<HTML>
<HEAD>
<TITLE>Re: 802.1x ->Radius ->Ldap</TITLE>
</HEAD>
<BODY>
<FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>So how do I get pap to do it?<BR>
<BR>
<BR>
<BR>
<BR>
On 6/18/10 12:50 PM, "Alan DeKok" <<a href="aland@deployingradius.com">aland@deployingradius.com</a>> wrote:<BR>
<BR>
</SPAN></FONT><BLOCKQUOTE><FONT FACE="Calibri, Verdana, Helvetica, Arial"><SPAN STYLE='font-size:11pt'>Kyle Plimack wrote:<BR>
> I added an entry to ldap.attrmap, “checkItem Cleartext-Password<BR>
> userPassword”<BR>
> The Password is not cleartext, but I read somewhere that radius is<BR>
> supposed to figure that out automatically from a header. This is what<BR>
> is returned:<BR>
><BR>
> rlm_ldap: userPassword -> Cleartext-Password ==<BR>
> "{SSHA}xQjX16XbCUSXpiR2y****************"<BR>
<BR>
It is impossible to do MS-CHAP with SSHA passwords.<BR>
<BR>
<a href="http://deployingradius.com/documents/protocols/compatibility.html">http://deployingradius.com/documents/protocols/compatibility.html</a><BR>
<BR>
Alan DeKok.<BR>
-<BR>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a> <BR>
<BR>
</SPAN></FONT></BLOCKQUOTE>
</BODY>
</HTML>