1. Freeradius calls the external script for validating username/password
2. If the credentials are ok, script returns ok, else fail
3. If the credentials are ok, script also needs to provide a few attributes 
along with the Access-Accept packet (based on username)

How can this be achieved?

(in example of using EAP/TTLS)

I guess modifying only 3 files is enough...

*radiusd.conf*
exec php {
  wait = yes
  program = "/usr/bin/php -f myscript.php"
  input_pairs = request
  output_pairs = reply
}

and the other two are sites-enabled/inner_tunnel & users?

Is it possible to do it with 1 script? Or there needs to be a special script 
for user/pass validation and another one for getting attributes?
                                          
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=60969
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to