Time for action – investigating the order of modules
This exercise requires you to take note of the order of modules listed in the various sections inside a virtual server.
- Open the
sites-enabled/default
file under the FreeRADIUS configuration directory. - Read through it and take note of the order in which modules are used inside the various sections. Some of the comments will mention why a module is located at a certain place inside a section.
The following notes regarding the default file should make things clearer.
Access-Request
When an Access-Request
packet comes in to the FreeRADIUS server it is first handled by the authorize
section of the virtual server. It may then be handled by the authenticate
and session
sections and is finally passed to the post-auth
section.
The first module listed in the authorize
section is preprocess
. It is first for a reason. Here's a general flow of the authorize
section:
- The
preprocess
module does a sanity check and changes weird attributes to more...