On Fri, 10 Sep 2004, Emil Kokor wrote:
> Hi!
>
> My userbase is LDAP.
> The LDIF looks like:
>
> dn: uid=ekokor, ou=People, dc=wss-stuttgart,dc=de
> userPassword:: e1NTSEF9ZDNCZGZmWkFVQVZxa01SV1lJMGVZUTNnRThVcFdPNTE=
>
> UserPassword is "emil" == "{SSHA}d3BdffZAUAVqkMRWYI0eYQ3gE8UpWO51"
> (only for testing purposes)
>
> I'm using FreeRADIUS 1.0.0 with OpenSSL 0.9.7d (now without problems after I used
> --disable-shared option).
>
> For authentication I should use (I think so) EAP-TTLS/PAP because of LDAP-Userbase
> and
> crypted passwords.
>
>
> In users-File there is only one default entry to deny access for a group of users.
>
> Are the settings so far ok?
> Because it doesn't work.
>
>
> radiusd.conf:
>
> authenticate {
> Auth-Type PAP {
> pap
> }
>
> # Auth-Type CHAP {
> # chap
> # }
> # Auth-Type MS-CHAP {
> # mschap
> # }
> # Auth-Type LDAP {
> # ldap
> # }
> eap
Please configure authentication through the ldap module not the pap module.That
should make things work.
And as suggested in the FAQ and the documentation, run the server in debug mode
(radiusd -X).
--
Kostas Kalevras Network Operations Center
[EMAIL PROTECTED] National Technical University of Athens, Greece
Work Phone: +30 210 7721861
'Go back to the shadow' Gandalf
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html