21 Apr
2006
21 Apr
'06
12:35 p.m.
"Abey Thomas" <abeyth@gmail.com> wrote:
However in the same setup when I try to get the port authenticated for the WinXP client using EAP-MD5 it is being rejected
You've listed "ldap" before "eap" in the "authorize" section. Don't do that. The default config has them in the other order for a reason.
rlm_ldap: performing search in o=3Dexample, with filter (uid=3Dabey) rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory...
You don't store the clear-text password in LDAP, so it's impossible to do EAP-MD5. Store the clear-text password in LDAP, and list the modules in the order used by the default config file. Alan DeKok.