John T. Guthrie wrote:
> So are you saying that FreeRADIUS sometimes needs some assistance when
> dealing with authentication oracles? That is, it needs to be told when
> to use them?
Yes. The oracles are things like Kerberos, Active Directory, or a
proxying to another RADIUS server. There is nothing in the RADIUS
Access-Request that tells the server to use an oracle. There is nothing
in a DB that tells the server how to authenticate the user.
So the server has to be explicitly told "use this oracle".
> Moreover, is the problem in this case how to tell
> FreeRADIUS about that without setting an explicit Auth-Type? From what
> you said above, it seems that is not likely.
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html