
Have anybody tries these? Can a PAM module at all support usage of vendor-specific 
attributes? 
 
if not, what do you think needs to be modified to allow this to happen? Would that be 
a big work? A suggestion would be that the application merely provides the vendor-ID, 
vendor type vendor length and value field to the PAM module. The radius client then 
transparently forwards the request to the server without altering it. In the other way 
round, the client detects the vendor specific fields and reports them to the 
application without processing it any further. 
 
Thanks for your help and your concern!
 
Rasmus

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to