John T. Guthrie wrote:

> So are you saying that FreeRADIUS sometimes needs some assistance when
> dealing with authentication oracles?  That is, it needs to be told when
> to use them?

  Yes.  The oracles are things like Kerberos, Active Directory, or a
proxying to another RADIUS server.  There is nothing in the RADIUS
Access-Request that tells the server to use an oracle.  There is nothing
in a DB that tells the server how to authenticate the user.

  So the server has to be explicitly told "use this oracle".

>  Moreover, is the problem in this case how to tell
> FreeRADIUS about that without setting an explicit Auth-Type?  From what
> you said above, it seems that is not likely.

  Yes.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to