Rizwan Khan <[EMAIL PROTECTED]> wrote: > The server authenticates requests from radclient. Now, to enable > authorization......... I would like to receive an extra group field > (e.g. Vendor-Specific = "group1") alongwith ACCESS-ACCEPT packet to > manipulate this info on the client for making an authorization > decision. Is there a way to do it without messing with the freeradius > code?? and how?? (P.S. that I can send the same field with > Access-Request, and it is received by server and authenticated, but > how to do it the other way around!!!)
Send it as a reply attribute in the "user" file. And whatever you do, DON'T use Vendor-Specific. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
