Using the Autz-Type attribute

Goal: To control which authorization modules are executed for an Access-Request

Time: 10-20 minutes

Files:

This exercise is a follow-up to the previous one in Multiple Modules, and it uses the byname and bydate modules configured there.

Start off by deleting the old log files:

$ rm -f /var/log/radius/radacct/byname/*
$ rm -f !/var/log/radius/radacct/bydate/*

Edit the file, and add the following text at the top:

DEFAULT  Autz-Type := byname
         Fall-Through = 1

In the raddb/sites-available/default file, edit the authorize section entries for the byname and bydate modules to be as follows:

Autz-Type byname {
	byname
}

Autz-Type bydate {
	bydate
}

Start the server, and send it a test packet (e.g., bob.sh).

Use the debug messages from the server to verify that only one of the modules is called.

Look in the log directory, and verify the existence of the files and their contents, as follows:

$ ls /var/log/radius/radacct/byname/
$ more /var/log/radius/radacct/byname/bob

$ ls /var/log/radius/radacct/bydate/

Questions