Is it not the FR send username & password to LDAP, then LDAP return success/fail back to FR ?
If I have misunderstanding on common sense, forgive me.


2014-02-26 17:41 GMT+08:00 <A.L.M.Buxey@lboro.ac.uk>:
Hi,

>    For security, the LDAP should not return attribute userPassword to
>    freeradius.

if the server doesnt get a password - if using LDAP as your source,
then how is it supposed to authenticate the user?

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html