Re: configuration parameters for perl module in rlm_perl

2013-09-14 Thread Cornelius Kölbel

Am 14.09.2013 14:50, schrieb Alan DeKok:
> Cornelius Kölbel wrote:
>> I would like to avoid having the perl module read an additional
>> configuration file.
>   Then edit the source code to rlm_perl, and add those features.
>
>> Is there a possibility to add such paramters somewhere in the freeradius
>> config like in
>> /etc/freeradius/modules/perl and than have the perl module access these
>> parameters?
>   No.
Thanks for the clarification!
>
>   Why is it a problem to read a configuration file?
Just to avoid to many config files...
But now I will do so.

Thanks a lot
Cornelius
>
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html




signature.asc
Description: OpenPGP digital signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: configuration parameters for perl module in rlm_perl

2013-09-14 Thread Alan DeKok
Cornelius Kölbel wrote:
> I would like to avoid having the perl module read an additional
> configuration file.

  Then edit the source code to rlm_perl, and add those features.

> Is there a possibility to add such paramters somewhere in the freeradius
> config like in
> /etc/freeradius/modules/perl and than have the perl module access these
> parameters?

  No.

  Why is it a problem to read a configuration file?

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


configuration parameters for perl module in rlm_perl

2013-09-14 Thread Cornelius Kölbel
Hi list,

is there are recommended way to pass configuration parameter to a
rlm_perl module?
My rlm_perl module, would need to have additional configuration parameters.

I would like to avoid having the perl module read an additional
configuration file.
Is there a possibility to add such paramters somewhere in the freeradius
config like in
/etc/freeradius/modules/perl and than have the perl module access these
parameters?

Thanks a lot and kind regards
Cornelius



signature.asc
Description: OpenPGP digital signature
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.1.12 Second LDAP Server

2013-09-14 Thread Mathieu Simon
Hi

While I generally chime in with Alan's later message, one important you
should start reading about and differentiating
is Authentication and Authorization (the later is Accounting of AAA with
RADIUS).

While you can do Authorization using LDAP with AD, you can't do the
Authentication part using LDAP against AD.
Using Samba and ntlm_auth is the way to go, that due to to how AD stores
passwords.

Read deployingradius.com, specially the compatibility matrix and
"Authentication Systems and Password Compatibility".

You may do LDAP load balancing on the authorization part, but ntlm_auth and
balancing / failover is done by Samba.
Otherwise if you want to go deeper, get a RADIUS book :-) I can confirm
that the initial curve may be a bit steep if you
haven't done any RADIUS before, but it's well worth since it gets you
better overall understanding  on AAA and RADIUS, that will
definitely help if something goes belly up.

-- Mathieu
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html