Sorry to be a pest about this, but should the RADIUS server be able to react to whatever reply attributes the script sends back? The reason I ask is because I've got all sorts of conditionals later on in the users file (checking for groups, setting Simultaneous-Auth and Max-Monthly-Session, etc.) and I figure the best way to do that is to have the script return "Auth-Type = System" if the script sees that the username/password combo is correct, so then the RADIUS server will pick up the GID of the user in question and keep going in the users file. Yes, I know this would be a second lookup against NIS, it's inexpensive enough that I can live with it for the few weeks this is running.
Failing that, how would I have the script return the kind of information I would normally put in the check items, such as Simultaneous-Use := 1, or Max-Monthly-Session := 1296000? If I'm not making sense, feel free to point that out. :) Thanks again for the help so far. Chris ----- Original Message ----- From: "Alan DeKok" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 13, 2002 1:42 PM Subject: Re: Script to run if user fails authentication > "Chris A. Kalin" <[EMAIL PROTECTED]> wrote: > > OK, so do you think the best way to go would be to always have a script run > > that performs authentication and decides whether a user gets the "standard" > > set of reply attributes or the "restricted" ones? > > For now, yes. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
