Hi all,
I am a lot confused with module calling configuration in radius.conf. I need
to do external authentication and authorization through rlm_exec and have the
following problems:
1) I cannot manage exec module be called from authenticate{...}. It gets
called from authorize{...} but even if it returns success, authentication
fails then because exec module is not called from authenticate{...}.
Is it enough to just place "exec" keyword inside authenticate{...} or does it
need to be within Auth-Type EXEC{...} group? In latter case, how and when can
I set Auth-Type = EXEC in order that group to be called? It seems that
rlm_exec itself doesn't do that when called in authorize{...}.
2) I cannot define a custom instance of exec module (for example, "exec_xxx").
If I define "exec xxx {...}" in module configuration section, I cannot refer
it from authenticate{...} or authorize{...} as exec_xxx, because the server
complains ERROR: Cannot find a configuration entry for module "exec_xxx".
3) Do I need to put exec in instantiate{...} section? Even if I don't put it
in, freeradius still says Module: Instantiated exec (exec). If it is
instantiated automatically, then what the instantiate{...} section is needed
for?
Best regards,
Anton
--
Anton Voronin
Intersvyaz JSC
http://www.chelcom.ru
+7 (3512) 655199
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
