[EMAIL PROTECTED] wrote:
> If i understood it right, the Radius Server should do a bind to LDAP Server
>  with DN and Password provided.

  What password?  There's no password in MSCHAPv2, and LDAP doesn't do
MSCHAPv2.

> The success answer from LDAP tells the Radius Server authentication
> successful finished.

  LDAP servers are not authentication servers.  RADIUS servers are
authentication servers.  That's the root cause of your confusion.

> Is it basicaly possible with PEAP/MSCHAPv2 to authenticate at an LDAP
> directory?

  No.  See any number of posts on this list about this topic.

  LDAP has to provide a clear-text, or NT password to FreeRADIUS.
FreeRADIUS will then do the work.

  Alan DeKok.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to