<div><span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 16px; "><span class="hps" title="Clique para mostrar traduções alternativas">Hello</span><span title="Clique para mostrar traduções alternativas">,</span> <span class="hps" title="Clique para mostrar traduções alternativas">I</span><span title="Clique para mostrar traduções alternativas" class="">'m trying</span> <span class="hps" title="Clique para mostrar traduções alternativas">to do</span> <span class="hps" title="Clique para mostrar traduções alternativas">the same</span> <span class="hps" title="Clique para mostrar traduções alternativas">thing</span><span title="Clique para mostrar traduções alternativas">, I</span> <span class="hps" title="Clique para mostrar traduções alternativas">know I</span> <span class="hps" title="Clique para mostrar traduções alternativas">have to</span> <span class="hps" title="Clique para mostrar traduções alternativas">use</span> <span class="hps" title="Clique para mostrar traduções alternativas">winbind</span> <span class="hps" title="Clique para mostrar traduções alternativas">and</span> <span class="hps" title="Clique para mostrar traduções alternativas">samba</span> <span class="hps" title="Clique para mostrar traduções alternativas">to get</span> <span class="hps" title="Clique para mostrar traduções alternativas">it,</span> <span class="hps" title="Clique para mostrar traduções alternativas">but</span> <span class="hps" title="Clique para mostrar traduções alternativas">in</span> <span class="hps" title="Clique para mostrar traduções alternativas">reading</span> <span class="hps" title="Clique para mostrar traduções alternativas">the</span> <span class="hps" title="Clique para mostrar traduções alternativas">news</span> <span class="hps" title="Clique para mostrar traduções alternativas">I found this</span> <span class="hps" title="Clique para mostrar traduções alternativas">freeradius</span> <span class="hps" title="Clique para mostrar traduções alternativas">2.1</span> <span class="hps" title="Clique para mostrar traduções alternativas">Added</span> <span class="hps atn" title="Clique para mostrar traduções alternativas">"</span><span title="Clique para mostrar traduções alternativas">Password</span><span title="Clique para mostrar traduções alternativas">-With</span><span class="atn" title="Clique para mostrar traduções alternativas">-</span><span title="Clique para mostrar traduções alternativas" class="">Header</span> <span class="hps" title="Clique para mostrar traduções alternativas">==</span> <span class="hps" title="Clique para mostrar traduções alternativas">userPassword</span><span title="Clique para mostrar traduções alternativas">"</span> <span class="hps" title="Clique para mostrar traduções alternativas">to</span> <span class="hps" title="Clique para mostrar traduções alternativas">raddb</span> <span class="hps" title="Clique para mostrar traduções alternativas">/</span> <span class="hps" title="Clique para mostrar traduções alternativas">ldap.attrmap</span> <span class="hps" title="Clique para mostrar traduções alternativas">This</span> <span class="hps" title="Clique para mostrar traduções alternativas">Will</span> <span class="hps" title="Clique para mostrar traduções alternativas">automatically</span><span class="hps" title="Clique para mostrar traduções alternativas">convert</span> <span class="hps" title="Clique para mostrar traduções alternativas">more</span> <span class="hps" title="Clique para mostrar traduções alternativas">passwords</span></span></div>
<div><font class="Apple-style-span" face="arial, sans-serif" size="4"><span class="Apple-style-span" style="font-size: 16px;"><br></span></font></div><div><span class="hps" title="Clique para mostrar traduções alternativas"></span><font class="Apple-style-span" face="arial, sans-serif" size="4"><span class="Apple-style-span" style="font-size: 16px;">[]'s<br clear="all">
</span></font>--<br>Vinicius Teixeira Coelho<br><br>Registered Linux User #469313<br>The Ubuntu Counter Project - user number # 21463<br>
<br><br><div class="gmail_quote">On Fri, Feb 11, 2011 at 3:37 PM, Gary Gatten <span dir="ltr"><<a href="mailto:Ggatten@waddell.com">Ggatten@waddell.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
I'm barely a novice with FR, so take this with a grain of salt:<br>
<br>
You forced ALL Authentication requests to use LDAP. EAP / LDAP don't play well together. Remove the "Auth Type LDAP" - for now.<br>
<br>
You almost "never" want to set the Auth-Type directly, FR figures it out from the request. For testing and troubleshooting it's OK, and if you really know what the consequences are its OK, but generally speaking don't set the auth type.<br>
<br>
As for accomplishing your goal, unfortunately others will have to help you with that - I don't know FR/LDAP/EAP well enough. But, I don't THINK you can authenticate EAP requests against LDAP directly because of the "no clear text password" issue.<br>
<br>
Gary<br>
<div><div></div><div class="h5"><br>
<br>
-----Original Message-----<br>
From: freeradius-users-bounces+ggatten=<a href="http://waddell.com" target="_blank">waddell.com</a>@<a href="http://lists.freeradius.org" target="_blank">lists.freeradius.org</a> [mailto:<a href="mailto:freeradius-users-bounces%2Bggatten">freeradius-users-bounces+ggatten</a>=<a href="http://waddell.com" target="_blank">waddell.com</a>@<a href="http://lists.freeradius.org" target="_blank">lists.freeradius.org</a>] On Behalf Of Max Schröder<br>
Sent: Friday, February 11, 2011 11:06 AM<br>
To: <a href="mailto:freeradius-users@lists.freeradius.org">freeradius-users@lists.freeradius.org</a><br>
Subject: Freeradius + LDAP for WPA-Enterprise<br>
<br>
Hello to all,<br>
<br>
I would like to use Freeradius to authenticate my wireless network using<br>
OpenWRT and Freeradius + LDAP. What I've done:<br>
<br>
First Authenticated Users in WLan using EAP-TTLS and files in<br>
Freeradius. WORKED! Then I've configured ldap-Modul + added "ldap" in<br>
the authorize- and "Auth-Type LDAP { ldap }" in the<br>
authenticate-section. The test via radtest succeeded.<br>
<br>
But now the authentication using OpenWRT (EAP-TTLS) like the first try<br>
with files - now with ldap did not work. I do noticed the following comment<br>
<br>
# Note that this means "check plain-text password against<br>
# the ldap database", which means that EAP won't work,<br>
# as it does not supply a plain-text password.<br>
Auth-Type LDAP { ldap }<br>
<br>
but I don't know what to change that it worked like my first try with<br>
the difference the users are in LDAP instead of a file.<br>
<br>
Hope to get any hints<br>
<br>
Best regards.<br>
MS<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
<br>
<br>
<br>
<br>
<br>
</div></div><font size="1"><br>
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'><br>
</div><br>
"This email is intended to be reviewed by only the intended recipient<br>
and may contain information that is privileged and/or confidential.<br>
If you are not the intended recipient, you are hereby notified that<br>
any review, use, dissemination, disclosure or copying of this email<br>
and its attachments, if any, is strictly prohibited. If you have<br>
received this email in error, please immediately notify the sender by<br>
return email and delete this email from your system."<br>
</font><br>
<div><div></div><div class="h5"><br>
<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br></div>