Hi!

I have

radiusd: FreeRADIUS Version 0.9.0, for host sparc-sun-solaris2.8, built on Aug  4 2003 
at 11:56:12

all AAA data stored only in mysql database and looks like

mysql> select * from radcheck where username='.....';
+----+----------+----------------+----+---------------+
| id | UserName | Attribute      | op | Value         |
+----+----------+----------------+----+---------------+
|  1 | .....    | Crypt-Password | == | ............. |
|  8 | .....    | Auth-Type      | == |               |
+----+----------+----------------+----+---------------+
2 rows in set (0.00 sec)

mysql> select * from usergroup where username='.....';
+----+----------+-----------+
| id | UserName | GroupName |
+----+----------+-----------+
|  8 | .....    | dialup    |
+----+----------+-----------+
1 row in set (0.01 sec)

mysql> select * from radgroupcheck where groupname='dialup';
+----+-----------+---------------+----+-------+
| id | GroupName | Attribute     | op | Value |
+----+-----------+---------------+----+-------+
|  2 | dialup    | NAS-Port-Type | == | Async |
+----+-----------+---------------+----+-------+
1 row in set (0.00 sec)

mysql> select * from radgroupreply where groupname='dialup';
+----+-----------+-----------------+----+-------------+------+
| id | GroupName | Attribute       | op | Value       | prio |
+----+-----------+-----------------+----+-------------+------+
|  3 | dialup    | Framed-Protocol | =  | PPP         |    0 |
|  4 | dialup    | Service-Type    | =  | Framed-User |    0 |
+----+-----------+-----------------+----+-------------+------+
2 rows in set (0.01 sec)

Some users have NAS-Port-Type==ISDN in radgroupcheck, some have Virtual...

Now the question. I'd like to authenticate/authorize users from mail-server
(via pam_radius) on this radius server.

Here are pairs which pam_radius send to server:

USER_NAME="....."
USER_PASSWORD="........"
NAS_IP_ADDRESS=127.0.0.1
NAS_IDENTIFIER="smtp"
NAS_PORT=11323
NAS_PORT_TYPE=Virtual
SERVICE_TYPE=Authenticate-Only

Please, explain, or show example - how I can authenticate/authorize user
for Service-Type==Framed-User and the same user for
Service-Type==Authenticate-Only

Many thanks!


Igor Khasilev                     |
PACO Links, igor at paco dot net  |


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to