Hello Erik -
On Thu, 23 Dec 1999, Erik Meitner wrote:
>
> It would be nice to have an option that allows one to add a check-item to
> every authentication request, much like how AddToReply works. ie:
>
> <AuthBy FILE>
> Filename %D/users
> AddToCheck Group=user
> </AuthBy>
>
You can already do this with cascaded AuthBy's, something like this:
# create an AuthBy FILE with Identifier Users
<AuthBy FILE>
Identifier Users
Filename %D/users
</AuthBy>
# your normal Handler
<Handler ....>
<AuthBy FILE>
Filename %D/groups
</AuthBy>
</Handler>
Then in your file %D/groups you would have the following:
# check groups then refer to users file via the Identifier
DEFAULT Group = user, Auth-Type = Users
And of course your existing users file would remain the same.
The advantage of this approach is that it is generalised and AuthBy's can be
nested to any depth (and any AuthBy method can be used).
hth
Hugh
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, etc etc on Unix, Win95/8,
NT, Rhapsody
===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
