Alan DeKok wrote:
DEFAULT Auth-Type := Kerberos
Fall-Through = 1
An earlier message in this thread said "Auth-Type = Kerberos". What
you have above is different.
An here in lies the problem. I just went back and tested this. I had
been working with Walt Reynolds on the issue and we had shared some
files and after that things started working with a Mac client but not
with my Win XP client (one of the Xsupplicants we had installed had
hosed the system so I couldn't tell when things had gotten better).
According to the man 5 users page:
Auth-Type = Kerberos is allowed for a server configuration variable such
as Auth-Type, where as
Auth-Type := Kerberos (note the Colon before the equal sign) is a check
item and replaces in the configuration items any attribute of the same name.
Having the colon there or not there made a very big difference in how it
behaved.
I really appreciate every one that took the time to help figure this
out. We actually had it working before I saw Alans message but it's
nice to know exactly what that tiny piece did.
Thanks,
LB
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
