Gianfranco Ferrini <[EMAIL PROTECTED]> wrote:
> What I need is to port this mechanism into the authentication part of EAP:
> I would like to pick up the cleartext password for EAP from an external
> program.
Not exactly: You need to set User-Password from an external program.
>From there, any authentication mechanism can use it. EAP, MS-CHAP,
etc.
> I have seen from the list that this is possible with LDAP, but I don't know
> if (and how) it is possible from an external program.
Simple:
DEFAULT User-Password == `%{exec: /root/script-radius}`
Sets the User-Password attribute to have whatever value is printed
by the external program.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html