Have you tried

 if (!control:Auth-Type) {

Jim L.

----- Original Message ----- From: "Hans-Peter Fuchs" <[EMAIL PROTECTED]>
To: "FreeRadius users mailing list" <[email protected]>
Sent: Monday, May 05, 2008 11:30 AM
Subject: Want to set Auth-Type to pam if Auth-type ist unset


freeradius-2.0.4 under rhel el 5.

If no module sets Auth-Type I want it to set to: pam.

Config:

authorize {

...
        eap {
               ok = return
       }

       #
       #  Pull crypt'd passwords from /etc/passwd or /etc/shadow,
       #  using the system API's to get the password.  If you want
       #  to read /etc/passwd or /etc/shadow directly, see the
       #  passwd module in radiusd.conf.
       #
#       unix

       #
       #  Read the 'users' file
       files
pap
      if (Control:Auth-type == "") {
                      update control {
                              Auth-Type := pam
                      }
      }


authenticate {
       #
       #  PAP authentication, when a back-end database listed
       #  in the 'authorize' section supplies a password.  The
       #  password can be clear-text, or encrypted.
      Auth-Type PAP {
               pap
      }
       Auth-Type CHAP {
               chap
       }
...
       Auth-Type pam {
               pam
       }


radiusd -X show that even if no authetication method is found the
condition is not empty.
++? if ('%{Control:Auth-type}' == "")
? Evaluating ('%{Control:Auth-type}' == "") -> FALSE
++? if ('%{Control:Auth-type}' == "") -> FALSE
auth: No authenticate method (Auth-Type) configuration found for the
request: Rejecting the user
auth: Failed to validate the user.

Do you have a suggestion?

Thank You for Your time.



--
Grüße

Hans-Peter Fuchs

Hans-Peter Fuchs - RRZK Zimmer 20
Zentrum für angewandte Informatik - Universitätsweiter Service RRZK
Universität zu Köln - Tel: 0221-470-6972


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to