On Mon, 16 Jun 2003, Michael Davidson wrote:

> Hi
>       You need to re-order your authorize section so that MS_CHAP and CHAP appear
> after LDAP. The LDAP module will read the client's details into memory for
> use by the 'CHAP authenticate modules.


** NO **

The mschap/chap modules should come *before* the ldap module to set Auth-Type
correctly. The ldap module just needs to be present in the authrize section to
extract the user password from the user ldap entry and make it available for the
mschap/chap modules in the authenticate section.

>
> Regards Mike D.

--
Kostas Kalevras         Network Operations Center
[EMAIL PROTECTED]       National Technical University of Athens, Greece
Work Phone:             +30 210 7721861
'Go back to the shadow' Gandalf

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to