I'm currently using Freeradius v2.1.9 and I'm trying to write a
condition in the authorize section to use a different module depending
on whether Mac-auth or someother auth is being called.
In reading the wiki (http://wiki.freeradius.org/Mac-Auth) it appears
that I want to check (Chap-Password == hash(User-Name)) but I'm having a
problem getting the unlang syntax correct.
So far, I've tried:
if (Chap-Password == hash(User-Name)){
which fails with:
Consecutive conditions at (User-Name))
/etc/raddb/sites-enabled/default[62]: Errors parsing authorize section.
and:
if (Chap-Password == hash %{request:User-Name}) {
which fails with:
Consecutive conditions at %{request:User-Name})
/etc/raddb/sites-enabled/default[62]: Errors parsing authorize section.
So, it appears that I'm having a fundamental failure to understand the
conditional statements in unlang. So, is the wiki old/out-of-date, just
pseudo code, or is the hash function something that I need to write?
My NAS doesn't send a Service-Type and the Calling-Station-Id is in a
different format that I can munge to get into the same format as
User-Name, but I thought the hash option would be the quickest.
Thanks!
Tom Leach
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
