Hi guys,

I'm sure these are questions that have been asked a thousand times, but
can't for the life of me find the answers I'm looking for.

My first problem is this: I want to store reply attributes for my users in a
MySQL database, however I want them to authenticate against an LDAP server.
No problem, I sort of have this working. Except the reply attributes get
sent even on an Access-Reject packet. This seems undesirable to me.

My second problem is this: The LDAP server isn't necessarily in the same
building as the radius server. I want users to be able to fall back on
locally stored passwords in the MySQL database should the LDAP server be
down for some reason. I'd thought that setting Fall-Through=yes and having a
DEFAULT Auth-Type = local would have done this, but no dice. Any
suggestions?

Regards,
Justin
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to