<div dir="ltr"><div>i put on LDAP (/module)<br></div><div>password_attribute = userPassword</div><div><br></div><div>and now works fine... almost :S</div><div>he only works with plaintext password, how i change that to use MD5 passwords?</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/3/14 <span dir="ltr"><<a href="mailto:fernando.sg1@gmail.com" target="_blank">fernando.sg1@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">im using openLDAP on ubunto 12.04 LTS<div>i'll look the PDF, but if you can help in my last e-mail.</div><div>thanks ;)</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">
2013/3/14 Danny Kurniawan <span dir="ltr"><<a href="mailto:danny.kurniawan@fairchildsemi.com" target="_blank">danny.kurniawan@fairchildsemi.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><font face="tahoma,sans-serif">I'm not sure if you are using Novell product or open ldap, but you can see the basic information on how to integrate with LDAP here<br>
<br><a href="https://www.netiq.com/documentation/edir_radius/pdfdoc/radiusadmin/radiusadmin.pdf" target="_blank">https://www.netiq.com/documentation/edir_radius/pdfdoc/radiusadmin/radiusadmin.pdf</a><br>
<br>-Danny<br></font><div><div><br><div class="gmail_quote">On Thu, Mar 14, 2013 at 11:41 AM, Arran Cudbard-Bell <span dir="ltr"><<a href="mailto:a.cudbardb@freeradius.org" target="_blank">a.cudbardb@freeradius.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
On 13 Mar 2013, at 22:03, <a href="mailto:fernando.sg1@gmail.com" target="_blank">fernando.sg1@gmail.com</a> wrote:<br>
<br>
> now at the PC, i can write better:<br>
><br>
> 1st: shout i uncoment this 2 lines on /modules/ldap<br>
> # identity = "cn=admin,dc=xxxxx,dc=edu,dc=br"<br>
> # password = "123abc"<br>
> ?<br>
<br>
Um yes if you need to do an authenticated bind to search in the directory.<br>
<br>
><br>
> i tryed both configs with ou=People or without and dont work.<br>
><br>
><br>
> uncomenting the 2 lines i get this on freeradius -X:<br>
><br>
> [ldap] performing user authorization for user1<br>
> [ldap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details<br>
> [ldap] ... expanding second conditional<br>
> [ldap] expand: %{User-Name} -> user1<br>
> [ldap] expand: (uid=%{Stripped-User-Name:-%{User-Name}}) -> (uid=user1)<br>
> [ldap] expand: ou=People,dc=xxxx,dc=edu,dc=br -> ou=People,dc=xxxxxx,dc=edu,dc=br<br>
> [ldap] ldap_get_conn: Checking Id: 0<br>
> [ldap] ldap_get_conn: Got Id: 0<br>
> [ldap] attempting LDAP reconnection<br>
> [ldap] (re)connect to <a href="http://200.131.96.47:389" target="_blank">200.131.96.47:389</a>, authentication 0<br>
> [ldap] bind as cn=admin,dc=xxxxxx,dc=edu,dc=br/123abc to <a href="http://200.131.96.47:389" target="_blank">200.131.96.47:389</a><br>
> [ldap] waiting for bind result ...<br>
> [ldap] Bind was successful<br>
> [ldap] performing search in ou=People,dc=xxxxx,dc=edu,dc=br, with filter (uid=user1)<br>
> [ldap] checking if remote access for user1 is allowed by uid<br>
> [ldap] No default NMAS login sequence<br>
> [ldap] looking for check items in directory...<br>
> [ldap] userPassword -> Password-With-Header == "{MD5}ICy5YqxZB1uWSwcVLSNLcA=="<br>
> [ldap] looking for reply items in directory...<br>
> [ldap] Setting Auth-Type = LDAP<br>
> [ldap] user user1 authorized to use remote access<br>
><br>
<br>
Which seems to be correct?<br>
<br>
-Arran<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</blockquote></div><br><br clear="all"><br></div></div><span><font color="#888888">-- <br><div><font face="tahoma, sans-serif">Best Regards,</font></div>
<div><font face="tahoma, sans-serif">Danny</font></div>
</font></span><br>-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>