Gianfranco Ferrini <[EMAIL PROTECTED]> wrote:
> What I need is to port this mechanism into the authentication part of EAP: 
> I would like to pick up the cleartext password for EAP from an external 
> program.

  Not exactly: You need to set User-Password from an external program.
>From there, any authentication mechanism can use it.  EAP, MS-CHAP,
etc.

> I have seen from the list that this is possible with LDAP, but I don't know 
> if  (and how) it is possible from an external program.

  Simple:

DEFAULT User-Password == `%{exec: /root/script-radius}`

  Sets the User-Password attribute to have whatever value is printed
by the external program.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to