Antony,
> I would like to add a very simple user with only a Cleartext-Password to
> the users file (this is strictly a FreeRADIUS user and in the interest
> of security shouldn't be in LDAP).
I have a very similar setup (lots of users in LDAP, a few with "local" 
passwords on the RADIUS server). As to security, I created the user 
as a local unix account on the RADIUS server and do Auth-Type := System.
This way, I don't have to put a Cleartext-Password anywhere.

In addition, my special users _are_ in LDAP, so when LDAP is asked they get
authorized. Only the password is checked against /etc/passwd on the RADIUS
server. But how would you "remove LDAP access control" for these users?

Cheers, Martin

-- 
  Dr. Martin Pauly     Fax:    49-6421-28-26994            
  HRZ Univ. Marburg    Phone:  49-6421-28-23527
  Hans-Meerwein-Str.   E-Mail: [EMAIL PROTECTED]  
  D-35032 Marburg                                                           
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to