Re: Fw: freeradius and ldap using chap

2010-02-22 Thread Eric Eric
is wrong in my config?any help? --- On Sun, 2/21/10, Eric Eric eric121...@yahoo.com wrote: From: Eric Eric eric121...@yahoo.com Subject: Fw: freeradius and ldap using chap To: freeradius-users@lists.freeradius.org Date: Sunday, February 21, 2010, 1:33 PM Hi I want to change authentication pap

Fw: freeradius and ldap using chap

2010-02-21 Thread Eric Eric
= userPassword     password_header = {clear}        } authorize { chap Autz-Type Vpn{     ldap-Vpn     chap   } } authenticate { Auth-Type CHAP {     chap     }  Auth-Type Vpn{     chap

Re: LDAP and CHAP

2004-07-16 Thread Kostas Kalevras
On Fri, 16 Jul 2004, Daniel Eyholzer wrote: [EMAIL PROTECTED] wrote: What is the added benefit of something that is encrypted where the algorithm keys to decrypt are public knowlegde... There is no security there, just a false sense of the feeling. If the key to decrypt the password is

LDAP and CHAP

2004-07-15 Thread Daniel Eyholzer
Hi there Im using 1.0.0-pre3 to authenticate users with ldap as backend. In the LDAP-tree I have md5 passwords. When I configure the Network Access Server to use PAP it works fine, but with CHAP it does not work. I have read that CHAP can not be used with encryptet passwords in the database, is

Re: LDAP and CHAP

2004-07-15 Thread Chan Min Wai (System Administrator)
Daniel Eyholzer wrote: Hi there Im using 1.0.0-pre3 to authenticate users with ldap as backend. In the LDAP-tree I have md5 passwords. When I configure the Network Access Server to use PAP it works fine, but with CHAP it does not work. I have read that CHAP can not be used with encryptet

RE: LDAP and CHAP

2004-07-15 Thread Mitchell, Michael
. Regards, Michael -Original Message- From: Daniel Eyholzer [mailto:[EMAIL PROTECTED] Sent: Thursday, 15 July 2004 5:13 PM To: [EMAIL PROTECTED] Subject: LDAP and CHAP Hi there Im using 1.0.0-pre3 to authenticate users with ldap as backend. In the LDAP-tree I have md5

Re: LDAP and CHAP

2004-07-15 Thread Daniel Eyholzer
Mitchell, Michael [EMAIL PROTECTED] wrote: In short, yes you need a clear text password at the server end. Okay. b) use a reversible encryption algorithm to store your passwords, and modify the rlm_ldap code to decrypt the user password as it pulls it out of ldap. This feature is not

RE: LDAP and CHAP

2004-07-15 Thread Mitchell, Michael
b) use a reversible encryption algorithm to store your passwords, and modify the rlm_ldap code to decrypt the user password as it pulls it out of ldap. This feature is not implemented yet? Well its not a standard feature of freeRADIUS, and quite possibly shouldn't be, so probably

Re: LDAP and CHAP

2004-07-15 Thread Daniel Eyholzer
Mitchell, Michael [EMAIL PROTECTED] wrote: Well its not a standard feature of freeRADIUS, and quite possibly shouldn't be, so probably never will be. ;-) Why isn't it a standard feature? Is there an obvious reason? Are you all storing your password in clear text in LDAP or whatever backend you

RE: LDAP and CHAP

2004-07-15 Thread Nico.Baggus
Why isn't it a standard feature? Is there an obvious reason? Are you all storing your password in clear text in LDAP or whatever backend you use? Or are you just not using CHAP for authentication? What is the added benefit of something that is encrypted where the algorithm keys to decrypt

RE: LDAP and CHAP

2004-07-15 Thread Kostas Kalevras
] Subject: LDAP and CHAP Hi there Im using 1.0.0-pre3 to authenticate users with ldap as backend. In the LDAP-tree I have md5 passwords. When I configure the Network Access Server to use PAP it works fine, but with CHAP it does not work. I have read that CHAP can not be used

Re: LDAP and CHAP

2004-07-15 Thread Oliver Graf
On Thu, Jul 15, 2004 at 03:07:44PM +0200, Oliver Graf wrote: On Thu, Jul 15, 2004 at 02:35:03PM +0200, Daniel Eyholzer wrote: Mitchell, Michael [EMAIL PROTECTED] wrote: Well its not a standard feature of freeRADIUS, and quite possibly shouldn't be, so probably never will be. ;-) Why

Re: LDAP and CHAP

2004-07-15 Thread Paul Bender
Chan Min Wai (System Administrator) wrote: Daniel Eyholzer wrote: Hi there Im using 1.0.0-pre3 to authenticate users with ldap as backend. In the LDAP-tree I have md5 passwords. When I configure the Network Access Server to use PAP it works fine, but with CHAP it does not work. I have read that

Re: LDAP and CHAP

2004-07-15 Thread Paul Bender
Daniel Eyholzer wrote: Mitchell, Michael [EMAIL PROTECTED] wrote: Well its not a standard feature of freeRADIUS, and quite possibly shouldn't be, so probably never will be. ;-) Why isn't it a standard feature? Is there an obvious reason? Are you all storing your password in clear text in LDAP or