Alan DeKok wrote:
>   You can use doc/configurable_failover to say "authorize via ldap,
> and if it returns notfound, then use files"
>
> authorize {
> ...
>   group {
> ldap {
>      ok = return
>      notfound = 1
> }
>
> files
>   }
> ...
> }

I now have the following in radiusd.conf:

authorize {
    ....
    files
    group {
        sql1 {
            ok = return
            notfound = 1
        }
        sql2
    }
    ....
}

(sql1 and sql2 just retrieve the password for the user from 2 different
tables)

This results in the same username having 2 passwords (1 real and 1 one-time)
which are both valid to authenticate!

It was this simple all the time... if you know :)

-- 
Regards,

Thor Spruyt
E: [EMAIL PROTECTED]
W: www.thor-spruyt.com
M: +32 (0)475 67 22 65


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to