Re: Question regarding external script authentication

2007-05-18 Thread Patric
Alan DeKok wrote: Patric wrote: I just want to clarify, if I set the reject_delay to 0, and in my external script the only thing I do is exit(1);, then freeradius will return a reject response to the NAS? It will send a reject to the NAS. Thanks Alan, you're an absolute gem! Patrick

Re: Question regarding external script authentication

2007-05-18 Thread Patric
Alan DeKok wrote: Patric wrote: I just want to clarify, if I set the reject_delay to 0, and in my external script the only thing I do is exit(1);, then freeradius will return a reject response to the NAS? It will send a reject to the NAS. Sorry if Im flogging a dead horse here... I

Re: Question regarding external script authentication

2007-05-18 Thread A . L . M . Buxey
Hi, Framed-Protocol = PPP User-Name = [EMAIL PROTECTED] User-Password = TestUser NAS-Port-Type = Virtual NAS-Port = 1010101010 NAS-Port-Id = x/x/x/xx.xxx Connect-Info = AutoShapedVC Service-Type = Framed-User

Re: Question regarding external script authentication

2007-05-18 Thread Patric
[EMAIL PROTECTED] wrote: you have various other attributes in your real production system - perhaps you have matching DEFAULT values (eg in users file) which are aiding the access accept? If that were the case, then wouldnt this eliminate the problem: My radiusd.conf authorize section

Re: Question regarding external script authentication

2007-05-18 Thread Patric
As per my ramblings below, I ran the server in debug level 3, and one can see that it is the correct DEFAULT entry that it is picking up : rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:1820, id=80, length=139 Framed-Protocol = PPP User-Name = [EMAIL PROTECTED]

Re: Question regarding external script authentication

2007-05-18 Thread Patric
Alan DeKok wrote: It's a bug in 1.1.x. It's fixed in 2.0.0 Ah great, at least that explains it! I see the latest public release is 1.1.6, is 2.0.0 available perhaps in the cvs? Would you say it is stable enough to run in production yet? If not any ETA? Otherwise can you suggest any

Re: Question regarding external script authentication

2007-05-18 Thread tnt
Ah great, at least that explains it! I see the latest public release is 1.1.6, is 2.0.0 available perhaps in the cvs? Would you say it is stable enough to run in production yet? If not any ETA? See the main web page? It's all there... It seems to be in the news section on all the pages

Re: Question regarding external script authentication

2007-05-18 Thread Alan DeKok
Patric wrote: Ah great, at least that explains it! I see the latest public release is 1.1.6, is 2.0.0 available perhaps in the cvs? Would you say it is stable enough to run in production yet? If not any ETA? See the main web page? It's all there... Otherwise can you suggest any previous

Re: Question regarding external script authentication

2007-05-18 Thread Peter Nixon
On Fri 18 May 2007, Patric wrote: Alan DeKok wrote: It's a bug in 1.1.x. It's fixed in 2.0.0 Ah great, at least that explains it! I see the latest public release is 1.1.6, is 2.0.0 available perhaps in the cvs? Would you say it is stable enough to run in production yet? If not any ETA?

Re: Question regarding external script authentication

2007-05-18 Thread Alan DeKok
[EMAIL PROTECTED] wrote: It seems to be in the news section on all the pages *except* the main one. Your browser has cached the main page. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List

Re: Question regarding external script authentication

2007-05-18 Thread Patric
Alan DeKok wrote: See the main web page? It's all there... Read, and understood :] Out of curiosity I did compile the latest snapshot, and I see that it is fixed, and even returns the correct status based on what your external script returns (1 - rejected, 4 - handled, 5 - invalid,

Re: Question regarding external script authentication

2007-05-18 Thread Patric
Alan DeKok wrote: [EMAIL PROTECTED] wrote: It seems to be in the news section on all the pages *except* the main one. Your browser has cached the main page. Alan you're gonna give us all an inferiority complex if you continue to be right all the time! ;] Cheers

Re: Question regarding external script authentication

2007-05-17 Thread Alan DeKok
Patric wrote: I am currently using exec to authenticate users through an external script. When all criteria match I return the correct access-accept pairs and the users authenticate successfully. When the criteria are NOT met, I exit(1) my php script to hand control back to the freeradius

Re: Question regarding external script authentication

2007-05-17 Thread Patric
Hi Alan, Thanks for ur response. Alan DeKok wrote: Set reject_delay = 0 in radiusd.conf. I just want to clarify, if I set the reject_delay to 0, and in my external script the only thing I do is exit(1);, then freeradius will return a reject response to the NAS? Or will it simply not

Re: Question regarding external script authentication

2007-05-17 Thread Alan DeKok
Patric wrote: I just want to clarify, if I set the reject_delay to 0, and in my external script the only thing I do is exit(1);, then freeradius will return a reject response to the NAS? It will send a reject to the NAS. Or will it simply not respond? Because the complaint my NAS