EAP-TTLS/PAP with OpenLDAP user store

Stefano Zanmarchi zanmarchi at gmail.com
Tue Mar 6 21:09:22 CET 2012


On Tue, Mar 6, 2012 at 8:00 PM, Fajar A. Nugraha <list at fajar.net> wrote:
>> Instead, you should find out which LDAP attribute stores your
>> MD5-password, add the correct mapping to ldap.attrmap, and leave
>> Auth-Type section commented-out.

Hi Fajar,
thank you for your kind answers, l'll try that out.
One thing still isn't clear to me though. Since the LDAP  "userPassword"
contains the hashed password, how can freeradius use ldap.attrmap  to
perform authentication? I thought it could only try to bind as the user.
Best,
Stefano


More information about the Freeradius-Users mailing list