<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; "><DIV>Thanks, i removed the password_attribute and it worked.</DIV><DIV>Anyway i did it because my LDAP directory do not have a password attribute for computer entries, so i wanted to check the mac-address for both user-name and password. Than i didn't go on with this for various reasons (i should have rewritten User-Password too, but this could interfere if a user try to authenticate with a password that casually match the regexp for a mac-address...), and i resorted to authenticate with always_ok if the auth_type is macbypass (i do not expect to have crafted requests in my network anyway...), but that remained in the config file since it never gave problems before 1.1.7</DIV><DIV><BR class="khtml-block-placeholder"></DIV><DIV>Anyway if you have a better suggestion i am always ready to learn</DIV><BR><DIV><DIV>On Aug 27, 2007, at 3:28 PM, Phil Mayers wrote:</DIV><BR class="Apple-interchange-newline"><BLOCKQUOTE type="cite"><P style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><BR></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica"><SPAN class="Apple-converted-space"> </SPAN>2. Since it's wrong anyway (00:11:22:33:44:55 != 001122334455), either</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica">remove the plaintext password from the LDAP directory or remove the</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica">"password_attribute" config item from the module instance.</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px; font: 12.0px Helvetica; min-height: 14.0px"><BR></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica">Why *are* you copying a "wrong" password from LDAP to the config items?</FONT></P> <P style="margin: 0.0px 0.0px 0.0px 0.0px"><FONT face="Helvetica" size="3" style="font: 12.0px Helvetica">How is the LDAP server authenticating them?</FONT></P> </BLOCKQUOTE></DIV><BR></BODY></HTML>