Hi,
> I'm new to FreeRadius and trying to setup the server to authenticate using
> LDAP. I'm having some problem and hope to get some help from the list.
if your clients are doing EAP-TTLS/PAP then this will work - the PAP
module can deal the requirements.
if, as i suspect, you are using PEAP (PEAPv0/MSCHAPv2) then you cannot use
{crypt} from the LDAP - you will either have to expose the passwords as
cleartext
in LDAP or use NT HASH instead (i'd personally go for the latter).
what is your backend system - AD? as you might be going about it the wrong
way...if its AD, then bind the FR server into your AD (following the plenty
of examples eg www.deployingradius.com ) - and use ntlm_auth in the mschap
module to do the authentication - you can still use LDAP for finding what group
people belong to for eg VLAN override...
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
