On Wed, 23 Feb 2005, Marc Boisis wrote:

Kostas Kalevras a ?crit :

On Tue, 22 Feb 2005, Marc Boisis wrote:

Hello world
I would like to force EAP-Type according to an ldap attribute . That is to say between authorize ant authenticate.
Is it possible and how ?


I think you just need to map the EAP-Type attribute to an ldap attribute in the user entry. That is, something like this:

dn: uid=user,ou=people,dc=company,dc=com
radiuscheckitem: EAP-Type := EAP-TTLS

authorize{
    eap
    [...]
    ldap
}

authenticate{
    eap
}



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


In fact I want to associate eap-type to the private-group-id attribute like this
if private-group-id==1
then EAP-Type=EAP-TTLS


if private-group-id==1
then EAP-Type=EAP-PEAP

but users file is not read between authorize and authenticate

YES it does!

How can I do ?

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to