T Kid82 wrote: >> Could you explain why you think that? None of the documentation or >> default configuration files say that. Note that the module return code >> "OK" or "success" does NOT mean "let the user in without checking their >> password". > > That is a revelation to me.
A simple explanation: There are many modules that are executed for each authentication request. If "ok" meant "let the user in", then *any* time a module worked, it would let the user in. This just doesn't make sense. >> You set Auth-Type just like setting any other attribute. See "man >> unlang" for examples. > > I will definitely look through the documentation. Is there a specfic > Auth-Type that would be appropriate for my simple case. I guess what I > am asking is, can you give me an example of an Auth-Type other than > the Perl example? If you want your "exec" module to be run, create an Auth-Type for it. This is the purpose of the Auth-Type sub-sections of "authenticate". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html