Re: LEAP,LDAP & required User-Password

[claufer]

thanks for response Alan.

 That's for doing PAP authentication against the LDAP server.  EAP
isn't PAP, so you can't do EAP authentication against the LDAP server.
 

hmm I�m confused now :/, so  I can�t  use LEAP with freeradius while 
having the whole user attributes (password entry included)  in LDAP for 
authentication?

Or am I wrong and there is a invisible User-Password delivered with
EAP Message?
   

 There is no User-Password in EAP.

 Alan DeKok.

This means that my UserPassword entry in LDAP is unecessary?
How else can I set a password for the users in LDAP? Or is there no 
opportunity?

I was setting up a DEFAULT password for all my LDAP users in users file. 
After that the authentication of the users was successful. Instead of 
the error: "rlm_eap_leap: FAILED incorrect NtChallengeResponse from AP" 
the message: "rlm_eap_leap: NtChallengeResponse from AP is valid" 
appeared.  But my main goal is to have the password entry in the LDAP 
database.

What am I doing wrong? and how can I set the password for the users in 
LDAP in such a way that users can successful authenticate without having 
the error message: rlm_eap_leap: "FAILED incorrect NtChallengeResponse 
from AP"?

thanks in advance for any good suggestions!

regards,
cl


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html