Hey gang,<br>
<br>
I'm still struggling getting freeradius and LDAP working to
authenticate my PPTP users. I'd really appreciate if one of the guru's
could have a look. <br>
<br>
I've wiped my old install and installed a fresh copy of freeradius and all the config files.<br>
<br>
Reading the list postings it's clearly best to make as few changes as
posible to the config files. So, the bit's I've changed in radiusd.conf
are as follows:<br>
<br>
modules {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ldap {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; server = &quot;<a href="http://ldap.mycompany.net">ldap.mycompany.net</a>&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; # identity = &quot;cn=admin,o=My Org,c=UA&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; # password = mypass<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
basedn = &quot;ou=people,dc=mycompany,dc=net&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
filter = &quot;(uid=%{Stripped-User-Name:-%{User-Name}})&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; password_attribute = userPassword<br>
<br>
I uncommented the ldap section under authenticate:<br>
<br>
authenticate&nbsp;&nbsp; {<br>
...<br>
Auth-Type LDAP {<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ldap<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }<br>
<br>
Then, I added my client in clients.conf.<br>
<br>
In users I added:<br>
<br>
DEFAULT Auth-Type := LDAP<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Fall-Through = 1<br>
<br>
Those are all the changes I've made to the default configurations.<br>
<br>
I'm now storing my password(s) in the ldap directory in plain text.
Using radtest from another machine on the network authenticates from
the LDAP server just fine. <br>
<br>
Authentication from my PPTP server always gives me the following:<br>
<br>
rad_recv: Access-Request packet from host x.x.x.x:32792, id=112, length=149<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Service-Type = Framed-User<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Framed-Protocol = PPP<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; User-Name = &quot;joey&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MS-CHAP-Challenge = 0x0a5f7e5035f0d2306105161cdf7060c4<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MS-CHAP2-Response =
0xb600a2aa1bab3836758fcf6e48643de987c900000000000000003e30dd6e4b9c0b1d9bebde2c68fbab2aa625a5246217a002<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Calling-Station-Id = &quot;<a href="http://165.236.229.162">165.236.229.162</a>&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NAS-Identifier = &quot;pptp&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; NAS-Port = 0<br>
rlm_ldap: - authenticate<br>
rlm_ldap: Attribute &quot;User-Password&quot; is required for authentication.<br>
Login incorrect: [joey/&lt;no User-Password attribute&gt;] (from client vpn-external port 0 cli <a href="http://165.236.229.162">165.236.229.162</a>)<br>
Sending Access-Reject of id 112 to x.x.x.x:32792<br>
<br>
<br>
What am I doing wrong? Thanks so much!<br>
<br>
<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --joey<br>
<br>
<br>
<br>