On Mon, 7 Jan 2002, pavesi wrote:

> I noticed that there was some earlier posts about getting ldap + chap support
> working with freeradius.  I currently am using .4 of freeradius and have it 
> *almost*
> working..
> Whats weird when running in debug mode is that the rlm_ldap processes the 
> correct
> information (ie. password) in 'ldap_authorize', but the password is either 
> hashed or
> just junk when it gets to 'ldap_authenticate'.  I would expect the password 
> to be
> the same, but maybe I'm missing something.  Help would be appericated on this
> one..
> 
> Craig

Don't use ldap for chap *authentication*. You should have ldap only in the
authorize section to extract passwords. Then you should put an rlm_chap
instance in the authenticate section to deal with chap authentication. Something
like:

authenticate{
        authtype CHAP{
                chap
        }
        [...]
}

--
kkalev

> 
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to