rlm_ldap ignores password_radius_attribute

Alan DeKok aland at deployingradius.com
Mon Apr 26 18:31:01 CEST 2010


Alexander Clouter wrote:
> Hi,
> 
> Looks like the rlm_ldap module ignores 'password_radius_attribute'[1] so 
> something like the following completely untested patch is needed.  The 
> Novhell eDirectory code probably needs tweaking also to honour this 
> variable, or alternatively remove 'password_radius_attribute' altogether 

  That would be the preferable choice.

  Nearly *all* of the "special" handling of passwords in rlm_ldap should
be deleted.  The "ldap.attrmap" file should be used instead.

  As of 2.1.x, the only reason that rlm_ldap treats passwords as
"special" is for historical reasons.

  Alan DeKok.



More information about the Freeradius-Devel mailing list