hi.

 try to add ntPassword attribute or lmPassword to your ldap schema.
 define the ntPassword attribute for the user, using smbencrypt to generate the 
password hash.


Tiago Fernandes


On Tue, 10 Aug 2004 10:03:30 +0200
"Alexandre Durand" <[EMAIL PROTECTED]> wrote:

> So how to configure password for it works??
> 
> Because i configure "clear" password in LDAP database but it doesn't work.
> 
> Can you explain me in details what i have to do.
> 
> In radiusd.conf i put in ldap section :
> 
> password_attribute = userPassword
> 
> So i test freeradius with many authentification methods like TTLS, TLS,...
> but PEAP only doesn't work with me in LDAP mode.For example TTLS/LDAP works
> fine !!
> 
> PEAP works without LDAP with me.
> 
> Thanks for your help
> 
> 
> ----- Original Message ----- 
> From: "Alan DeKok" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, August 09, 2004 11:06 PM
> Subject: Re: PEAP LDAP
> 
> 
> > "Alexandre Durand" <[EMAIL PROTECTED]> wrote:
> > > I want to make an authentication PEAP between Win XP, openldap, and
> > > freeradius. I ve a problem between mschapv2 and openldap. Indeed, I make
> a
> > > test with PEAP without openldap and its works. But if i want to use
> openldap
> > > + freeradius with peap i get an error in eap-mschap module of
> freeradius.
> > >
> > > error is :
> > >
> > > rlm_mschap: No User-Password configured. Cannot create LM-Password.
> >
> >   So... configure a password.
> >
> > > So, In my Openldap i precised a clear password for my users.
> >
> >   I'm not sure what you mean by that.
> >
> >   In any case, stop trying to use PEAP.  Instead, test your existing
> > configuration with PAP requests, sent in via "radtest".  If you can
> > get clear-text passwords from OpenLDAP && do PAP, you can do PEAP.
> >
> >   Alan DeKok.
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> 
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 

Attachment: pgpBrNxlOhdkZ.pgp
Description: PGP signature

Reply via email to