Axel Seguin wrote:
Hi everyone,

I am using Freeradius with LDAP. I use EAP-TTLS for authentication with PAP (the passwords in LDAP being crypted).
In the ldap.conf file I have :

log_auth_badpass = no
log_auth_goopass = no

But I still see the user password in clear text in the auth-detail file.

I am sorry if this is a silly question but I have been trying to find a solution for quite a while now and still haven't found anything. Is it possible to make sure the passwords are not stored in the auth-detail files?

Not without source code patches. See other recent posts on the list on this subject.

Or does it have to be like this?

No. You can disable auth-detail logging. It's not enabled by default. You chose to enable it. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to