> Here is my External module
>
> exec MOTP {
> wait = yes
> program = "/etc/raddb/otpverify.sh %{User-Name} %{User-Password}
> %{reply:Secret} %{reply:Pin} %{reply:Offset}"
What do you think that does? What is "reply:Secret" and "reply:Pin" ?
-Well a select is done on radcheck for the user name. I would think that
output_pairs would be filled with attributes from radcheck?
> Mon Oct 8 23:52:57 2012 : Info: [MOTP] expand: %{reply:Secret} ->
> Mon Oct 8 23:52:57 2012 : Info: [MOTP] expand: %{reply:Pin} ->
> Mon Oct 8 23:52:57 2012 : Info: [MOTP] expand: %{reply:Offset} ->
Well, they don't exist, do they?
- Well yes they do they are in the radcheck database
> In /usr/share/freeradius/dictionary I have
>
> $INCLUDE dictionary.motp
Don't do that. There's a dictionary file in raddb/dictionary for a reason.
Go read it.
- Well in the CENTOS distribution /etc/raddb/dictionary had one entry
$INCLUDE /usr/share/freeradius/dictionary
So are you saying.
ADD
ATTRIBUTE Secret 3001 string
ATTRIBUTE Pin 3002 string
ATTRIBUTE Offset 3003 string
To
/etc/raddb/dictionary
?
Med venlig hilsen | Best regards
Thomas Raabo
Senior Network Engineer CCIE #33466
_____________________________________________
[email protected] | Direkte: +45 69 10 60 18 | Tlf.: +45 70 23 55 66
-----Oprindelig meddelelse-----
Fra: [email protected]
[mailto:[email protected]] På vegne af
Alan DeKok
Sendt: 9. oktober 2012 15:30
Til: FreeRadius users mailing list
Emne: Re: Outpairs not working on external script when user is located in MYSQL
Thomas Raabo - Zitcom A/S wrote:
> Need som help getting my external script to work
>
> Here is my External module
>
> exec MOTP {
> wait = yes
> program = "/etc/raddb/otpverify.sh %{User-Name} %{User-Password}
> %{reply:Secret} %{reply:Pin} %{reply:Offset}"
What do you think that does? What is "reply:Secret" and "reply:Pin" ?
> Mon Oct 8 23:52:57 2012 : Info: [MOTP] expand: %{reply:Secret} ->
> Mon Oct 8 23:52:57 2012 : Info: [MOTP] expand: %{reply:Pin} ->
> Mon Oct 8 23:52:57 2012 : Info: [MOTP] expand: %{reply:Offset} ->
Well, they don't exist, do they?
> In /usr/share/freeradius/dictionary I have
>
> $INCLUDE dictionary.motp
Don't do that. There's a dictionary file in raddb/dictionary for a reason.
Go read it.
> And from my
>
> Dictionary.motp
>
> #
> ATTRIBUTE Secret 960 string
> ATTRIBUTE Pin 961 string
> ATTRIBUTE Offset 962 string
Which is wrong. It's been wrong for pretty much a decade.
Read raddb/dictionary for instructions on creating attributes which work.
> All my configuration is based on
>
> http://nicoblog.goralski.fr/tag/Radius
That web site is wrong. Read the *FreeRADIUS* documentation for instructions
on how to properly edit the dictionaries.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
