Re: Authentication Alternatives

"Andre Herkenrath" <andre@glodde-herkenrath.de> wrote:
> The Usernames can be e.g. user@novell or user@ads.
>
> I tried this with proxying on the same machine, but the authentication
> against ads took a very long time so the main
> Radius sent an reject.

That's a different issues which still MUST be fixed.

You don't need to proxy the requests. Just do:

# users
DEFAULT Realm == "novell", Autz-Type := novell

DEFAULT Realm == "ads", Autz-Type := ads
#

And in the "authorize" section, add:

authorize {
...
Autz-Type novell {
novell
}
Autz-Tyle ads {
ads
}
....
}

Where "novell" and "ads" are the LDAP configurations for the
different servers.

Alan Dekok.


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html