<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Ok, I will work with what you provided - thank you.<br>
<br>
Could you please let me know why the following conflicting message
shows up after the No "known good" message?<br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;
font-size: 13px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height: normal;
orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); display: inline !important;
float: none;">Tue Jun 17 11:53:43 2014 : Info: [ldap] user
jjenkins authorized to use remote access</span><br style="color:
rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px;
font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: normal; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255);">
<span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;
font-size: 13px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height: normal;
orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); display: inline !important;
float: none;">Tue Jun 17 11:53:43 2014 : Debug: [ldap]
ldap_release_conn: Release Id: 0</span><br style="color: rgb(34,
34, 34); font-family: arial, sans-serif; font-size: 13px;
font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: normal; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255);">
<span style="color: rgb(34, 34, 34); font-family: arial, sans-serif;
font-size: 13px; font-style: normal; font-variant: normal;
font-weight: normal; letter-spacing: normal; line-height: normal;
orphans: auto; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: auto;
word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255); display: inline !important;
float: none;">Tue Jun 17 11:53:43 2014 : Info: ++[ldap] returns ok<br>
<br>
<br>
</span>
<div class="moz-cite-prefix">On 06/17/2014 01:41 PM, Phil Mayers
wrote:<br>
</div>
<blockquote cite="mid:53A08BD7.8020402@imperial.ac.uk" type="cite">On
17/06/2014 18:01, Jon Jenkins wrote:
<br>
<br>
<blockquote type="cite">Tue Jun 17 11:53:43 2014 : Debug: WARNING:
No "known good" password was
<br>
found in LDAP. Are you sure that the user is configured
correctly?
<br>
</blockquote>
<br>
This is the relevant line.
<br>
<br>
FreeRADIUS is built around using LDAP as a database; you store the
passwords there, and FreeRADIUS does the auth. Here, it can't find
a password, so it can't auth.
<br>
<br>
Also aince you're doing peap, you also are probably doing mschap
inside the tunnel, and there's no "mschap" module in your
inner-tunnel any more. Suggest you revert to the default config
and start by making small changes.
<br>
<br>
Finally, if your LDAP directory doesn't contain passwords and can
only be used as an "oracle", then it can't be used for
peap/mschap. See:
<br>
<br>
<a class="moz-txt-link-freetext" href="http://deployingradius.com/documents/protocols/oracles.html">http://deployingradius.com/documents/protocols/oracles.html</a>
<br>
<br>
...and
<br>
<br>
<a class="moz-txt-link-freetext" href="http://deployingradius.com/documents/protocols/compatibility.html">http://deployingradius.com/documents/protocols/compatibility.html</a>
<br>
-
<br>
List info/subscribe/unsubscribe? See
<a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
<br>
</blockquote>
<br>
</body>
</html>