<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:΢ÈíÑźÚ
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi, Thanks for your help. After apply the configuration you recommend to the inner-tunnel file, the debug information no process for searching ldap server, and user from ldap database still can not be authenticated.<br>There are also infomation about<br><br>/***********************************************************************/<br>[eap] Request found, released from the list<br>[eap] EAP/mschapv2<br>[eap] processing type mschapv2<br>[mschapv2] # Executing group from file /usr/local/etc/raddb/sites-enabled/inner-tunnel<br>[mschapv2] +group MS-CHAP {<br>[mschap] No Cleartext-Password configured. Cannot create LM-Password.<br>[mschap] No Cleartext-Password configured. Cannot create NT-Password.<br>[mschap] Creating challenge hash with username: liy1<br>[mschap] Client is using MS-CHAPv2 for liy1, we need NT-Password<br>[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.<br>[mschap] FAILED: MS-CHAP2-Response is incorrect<br>++[mschap] = reject<br>+} # group MS-CHAP = reject<br>[eap] Freeing handler<br>++[eap] = reject<br>+} # group authenticate = reject<br>Failed to authenticate the user.<br>/***********************************************************************/<br><br>I have changed the ldap.attrmap to: <br>checkitem Cleartext-Password userpassword<br><br>Thanks, waiting for your reply.<br><br><br><div>Subject: Re: Radius Server and Ldap Server<br>From: a.cudbardb@freeradius.org<br>Date: Mon, 13 Jan 2014 09:50:39 +0000<br>To: freeradius-users@lists.freeradius.org<br><br><pre> <br>On 13 Jan 2014, at 09:15, ÀîÑÇÀ¤ <liyakun127@hotmail.com> wrote:<br> <br>> Hello all,<br>> <br>> I am trying to set up a radius server to perform authentication for wifi<br>> login against the user with password database in LDAP.<br>> <br>> I have no right to get the password back from LDAP, and the only reply<br>> information from LDAP server is the I login in success.<br>> <br>> However, I need to login wifi by a user name and password stored in LDAP<br>> server, without the reply password from LDAP, how can the radius server<br>> check whether the password I have provided is correct.<br> <br>By attempting to bind as the user.<br> <br>authorize {<br> if (User-Password) {<br> update control {<br> Auth-Type := LDAP<br> }<br> }<br>}<br> <br>authenticate {<br> Auth-Type LDAP {<br> ldap<br> }<br>}<br> <br>-Arran<br> <br>Arran Cudbard-Bell <a.cudbardb@freeradius.org><br>FreeRADIUS Development Team<br> <br>FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2<br> <br></pre><br>-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html</div> </div></body>
</html>