Harry Hoffman wrote:
> I'm following along with the docs for Autz-Type in freeradius-2.1.8,
> specifically the section about selecting between multiple instances of a
> module.
In 2.x, there are better ways to do this. See "man unlang" for
conditionally calling a module.
> In users.conf I have:
> DEFAULT Realm == "siteone.edu", Autz-Type := siteone_ldap, Auth-Type :=
> siteone_ldap
Please don't say "users.conf". It's the "users" file.
The issue is that 2.x has the "inner-tunnel" virtual server, and the
documentation is left over from 1.1.x. The solution is instead to *not*
use the "users" file. Instead, do:
authorize {
...
if (Realm == "siteone.edu") {
siteone_ldap
}
...
}
This will *also* have it automatically set "Auth-Type" to
siteone_ldap, too. That's simpler than the "users" file entry, and
gives less room for mistakes.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
