"Clayton Dukes" <[EMAIL PROTECTED]> wrote:
> Sorry, I must have misunderstood. Forgive me...If I turn off LDAP in the
> authenticate section,

  Did I say to do that?  No.  Go back and read what I said.

  If you're retrieving passwords from the LDAP directory, then setting
Auth-Type := LDAP is not only redundant, it ensures that CHAP,
MS-CHAP, and PEAP authentication won't ever work.  In addition, it
increases the load on your LDAP server, for no point.

  If you're not retrieving passwords from LDAP, then CHAP, MS-CHAP,
and PEAP won't *ever* work.  Only PAP authentication will work.

  Don't set Auth-Type := LDAP.

  Please READ my responses, and don't read into them your
interpretation of what you think I meant to say.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to