Zitat von Martin Whinnery <[EMAIL PROTECTED]>:
> Thanks Markus,
>
> the problem seems to be that the authorisation pass returns "notfound",
> whereas I want it to "reject", as if it found an entry in LDAP without
> the appropriate attribute.
>
> Mart
Hi Mart,
ugh, you are of course right, i forgot on important detail, sorry!
(has been quite a time since i set this up and it is getting quite
late in the night now ...)
directly after the ldap entry in authorize a call a small perl script
which checks for "$RAD_REQUEST{'Module-Failure-Message'}", and if it
is set then return with "RLM_MODULE_REJECT", so 'notfound' is replaced
by 'reject'.
i must admit that this actually is a very dirty solution ... i should
really overthink it (altough it works ...)
regards
markus
+-----------------------------------------------------------------+
| Markus Krause, Mogli-Soft |
| Support for Mac OS X, Webmail/Horde, LDAP, RADIUS |
| by order of the |
| Computing Center of the Max-Planck-Institute of Biochemistry |
+--------------------------------+--------------------------------+
| E-Mail: [EMAIL PROTECTED] | Tel.: 089 - 89 40 85 99 |
| [EMAIL PROTECTED] | Fax.: 089 - 89 40 85 98 |
| Skype: markus.krause | iChat: [EMAIL PROTECTED] |
+--------------------------------+--------------------------------+
----------------------------------------------------------------------
This message was sent using https://webmail2.biochem.mpg.de
If you encounter any problems please report to [EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
