Doug Hardie <[EMAIL PROTECTED]> wrote:
> It may seem like cut & paste to you as you are very familiar with the 
> inner workings.

  It's not just that I'm more familiar with FreeRADIUS, it's that my
*methods* mean I take things a step at a time, and follow the included
examples.  I do this for programs I'm not familiar with, and also
FreeRADIUS.  I don't have space in my head to remember every little
detail, so when I'm doing something I'm less familiar with in the
server, I follow the examples, and read the debug output.

  That method is the main reason why in many cases it looks like I'm
refusing to answer questions on the list.  I *could* tell you exactly
what to do and how to do it, but you would learn nothing, and you
would be back a day later with another questions.  Instead, I tell you
how to go about finding out that information for yourself.

> There are some significant changes that make the switch very
> difficult.  Not the least of which is that exec-programs have to
> return pairs with a comma at the end of all but the last.

  That should be fixed in the CVS head.

> The examples may work, but they don't really give much help in
> figuring out what they are doing or how to adapt them.

  In your case, change "suffix = .ppp" to "suffix = mysuffix".  That's
exactly what you did, and exactly why it worked.

>  For example, the documentation in the radiusd.conf file for
> rlm_exec seems to indicate that the rlm_exec module will be applied
> to all authentication transactions.

  I don't see how you can conclude that.  The comments in 0.9.3. for
rlm_exec say NOTHING about "authentication transactions".

>  There is no clue about how to have multiple such modules

  Nonsense.  0.9.3 includes multiple example configurations of the
"exec" module, along with instructions on how to use it.

> or to only apply them to specific groups of users.

  The documentation for rlm_exec in radiusd.conf shows how to use the
module to set the value for an attribute.  Since you already should
know from the "users" file how to use attributes, the connection
should be fairly straightforward.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to