Harry Hoffman wrote: > I'm following along with the docs for Autz-Type in freeradius-2.1.8, > specifically the section about selecting between multiple instances of a > module.
In 2.x, there are better ways to do this. See "man unlang" for conditionally calling a module. > In users.conf I have: > DEFAULT Realm == "siteone.edu", Autz-Type := siteone_ldap, Auth-Type := > siteone_ldap Please don't say "users.conf". It's the "users" file. The issue is that 2.x has the "inner-tunnel" virtual server, and the documentation is left over from 1.1.x. The solution is instead to *not* use the "users" file. Instead, do: authorize { ... if (Realm == "siteone.edu") { siteone_ldap } ... } This will *also* have it automatically set "Auth-Type" to siteone_ldap, too. That's simpler than the "users" file entry, and gives less room for mistakes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html