FreeRadius and MacOsx (LDAP vs Kerberos)

Massimiliano Tommasi m.tommasi at purplesrl.com
Wed Jul 27 17:49:45 CEST 2011


You are right, Alan.
I hoped there was a solution to this but evidently it's not possible.
The only way is to disable the chap on the client-side.

Regards,
Max

Il 27/07/11 17.14, Alan DeKok ha scritto:
> Massimiliano Tommasi wrote:
>> I got the first step..., FreeRadius and OpenDirectory are "speaking" the
>> same language BUT I'm not able to authenticate the users...
> 
>   Please READ the debug output. Honestly, it's not that hard.
> 
>> On the client side I have a function to get the chap and on the server
>> side I don't save the password in hashing manner (i guess) ...
> 
>   You can't do CHAP with OpenDirectory.  READ the debug output you posted.
> 
>> I have some doubt on the Apple side.., is the server asking for clear
>> password on the apple side?
> 
>   You can't do CHAP with OpenDirectory.
> 
>   Alan DeKok.
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list