802.1x problems

tnt at kalik.net tnt at kalik.net
Thu Jan 15 22:06:14 CET 2009

>The passwords are in the ldap server (Novell). I don't understand what
>you mean by
>"so you need to send the password to freeradius"

It should be made available in userPassword attribute. Or as NT hash in
ntPassword or sambaNtPassword.

>Can you either explain or point me to the proper doc? If ldap auth
>can't work with mschap what does everyone do to work with standard
>windows clients?

Read comments above set_auth_type in ldap module configuration file
(raddb/modules/ldap). People make the passwords available to radius.
Your debug shows no attributes being passed from ldap to radius (check
or reply).

Ivan Kalik
Kalik Informatika ISP

More information about the Freeradius-Users mailing list