Re: force eap-type

On Wed, 23 Feb 2005, Marc Boisis wrote:

> Kostas Kalevras a ?crit :
>
>> On Tue, 22 Feb 2005, Marc Boisis wrote:
>>
>>> Hello world
>>> I would like to force EAP-Type according to an ldap attribute . That is to
>>> say between authorize ant authenticate.
>>> Is it possible and how ?
>>
>>
>> I think you just need to map the EAP-Type attribute to an ldap attribute in
>> the user entry. That is, something like this:
>>
>> dn: uid=user,ou=people,dc=company,dc=com
>> radiuscheckitem: EAP-Type := EAP-TTLS
>>
>> authorize{
>> eap
>> [...]
>> ldap
>> }
>>
>> authenticate{
>> eap
>> }
>>
>>>
>>>
>>> - List info/subscribe/unsubscribe? See
>>> http://www.freeradius.org/list/users.html
>>>
>>
>> --
>> Kostas Kalevras Network Operations Center
>> kkalev@noc.ntua.gr National Technical University of Athens, Greece
>> Work Phone: +30 210 7721861
>> 'Go back to the shadow' Gandalf
>>
>> - List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>>
> In fact I want to associate eap-type to the private-group-id attribute like
> this
> if private-group-id==1
> then EAP-Type=EAP-TTLS
>
> if private-group-id==1
> then EAP-Type=EAP-PEAP
>
> but users file is not read between authorize and authenticate

YES it does!

> How can I do ?
>
> - List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>

--
Kostas Kalevras Network Operations Center
kkalev@noc.ntua.gr National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html