>From: "Alan DeKok" <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: Re: WPA - Freeradius external script problem
>Date: Wed, 20 Oct 2004 14:16:42 -0400
>Reply-To: [EMAIL PROTECTED]
>
>[EMAIL PROTECTED] wrote:
>> I'm using freeRadius version 1.0 and Linksys AP. I am trying to
>> authentic= ate Wlan users using WPA authentication. The actual
>> authentication is suppose= d to be done in an external script which
>> is launched from freeRadius.
>
> Are you sure? From the example you posted, it doesn't look like
>that.
when I start radiusd with parameter it says:
radiusd: FreeRADIUS Version 1.0.0-pre3, for host , built on Jul 29 2004
at 09:36:56
At least I thought I was running version 1.0.0-pre3 :)
>
>> exec login {
>> wait =3D yes
>> program =3D "/home/tester/loginauth %{User-Name} %{NAS-I=
>> dentifier}"
>> input_pairs =3D request
>> output_pairs =3D config
>
> Ok...
>
>> And I the users file I have the following:
>>
>> DEFAULT Auth-Type :=3D LOGIN
>>
>> The external script return exit value 0 and prints the user password
in
>> the following manner:
>
> Why? You said above that the external script authenticates the user.
>
> Here, you're saying that the script ALWAYS succeeds, and prints the
>password, for some reason.
>
> Can you explain why you have the script always succeed? Can you
>explain why you have the script print the password?
Ok. I wasn't explaining the situation clear enough. The script always succeeds
only for testing. Later on I will implement some logic to it which will
check the received user account from external systems and returns exit value
0 or 1 depending on the external authentication. I print out the password
because I thought it was needed in the freeradius to authenticate EAP-PEAP
authentication request. Obviously I'm wrong?
Has anybode implemented this kind of PEAP/EAP 802.1x authentication for
wlan users using external script that is called from freeradius?
_______________________________________________________________________
Etsi ystävien ja tuttujen yhteystiedot: http://henkilot.eniro.fi/
Hakupalvelut aina mukanasi - kännykässä: http://www.eniro.fi/mobiili/wap/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
