Clarifying authorization and authentication interaction
3APA3A
3APA3A@SECURITY.NNOV.RU
Sat, 13 Apr 2002 19:28:00 +0400
Dear migs paraz,
Your authorization function should set Auth-Type in
request->config_items
--Saturday, April 13, 2002, 6:55:14 PM, you wrote to freeradius-devel@lists.cistron.nl:
mp> Hi,
mp> I'm working on a sample use for the Python module - a
mp> prepaid card system with MySQL.
mp> It is not clear to me how the authorization function
mp> module should tell radiusd to use the authentication
mp> function in the same module.
mp> At first I thought returning RLM_MODULE_OK was enough.
mp> Then I saw in rlm_example:
mp> request->reply->code = PW_ACCESS_CHALLENGE;
mp> What value should be used for what I need? I tried
mp> using PW_AUTHENTICATION_REQUEST. When I trace through
mp> it, it passes through rad_check_password(), which
mp> seems to me is for the 'users' file, isn't it?
mp> Since I'm doing database calls, I think it would be
mp> best to do one set of SQL queries. Therefore, I can
mp> merge authorization and authentication into one
mp> operation? Even if they must be separate, I'm not sure
mp> which is the right place for checking their account
mp> balance.
mp> Thanks!
mp> =====
mp> Miguel A.L. Paraz
mp> Metro Manila, Philippines
mp> +63-916-4237922
mp> __________________________________________________
mp> Do You Yahoo!?
mp> Yahoo! Tax Center - online filing with TurboTax
mp> http://taxes.yahoo.com/
mp> -
mp> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
--
~/ZARAZA
Особую проблему составляет алкоголизм. (Лем)