On 09/10/12 14:47, Thomas Raabo - Zitcom A/S wrote:
Here is my External module
exec MOTP {
wait = yes
program = "/etc/raddb/otpverify.sh %{User-Name} %{User-Password}
%{reply:Secret} %{reply:Pin} %{reply:Offset}"
What do you think that does? What is "reply:Secret" and "reply:Pin" ?
-Well a select is done on radcheck for the user name. I would think that
output_pairs would be filled with attributes from radcheck?
No. This is not how it works.
radcheck pairs are *compared* against the request. Certain special pairs
assume that "comparison" means "add me to the control list". But
radcheck pairs are NEVER added to the reply.
radreply pairs are added to the reply. Hence the name.
ATTRIBUTE Secret 3001 string
ATTRIBUTE Pin 3002 string
ATTRIBUTE Offset 3003 string
That is better. But you still need to actually populate them, which will
entail moving the pairs from radcheck to radreply.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
