Clarifying authorization and authentication interaction

3APA3A 3APA3A@SECURITY.NNOV.RU
Sat, 13 Apr 2002 19:28:00 +0400


Dear migs paraz,

Your     authorization     function     should    set    Auth-Type    in
request->config_items

--Saturday, April 13, 2002, 6:55:14 PM, you wrote to freeradius-devel@lists.cistron.nl:

mp> Hi,
mp> I'm working on a sample use for the Python module - a
mp> prepaid card system with MySQL.

mp> It is not clear to me how the authorization function
mp> module should tell radiusd to use the authentication
mp> function in the same module.

mp> At first I thought returning RLM_MODULE_OK was enough.
mp> Then I saw in rlm_example:

mp>   request->reply->code = PW_ACCESS_CHALLENGE;

mp> What value should be used for what I need? I tried
mp> using PW_AUTHENTICATION_REQUEST.  When I trace through
mp> it, it passes through rad_check_password(), which
mp> seems to me is for the 'users' file, isn't it?

mp> Since I'm doing database calls, I think it would be
mp> best to do one set of SQL queries. Therefore, I can
mp> merge authorization and authentication into one
mp> operation? Even if they must be separate, I'm not sure
mp> which is the right place for checking their account
mp> balance.

mp> Thanks!




mp> =====
mp> Miguel A.L. Paraz
mp> Metro Manila, Philippines
mp> +63-916-4237922

mp> __________________________________________________
mp> Do You Yahoo!?
mp> Yahoo! Tax Center - online filing with TurboTax
mp> http://taxes.yahoo.com/

mp> - 
mp> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html


-- 
~/ZARAZA
Особую проблему составляет алкоголизм.  (Лем)