> Dustin Doris wrote:
>
> > If you are going to be using an external perl script, I'd recommend using
> > rlm_perl.  You need to build with experimental modules.  Read
> > experimental.conf and look for the perl section.  Then read example.pl in
> > src/modules/rlm_perl/example.pl
>
> Thanks a lot for your help!!! I'm going to have a look to the pointed
> documentation. Only two questions:
> 1) Which is the advantage of using rlm_perl vs external program?

rlm_perl is persistant and so its much faster.  If you don't have lot of
users then authenticating, then running an external script should be fine.
Its also easy to send back stuff to put in the radius log with rlm_perl if
you want to actually log specific things.

> 2) I was algo testing with something like:
> (in /etc/raddb/users)
>
> DEFAULT Auth-Type = Exec-Program
> "/usr/local/freeradius/bin/freeradius_test.pl %U %{User-Password}"

That would work.  You could also call it with exec in radiusd.conf.  Look
for exec echo in the default radiusd.conf file.

>
> Is this right? Any considerations? I'm not very sure whether it's better
> to use the "-wait" alternative or not...

Wait tells it to wait for the program to finish before sending back auth
reply.  That's probably what you want.  I'm not really sure myself why you
wouldn't want that.

>
> Regards,
> -Rom�n
>

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to