VS: Chap auhtentication against LDAP

tnt at kalik.net tnt at kalik.net
Mon Apr 6 14:03:29 CEST 2009


>So i cannot do this about using freeradius, but i can make it
>using IAS (see link)?
>
>http://h40060.www4.hp.com/procurve/includes/application-notes/index.php?cc=uk&lc=en&content=ans2-en
>

But that's not LDAP, that's Active Directory. Active Directory can be
made to reveal a clear text password to IAS (setting needs to be
activated *before* you start storing passwords in it; if AD passwords
are stored only in nt format, and you then enable this - CHAP still
won't work: it will work *after* next password change - AD will store
both clear and nt version of the new password). Microsoft does not allow
this for third party radius servers.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list