[EMAIL PROTECTED] wrote:
Why yes, I did map Cleartext-Password, since the debug error ( and various list postings) seemed clear on that:

ldap.attrmap:
checkItem       Cleartext-Password              userPassword

OK. Debug will moan about using User-Password if you are using clear text
password. It will moan, replace it with Cleartext-Password - and things
will still work. If you are using clear text passwords you can do this
mapping to shut it up. Better practice would be to map it to something
like radiusCleartextPassword and copy userPassword field there.

But mapping encrypted passwords to Cleartext-Password is clearly wrong.
Remove that mapping and auto_headers in pap will work.

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

What you say makes complete sense, but its still not working for me unless I have ldap do the auto_header. However, I'd done several things with this machine in this process, so I'm going to rebuild it and start from scratch, now that I am clear on exactly how this bit is supposed to work.

Thank you for your input,

tim



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to