LDAP auth

[Phil Mayers]

On 17/06/2014 18:01, Jon Jenkins wrote:

> Tue Jun 17 11:53:43 2014 : Debug: WARNING: No "known good" password was
> found in LDAP.  Are you sure that the user is configured correctly?

This is the relevant line.

FreeRADIUS is built around using LDAP as a database; you store the 
passwords there, and FreeRADIUS does the auth. Here, it can't find a 
password, so it can't auth.

Also aince you're doing peap, you also are probably doing mschap inside 
the tunnel, and there's no "mschap" module in your inner-tunnel any 
more. Suggest you revert to the default config and start by making small 
changes.

Finally, if your LDAP directory doesn't contain passwords and can only 
be used as an "oracle", then it can't be used for peap/mschap. See:

http://deployingradius.com/documents/protocols/oracles.html

...and

http://deployingradius.com/documents/protocols/compatibility.html