"Fiederling, Daniel" <[EMAIL PROTECTED]> wrote:
> The first entry runs my own application (chkauth) that checks
> authentication, counts login tries and locks accounts if needed. It
> returns a Filter-Id on successful authentication. If a valid account but
> a wrong password is detected it returns "Fall-Through = No"

  That won't work.  Read the output of debugging mode.  The "users"
file is finished processing before the Exec-Program-Wait is run.  The
"Fall-Through" your program outputs can't be used, because it's too late.

> I have not followed your suggestion to use the exec module because I use
> an older version of freeradius that my distribution offers (0.8.1 -
> really old I know) and I haven't found that module. I'm just in
> development of my application, in the production version I think about
> using a newer version of freeradius for security reasons.

  You should really upgrade.  I think 1.0.2 has the features you need.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to