Re: CHAP and Windows 2003 AD LDAP



Hi,

> I'm trying to get a freeradius server (v1.0.1) to work with CHAP and

How about 1.1.2? Upgrading is easy, and it fixes at least one security bug.

> querying a Windows 2003 Active Directory server using LDAP.
>
> I've got LDAP working for PAP queries, but CHAP comes back with the
> "rlm_chap: Could not find clear text password".

AD and LDAP-mode don't work together. The AD server will not give away the 
user's attribute. If you want CHAP to work, you will need to use ntlm_auth. 
That's more work, but possible. Several people keep asking how this works 
every once in a while on this list, searching the archives and the FR website 
will help you get along. There's also a great tutorial on the topic, which is 
referenced here quite often by Charles Schwartz, see the archives for that 
one as well.

Greetings,

-- 
Stefan WINTER

Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de 
la Recherche
Ingenieur Forschung & Entwicklung

6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg
E-Mail: stefan.winter@restena.lu     Tel.:     +352 424409-1
http://www.restena.lu                Fax:      +352 422473

Attachment: pgpUWOSduigzp.pgp
Description: PGP signature



This archive was generated by a fusion of Pipermail (Mailman edition) and MHonArc.