<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">Hi<br>I want to change authentication pap to chap. The users with clear passwords are in ldap server. but the is error with clear password in rlm-ldap<br><br>radiusd -x <br>Starting - reading configuration files ...<br>Using deprecated naslist file. Support for this will go away soon.<br>Module: Loaded exec <br>rlm_exec: Wait=yes but no output defined. Did you mean output=none?<br>Module: Instantiated exec (exec) <br>Module: Loaded expr <br>Module: Instantiated expr (expr) <br>Module: Loaded CHAP <br>Module: Instantiated chap (chap) <br>Module: Loaded MS-CHAP <br>Module: Instantiated mschap (mschap) <br>Module: Loaded LDAP <br>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<br>rlm_ldap: Creating new attribute ldap-Dial-Ldap-Group<br>rlm_ldap: Registering ldap_groupcmp for ldap-Dial-Ldap-Group<br>rlm_ldap: Registering ldap_xlat with xlat_name
ldap-Dial<br>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<br>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<br>rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<br>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<br>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<br>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<br>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<br>rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password<br>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<br>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<br>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<br>rlm_ldap: LDAP radiusServiceType mapped to RADIUS
Service-Type<br>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<br>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<br>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<br>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route<br>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<br>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<br>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<br>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<br>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<br>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<br>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<br>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<br>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<br>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to
RADIUS Framed-IPX-Network<br>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<br>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<br>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<br>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action<br>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<br>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<br>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<br>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<br>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<br>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<br>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<br>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<br>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS
Reply-Message<br>conns: 0x90f2d90<br>Module: Instantiated ldap (ldap-Vpn) <br>Module: Loaded always <br>Module: Instantiated always (ok) <br>Module: Loaded preprocess <br>Module: Instantiated preprocess (preprocess) <br>Module: Loaded detail <br>Module: Instantiated detail (auth_log) <br>Module: Loaded realm <br>Module: Instantiated realm (suffix) <br>Module: Loaded SQL Counter <br>Module: Instantiated sqlcounter (monthly-Vpn) <br>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<br>rlm_ldap: Creating new attribute ldap-Vpn-Ldap-Group<br>rlm_ldap: Registering ldap_groupcmp for ldap-Vpn-Ldap-Group<br>rlm_ldap: Registering ldap_xlat with xlat_name ldap-Vpn<br>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<br>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<br>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<br>rlm_ldap: LDAP
radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<br>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<br>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<br>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<br>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<br>rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password<br>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<br>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<br>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<br>rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type<br>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<br>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<br>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<br>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS
Framed-Route<br>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<br>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<br>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<br>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<br>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<br>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<br>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<br>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<br>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<br>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network<br>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<br>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<br>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<br>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS
Termination-Action<br>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<br>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<br>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<br>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<br>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<br>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<br>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<br>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<br>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message<br>conns: 0x90fa4c8<br>Module: Instantiated ldap (ldap-Vpn) <br>Module: Instantiated sqlcounter (monthly-Vpn) <br>Module: Loaded files <br>Module: Instantiated files (files) <br>Module: Loaded Acct-Unique-Session-Id <br>Module: Instantiated acct_unique (acct_unique) <br>Module:
Instantiated detail (detail) <br>Module: Loaded SQL <br>rlm_sql (sql-Vpn): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked<br>rlm_sql (sql-Vpn): Attempting to connect to radius@localhost:/vpnradius<br>rlm_sql (sql-Vpn): starting 0<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #0<br>rlm_sql_mysql: Starting connect to MySQL server for #0<br>rlm_sql (sql-Vpn): Connected new DB handle, #0<br>rlm_sql (sql-Vpn): starting 1<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #1<br>rlm_sql_mysql: Starting connect to MySQL server for #1<br>rlm_sql (sql-Vpn): Connected new DB handle, #1<br>rlm_sql (sql-Vpn): starting 2<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #2<br>rlm_sql_mysql: Starting connect to MySQL server for #2<br>rlm_sql (sql-Vpn): Connected new DB handle, #2<br>rlm_sql (sql-Vpn): starting 3<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #3<br>rlm_sql_mysql: Starting connect to MySQL server for
#3<br>rlm_sql (sql-Vpn): Connected new DB handle, #3<br>rlm_sql (sql-Vpn): starting 4<br>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #4<br>rlm_sql_mysql: Starting connect to MySQL server for #4<br>rlm_sql (sql-Vpn): Connected new DB handle, #4<br>Module: Instantiated sql (sql-Vpn) <br>Module: Instantiated detail (reply_log) <br>Initializing the thread pool...<br>Listening on authentication *:1812<br>Listening on accounting *:1813<br>Ready to process requests.<br><br><br><br>rad_recv: Access-Request packet from host 10.10.10.2:1866, id=78, length=246<br> Acct-Session-Id = "120"<br> NAS-IP-Address = 10.10.10.2<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> NAS-Port = 128<br>
MS-RAS-Vendor = 311<br> MS-RAS-Version = "MSRASV5.20"<br> NAS-Port-Type = Virtual<br> Tunnel-Type:0 = PPTP<br> Tunnel-Medium-Type:0 = IP<br> Calling-Station-Id = "10.10.10.24"<br> Tunnel-Client-Endpoint:0 = "10.10.10.24"<br> Microsoft-Attr-35 = 0x4d5352415356352e3130<br> Microsoft-Attr-34 = 0x4d535241532d302d4955542d3834433132343936333646<br> User-Name = "test"<br> CHAP-Challenge = 0x45c8e77e0465ea843dc5b419ccb3ca01<br> CHAP-Password =
0x008a7f35b2a09df3aa79b659a9909ca15f<br> Message-Authenticator = 0x540b9a3a9a929db1621fd2cb4fa1b2cc<br> rlm_chap: Setting 'Auth-Type := CHAP'<br>rlm_ldap: - authorize<br>rlm_ldap: performing user authorization for test<br>rlm_ldap: ldap_get_conn: Checking Id: 0<br>rlm_ldap: ldap_get_conn: Got Id: 0<br>rlm_ldap: (re)connect to 10.10.10.27:389, authentication 0<br>rlm_ldap: bind as / to 10.10.10.27:389<br>rlm_ldap: waiting for bind result ...<br>rlm_ldap: Bind was successful<br>rlm_ldap: checking if remote access for test is allowed by vpnAccess<br>rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21<br>rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 0<br>rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11<br>rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval :=
300<br>rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21<br>rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 1080000<br>rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11<br>rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval := 300<br>rlm_ldap: looking for check items in directory...<br>rlm_ldap: looking for reply items in directory...<br>rlm_ldap: Adding radiusSessionTimeout as Session-Timeout, value 10 & op=11<br>rlm_ldap: user test authorized to use remote access<br>rlm_ldap: ldap_release_conn: Release Id: 0<br> rlm_chap: login attempt by "test" with CHAP password<br> rlm_chap: Could not find clear text password for user test<br>Login incorrect (rlm_chap: Clear text password not available): [test] (from client vpntist port 128 cli 10.10.10.24)<br><br><br><br>I saw the problem in faq but I didn't find
what is my mistake. The config is:<br>in users :<br><br> DEFAULT Client-IP-Address == 10.10.10.2 , Auth-Type := Vpn, Autz-Type := Vpn, Post-Auth-Type := Vpn, Session-type := Vpn<br><br>in radius.conf:<br>ldap ldap-Vpn{<br> ....<br> password_attribute =
userPassword<br> password_header = "{clear}"<br> <br> }<br>authorize {<br>chap<br>Autz-Type Vpn{<br> ldap-Vpn<br> chap<br> }<br>}<br><br>authenticate {<br>Auth-Type CHAP {<br> chap<br> }<br> Auth-Type Vpn{<br>
chap<br> <br> }<br><br>}<br><br>....<br>what is my mistake? should I do any other config or change ?</td></tr></table><br>