Hi Alan, today I upgraded my freeradius to 1.0.2. The exec module seems to be the right thing for me, but I can't really figure out how to setup my 3 cases:
1) if user is known and password is ok, accept with special attributes 2) if user is known and password is wrong, reject 3) if user is unknown, proxy to other radius server I tried to setup an exec module like the echo example in the sample radiusd.conf. I inserted it in the authorize section before the "files" entry. My thought was to return a special attribute (tried "output type = request") that is matched by DEFAULT entries (one for user ok, one for proxying) in the users files. But these tries had no success. Any suggestions for me? Thanks for your help! Daniel -----Urspr�ngliche Nachricht----- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Alan DeKok Gesendet: Donnerstag, 17. M�rz 2005 18:42 An: [email protected] Betreff: Re: AW: Locking user accounts "Fiederling, Daniel" <[EMAIL PROTECTED]> wrote: > The first entry runs my own application (chkauth) that checks > authentication, counts login tries and locks accounts if needed. It > returns a Filter-Id on successful authentication. If a valid account but > a wrong password is detected it returns "Fall-Through = No" That won't work. Read the output of debugging mode. The "users" file is finished processing before the Exec-Program-Wait is run. The "Fall-Through" your program outputs can't be used, because it's too late. > I have not followed your suggestion to use the exec module because I use > an older version of freeradius that my distribution offers (0.8.1 - > really old I know) and I haven't found that module. I'm just in > development of my application, in the production version I think about > using a newer version of freeradius for security reasons. You should really upgrade. I think 1.0.2 has the features you need. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
