I tried putting this in the radreply as well. It seems freeradius is
ignoring the Auth-Type := REJECT
Robert Canary wrote:
I am using the Auth-Type := REJECT in the radcheck table to disable
users.
However, they are still being authenticated and can successfully login.
I believe I am
to reject a user, by using Auth-Type == Reject:
1) Am I correct that is *should* be placed as an attribute for
Username,Attribute=Auth-Type,op='==',Value=Reject in the
radcheck table?
2) Is the Reject value case sensitive?
thanks in advance :-)
--
robert
-
List info/subscribe/unsubscribe? See
Robert Canary [EMAIL PROTECTED] wrote:
If I want to reject a user, by using Auth-Type == Reject:
1) Am I correct that is *should* be placed as an attribute for
Username,Attribute=Auth-Type,op='==',Value=Reject in the
radcheck table?
Use ':='. See the 'users' file 'man' page for details
:53:27 2003 : Auth: Login incorrect (rlm_ldap: User not found):
[WhistleBlower] (from client YYY port 1)
What I did than is to create a user WhistleBlower a the beginning of the users file
using
the Auth-Type := Reject attribute. Starting radiusd in debug mode and using radtest
I tested that user
)
Then disable logging of failed authentication requests.
What I did than is to create a user WhistleBlower a the beginning of
the users file using the Auth-Type := Reject attribute. Starting
radiusd in debug mode and using radtest I tested that user and
access was rejected as expected and radiusd
I have installed FreeRadius 0.6 and then FreeRadius 0.7 on our server.
But, we now have a trouble - I need to disable one account.
We use PostgreSQL for managing our users database.
We made user-group frozen with Auth-Type:=Reject :
radius=# SELECT * FROM radgroupreply WHERE groupname='frozen
To diable a group do this:
#select * from radgroupcheck;
++---+--+++
| id | GroupName | Attribute| Value | op |
++---+--+++
| 21 | reject| Auth-Type| Reject | := |
the all users
on our server.
But, we now have a trouble - I need to disable one account.
We use PostgreSQL for managing our users database.
We made user-group frozen with Auth-Type:=Reject :
radius=# SELECT * FROM radgroupreply WHERE groupname='frozen';
id | groupname | attribute | value | op
Hi! i use free radius 0.3 and postgresql, and i want to set Auth-Type :=
Reject for some users in radreply table. As i know, i must add column
'op' to check/reply tables and modify sql.conf. Is it nessesary
upgrade to freeradius 0.4?
--
cron-ripe
-
List info/subscribe/unsubscribe? See http
