On Mon, 7 Jan 2002, pavesi wrote:
> I noticed that there was some earlier posts about getting ldap + chap support
> working with freeradius. I currently am using .4 of freeradius and have it
> *almost*
> working..
> Whats weird when running in debug mode is that the rlm_ldap processes the
> correct
> information (ie. password) in 'ldap_authorize', but the password is either
> hashed or
> just junk when it gets to 'ldap_authenticate'. I would expect the password
> to be
> the same, but maybe I'm missing something. Help would be appericated on this
> one..
>
> Craig
Don't use ldap for chap *authentication*. You should have ldap only in the
authorize section to extract passwords. Then you should put an rlm_chap
instance in the authenticate section to deal with chap authentication. Something
like:
authenticate{
authtype CHAP{
chap
}
[...]
}
--
kkalev
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html