<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;">please help.It confused me !<BR>I want to change authentication pap to chap. The users with clear passwords are in ldap server. but the is error with clear password in rlm-ldap<BR><BR>radiusd -x <BR>Starting - reading configuration files ...<BR>Using deprecated naslist file. Support for this will go away soon.<BR>Module: Loaded exec <BR>rlm_exec: Wait=yes but no output defined. Did you mean output=none?<BR>Module: Instantiated exec (exec) <BR>Module: Loaded expr <BR>Module: Instantiated expr (expr) <BR>Module: Loaded CHAP <BR>Module: Instantiated chap (chap) <BR>Module: Loaded MS-CHAP <BR>Module: Instantiated mschap (mschap) <BR>Module: Loaded LDAP <BR>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<BR>rlm_ldap: Creating new attribute ldap-Dial-Ldap-Group<BR>rlm_ldap: Registering ldap_groupcmp for ldap-Dial-Ldap-Group<BR>rlm_ldap: Registering ldap_xlat
with xlat_name ldap-Dial<BR>rlm_ldap: reading ldap<->radius mappings from file /etc/raddb/ldap.attrmap<BR>rlm_ldap: LDAP radiusCheckItem mapped to <SPAN class=yshortcuts id=lw_1266923562_0 style="CURSOR: pointer; BORDER-BOTTOM: rgb(0,102,204) 1px dashed"><SPAN class=yshortcuts id=lw_1266930171_0 style="BACKGROUND: none transparent scroll repeat 0% 0%; CURSOR: hand; BORDER-BOTTOM: #0066cc 1px dashed">RADIUS</SPAN></SPAN> $GENERIC$<BR>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<BR>rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<BR>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<BR>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<BR>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<BR>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<BR>rlm_ldap: LDAP userPassword mapped to RADIUS
User-Password<BR>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<BR>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<BR>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<BR>rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type<BR>rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol<BR>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<BR>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<BR>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route<BR>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<BR>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<BR>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<BR>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<BR>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<BR>rlm_ldap: LDAP radiusLoginService mapped to RADIUS
Login-Service<BR>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<BR>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<BR>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<BR>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network<BR>rlm_ldap: LDAP radiusClass mapped to RADIUS Class<BR>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<BR>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<BR>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action<BR>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<BR>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<BR>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<BR>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<BR>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<BR>rlm_ldap:
LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<BR>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<BR>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<BR>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message<BR>conns: 0x90f2d90<BR>Module: Instantiated ldap (ldap-Vpn) <BR>Module: Loaded always <BR>Module: Instantiated always (ok) <BR>Module: Loaded preprocess <BR>Module: Instantiated preprocess (preprocess) <BR>Module: Loaded detail <BR>Module: Instantiated detail (auth_log) <BR>Module: Loaded realm <BR>Module: Instantiated realm (suffix) <BR>Module: Loaded SQL Counter <BR>Module: Instantiated sqlcounter (monthly-Vpn) <BR>rlm_ldap: Registering ldap_groupcmp for Ldap-Group<BR>rlm_ldap: Creating new attribute ldap-Vpn-Ldap-Group<BR>rlm_ldap: Registering ldap_groupcmp for ldap-Vpn-Ldap-Group<BR>rlm_ldap: Registering ldap_xlat with xlat_name ldap-Vpn<BR>rlm_ldap: reading ldap<->radius
mappings from file /etc/raddb/ldap.attrmap<BR>rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$<BR>rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type<BR>rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use<BR>rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id<BR>rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id<BR>rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password<BR>rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password<BR>rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password<BR>rlm_ldap: LDAP sambaAcctFlags mapped to RADIUS SMB-Account-CTRL-TEXT<BR>rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration<BR>rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address<BR>rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type<BR>rlm_ldap: LDAP radiusFramedProtocol mapped to
RADIUS Framed-Protocol<BR>rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address<BR>rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask<BR>rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route<BR>rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing<BR>rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id<BR>rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU<BR>rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression<BR>rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host<BR>rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service<BR>rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port<BR>rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number<BR>rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id<BR>rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network<BR>rlm_ldap: LDAP radiusClass mapped to
RADIUS Class<BR>rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout<BR>rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout<BR>rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action<BR>rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service<BR>rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node<BR>rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group<BR>rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link<BR>rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network<BR>rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone<BR>rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit<BR>rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port<BR>rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message<BR>conns: 0x90fa4c8<BR>Module: Instantiated ldap (ldap-Vpn)
<BR>Module: Instantiated sqlcounter (monthly-Vpn) <BR>Module: Loaded files <BR>Module: Instantiated files (files) <BR>Module: Loaded Acct-Unique-Session-Id <BR>Module: Instantiated acct_unique (acct_unique) <BR>Module: Instantiated detail (detail) <BR>Module: Loaded SQL <BR>rlm_sql (sql-Vpn): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked<BR>rlm_sql (sql-Vpn): Attempting to connect to radius@localhost:/vpnradius<BR>rlm_sql (sql-Vpn): starting 0<BR>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #0<BR>rlm_sql_mysql: Starting connect to MySQL server for #0<BR>rlm_sql (sql-Vpn): Connected new DB handle, #0<BR>rlm_sql (sql-Vpn): starting 1<BR>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #1<BR>rlm_sql_mysql: Starting connect to MySQL server for #1<BR>rlm_sql (sql-Vpn): Connected new DB handle, #1<BR>rlm_sql (sql-Vpn): starting 2<BR>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #2<BR>rlm_sql_mysql: Starting connect to
MySQL server for #2<BR>rlm_sql (sql-Vpn): Connected new DB handle, #2<BR>rlm_sql (sql-Vpn): starting 3<BR>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #3<BR>rlm_sql_mysql: Starting connect to MySQL server for #3<BR>rlm_sql (sql-Vpn): Connected new DB handle, #3<BR>rlm_sql (sql-Vpn): starting 4<BR>rlm_sql (sql-Vpn): Attempting to connect rlm_sql_mysql #4<BR>rlm_sql_mysql: Starting connect to MySQL server for #4<BR>rlm_sql (sql-Vpn): Connected new DB handle, #4<BR>Module: Instantiated sql (sql-Vpn) <BR>Module: Instantiated detail (reply_log) <BR>Initializing the thread pool...<BR>Listening on authentication *:1812<BR>Listening on accounting *:1813<BR>Ready to process requests.<BR><BR><BR><BR>rad_recv: Access-Request packet from host 10.10.10.2:1866, id=78, length=246<BR> Acct-Session-Id = "120"<BR> NAS-IP-Address =
10.10.10.2<BR> Service-Type = Framed-User<BR> Framed-Protocol = PPP<BR> NAS-Port = 128<BR> MS-RAS-Vendor = 311<BR> MS-RAS-Version = "MSRASV5.20"<BR> NAS-Port-Type = Virtual<BR> Tunnel-Type:0 = PPTP<BR> Tunnel-Medium-Type:0 = IP<BR> Calling-Station-Id = "10.10.10.24"<BR> Tunnel-Client-Endpoint:0 = "10.10.10.24"<BR> Microsoft-Attr-35 = 0x4d5352415356352e3130<BR> Microsoft-Attr-34 =
0x4d535241532d302d4955542d3834433132343936333646<BR> User-Name = "test"<BR> CHAP-Challenge = 0x45c8e77e0465ea843dc5b419ccb3ca01<BR> CHAP-Password = 0x008a7f35b2a09df3aa79b659a9909ca15f<BR> Message-Authenticator = 0x540b9a3a9a929db1621fd2cb4fa1b2cc<BR> rlm_chap: Setting 'Auth-Type := CHAP'<BR>rlm_ldap: - authorize<BR>rlm_ldap: performing user authorization for test<BR>rlm_ldap: ldap_get_conn: Checking Id: 0<BR>rlm_ldap: ldap_get_conn: Got Id: 0<BR>rlm_ldap: (re)connect to 10.10.10.27:389, authentication 0<BR>rlm_ldap: bind as / to 10.10.10.27:389<BR>rlm_ldap: waiting for bind result ...<BR>rlm_ldap: Bind was successful<BR>rlm_ldap: checking if remote access for test is allowed by vpnAccess<BR>rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21<BR>rlm_ldap:
extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 0<BR>rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11<BR>rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval := 300<BR>rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21<BR>rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 1080000<BR>rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11<BR>rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval := 300<BR>rlm_ldap: looking for check items in directory...<BR>rlm_ldap: looking for reply items in directory...<BR>rlm_ldap: Adding radiusSessionTimeout as Session-Timeout, value 10 & op=11<BR>rlm_ldap: user test authorized to use remote access<BR>rlm_ldap: ldap_release_conn: Release Id: 0<BR> rlm_chap: login attempt by "test" with
CHAP password<BR> rlm_chap: Could not find clear text password for user test<BR>Login incorrect (rlm_chap: Clear text password not available): [test] (from client vpntist port 128 cli 10.10.10.24)<BR><BR><BR><BR>I saw the problem in faq but I didn't find what is my mistake. The config is:<BR>in users :<BR><BR> DEFAULT Client-IP-Address == 10.10.10.2 , Auth-Type := Vpn, Autz-Type := Vpn, Post-Auth-Type := Vpn, Session-type := Vpn<BR><BR>in radius.conf:<BR>ldap ldap-Vpn{<BR> ....<BR> password_attribute = userPassword<BR> password_header = "{clear}"<BR> <BR>
}<BR>authorize {<BR>chap<BR>Autz-Type Vpn{<BR> ldap-Vpn<BR> chap<BR> }<BR>}<BR><BR>authenticate {<BR>Auth-Type CHAP {<BR> chap<BR> }<BR> Auth-Type Vpn{<BR> chap<BR> <BR> }<BR><BR>}<BR><BR>....<BR>what is my mistake? should I do any other config or change ?<BR>please any idea?<BR></td></tr></table><br>