>From: "Alan DeKok" <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: WPA - Freeradius external script problem >Date: Wed, 20 Oct 2004 14:16:42 -0400 >Reply-To: [EMAIL PROTECTED] > >[EMAIL PROTECTED] wrote: >> I'm using freeRadius version 1.0 and Linksys AP. I am trying to >> authentic= ate Wlan users using WPA authentication. The actual >> authentication is suppose= d to be done in an external script which >> is launched from freeRadius. > > Are you sure? From the example you posted, it doesn't look like >that.
when I start radiusd with parameter it says: radiusd: FreeRADIUS Version 1.0.0-pre3, for host , built on Jul 29 2004 at 09:36:56 At least I thought I was running version 1.0.0-pre3 :) > >> exec login { >> wait =3D yes >> program =3D "/home/tester/loginauth %{User-Name} %{NAS-I= >> dentifier}" >> input_pairs =3D request >> output_pairs =3D config > > Ok... > >> And I the users file I have the following: >> >> DEFAULT Auth-Type :=3D LOGIN >> >> The external script return exit value 0 and prints the user password in >> the following manner: > > Why? You said above that the external script authenticates the user. > > Here, you're saying that the script ALWAYS succeeds, and prints the >password, for some reason. > > Can you explain why you have the script always succeed? Can you >explain why you have the script print the password? Ok. I wasn't explaining the situation clear enough. The script always succeeds only for testing. Later on I will implement some logic to it which will check the received user account from external systems and returns exit value 0 or 1 depending on the external authentication. I print out the password because I thought it was needed in the freeradius to authenticate EAP-PEAP authentication request. Obviously I'm wrong? Has anybode implemented this kind of PEAP/EAP 802.1x authentication for wlan users using external script that is called from freeradius? _______________________________________________________________________ Etsi ystävien ja tuttujen yhteystiedot: http://henkilot.eniro.fi/ Hakupalvelut aina mukanasi - kännykässä: http://www.eniro.fi/mobiili/wap/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html