mark.le...@stfc.ac.uk wrote:
> I have the exec module enabled in the instantiate section of radiusd.conf and
> I have the following at the end of the authorize section in the
> sites-enabled/default file:
>
> if (control:Auth-Type == LDAP) {
> update control {
> Auth-Type = `%{exec:/etc/raddb/facilityUsers.pl
> %{control:Ldap-UserDn} %{control:Auth-Type}}`
Please read "man unlang".
What you have configured here is:
1) run the "exec" module to get some output via %{exec:...}
2) run the resulting data as a program via `...`
That's likely not what you want. Use double quotes instead of
back-quotes.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
