LDAP and FreeRadius

Phil Mayers p.mayers at imperial.ac.uk
Thu Aug 16 13:00:06 CEST 2012


On 08/16/2012 05:58 AM, Fajar A. Nugraha wrote:

>> https://github.com/alandekok/freeradius-server/blob/v2.1.x/src/modules/rlm_ldap/rlm_ldap.c#L1545
>>
>> In particular, AFAICT if password_attribute is set, and auto_header is
>> unset, then the attribute added will be User-Password.
>
> Hmm ... I wonder if simply replacing PW_USER_PASSWORD with
> PW_CLEARTEXT_PASSWORD there will work :)

It would probably be an (easy) improvement. IIRC the code in HEAD is 
different though.

On a wider node, I wonder if the code inside rlm_ldap for 
password_header is even useful anymore - rlm_pap has support for 
auto-detecting the header, so it's just duplication.


More information about the Freeradius-Users mailing list