On Tue, Dec 24, 2002 at 09:46:31AM +0000, Simon White wrote:
> It's just more complex than your average model of just authenticate then
> authorize...

That's being generous.  It's not that it's more complex really, it's that
FR is commingling authorize and authenticate, in large part due to certain
design weaknesses^Wdecisions of the RADIUS protocol itself.

> maybe the section /should/ be called "preprocess" or
> "check_auth_method" or something...

preprocess is already used, but check_auth_method doesn't sound TOO shabby
to me.

/fc

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to