|
can anyone help me on this CHAP issue
thanks...
----- Original Message -----
Sent: Wednesday, December 17, 2003 6:21
PM
Subject: migrate PAP to CHAP for
LDAP
How can i migrate PAP authentication method to
CHAP using existing LDAP data ??
Tested below:
- In radiusd.conf under ldap module:
password_header = "{clear}"
password_attribute
= radiusCHAPPassword [mapped to
CHAP-Password]
=> added
radiusCHAPPassword in LDAP entry
Although at first its detect Auth-Type =
CHAP... then rlm_ldap still complaining needing
"User-Password"
######### debug
MODE####################
rad_recv: Access-Request packet from host
10.1.1.1:16941, id=30, length=51
User-Name = "haizamchap"
CHAP-Password = 0xf47dcdd9b0c307fc682539df2704ac6a20
modcall: entering
group authorize for request 0
modcall[authorize]: module
"preprocess" returns ok for request 0
rlm_chap: Setting 'Auth-Type
:= CHAP'
modcall[authorize]: module "chap" returns ok for request
0
rlm_realm: No '@' in
User-Name = "haizamchap", looking up realm NULL
rlm_realm: Found realm "NULL"
rlm_realm: Adding
Stripped-User-Name = "haizamchap"
rlm_realm: Proxying
request from user haizamchap to realm NULL
rlm_realm:
Adding Realm = "NULL"
rlm_realm: Authentication realm is
LOCAL.
modcall[authorize]: module "suffix" returns noop for request
0
users: Matched DEFAULT at 43
modcall[authorize]: module "files" returns ok for request 0
modcall[authorize]: module "mschap" returns noop for request 0
rlm_ldap: -
authorize
rlm_ldap: performing user authorization for
haizamchap
radius_xlat: '(uid=haizamchap)'
radius_xlat:
'ou=People,dc=jaring,dc=my'
ldap_get_conn: Got Id: 0
rlm_ldap:
attempting LDAP reconnection
rlm_ldap: (re)connect to 127.0.0.1:389,
authentication 0
rlm_ldap: bind as
cn=Sysadmin,ou=Applications,dc=jaring,dc=my/xxxxxxxx to
127.0.0.1:389
rlm_ldap: waiting for bind result ...
rlm_ldap: performing
search in ou=People,dc=jaring,dc=my, with filter (uid=haizamchap)
rlm_ldap:
checking if remote access for haizamchap is allowed by
dialupAccess
rlm_ldap: Password header not found in password haizamchap for
user haizamchap
rlm_ldap: looking for check items in
directory...
rlm_ldap: Adding radiusCHAPPassword as CHAP-Password, value
haizamchap & op=21
rlm_ldap: looking for reply items in
directory...
rlm_ldap: Adding radiusFramedCompression as
Framed-Compression, value Van-Jacobson-TCP-IP & op=11
rlm_ldap: Adding
radiusFramedMTU as Framed-MTU, value 1500 & op=11
rlm_ldap: Adding
radiusFramedProtocol as Framed-Protocol, value PPP & op=11
rlm_ldap:
Adding radiusServiceType as Service-Type, value Framed-User &
op=11
rlm_ldap: user haizamchap authorized to use remote
access
ldap_release_conn: Release Id: 0
modcall[authorize]:
module "ldap1" returns ok for request 0
modcall: group authorize returns ok
for request 0
rad_check_password: Found Auth-Type
LDAP
auth: type "LDAP"
modcall: entering group Auth-Type for request
0
rlm_ldap: - authenticate
rlm_ldap: Attribute "User-Password" is
required for authentication. Cannot use "CHAP-Password".
modcall[authenticate]: module "ldap1" returns invalid for request
0
modcall: group Auth-Type returns invalid for request 0
auth: Failed to
validate the user.
--haizam
[ Scanned by JARING E-Mail Virus Scanner ( http://www.jaring.my ) ]
|
