On Mon, 07 Feb 2005 12:46:07 -0500, Alan DeKok <[EMAIL PROTECTED]> wrote: > Rizwan Khan <[EMAIL PROTECTED]> wrote: > > So far there has been no luck googlizing the problem, Can anyone tell > > me where to define and store values of these parameters in Radius and > > how to send this information to the nas to make a decision? > > Is there any other way to do it without changing the stated architecture??? > > No. > > Alan DeKok. >
Ok now I have removed the catch of using PAM...... instead tailored the C code for RADCLIENT to talk directly to the FR Server. ./RadClient <--->FreeRadius The server authenticates requests from radclient. Now, to enable authorization......... I would like to receive an extra group field (e.g. Vendor-Specific = "group1") alongwith ACCESS-ACCEPT packet to manipulate this info on the client for making an authorization decision. Is there a way to do it without messing with the freeradius code?? and how?? (P.S. that I can send the same field with Access-Request, and it is received by server and authenticated, but how to do it the other way around!!!) Thanx!!! /Rizwan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
