Simplify to PAP authentication only for initial testing

Two-step auth flow:
1. AuthGetPassword: Fetches password from attributes using *dry_run
2. AuthPAP: Performs PAP authentication with *radauth + *pap

Will add CHAP and MS-CHAPv1 after PAP is confirmed working.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
2025-12-23 23:15:24 +05:00
parent f6bcdccf9c
commit ca09317856

View File

@@ -82,9 +82,9 @@
},
"request_processors": [
{
"id": "PPPoEAuth",
"id": "AuthGetPassword",
"filters": ["*string:~*vars.*radReqType:*radAuth"],
"flags": ["*event", "*attributes", "*log"],
"flags": ["*dry_run", "*attributes", "*continue", "*log"],
"request_fields": [
{"tag": "Account", "path": "*cgreq.Account", "type": "*composed", "value": "~*req.User-Name", "mandatory": true}
],
@@ -92,6 +92,18 @@
{"tag": "SessionTimeout", "path": "*rep.Session-Timeout", "type": "*constant", "value": "3600"},
{"tag": "AcctInterimInterval", "path": "*rep.Acct-Interim-Interval", "type": "*constant", "value": "60"}
]
},
{
"id": "AuthPAP",
"filters": ["*string:~*vars.*radReqType:*radAuth"],
"flags": ["*radauth", "*pap", "*log"],
"request_fields": [
{"tag": "UserPassword", "path": "*vars.UserPassword", "type": "*variable", "value": "~*cgrep.Attributes.Password"}
],
"reply_fields": [
{"tag": "ReplyOnError", "filters": ["*notempty:~*cgrep.Error:"], "path": "*rep.*radReplyCode", "type": "*constant", "value": "AccessReject"},
{"tag": "ReplyMessage", "filters": ["*notempty:~*cgrep.Error:"], "path": "*rep.Reply-Message", "type": "*variable", "value": "~*cgrep.Error"}
]
}
]
},