I am using PrivacyIDEA's implementation of FreeRADIUS to send authentication requests to PrivacyIDEA. However, I'd like to locally authenticate a specific user if the request comes in. I've modified the users file to include the user and user password and modified the site configuration to include the files module. However, FreeRADIUS is still passing the request on to PrivacyIDEA. What am I missing here?
Debug output is here (Site wouldn't let me post it here): https://pastebin.com/raw/WAsXx4gN
Site Configuration
server {
authorize {
files
update request {
# Add the Packet Src IP to the request as client fallback
Packet-Src-IP-Address = "%{Packet-Src-IP-Address}"
}
perl-privacyidea
if (ok || updated) {
update control {
Auth-Type := Perl
}
}
}
listen {
type = auth
ipaddr = 10.97.11.51
port = 1812
}
listen {
type = acct
ipaddr = 10.97.11.51
port = 0
}
authenticate {
files
Auth-Type perl {
perl-privacyidea
}
digest
}
accounting {
detail
}
}