1 Sep
2005
1 Sep
'05
5:06 p.m.
Vilius =?utf-8?b?xaB1bXNrYXM=?= <vilius@lnk.lt> wrote:
But Radius can't autenticate to LDAP as there is no User-Password attribute in the packet. (rlm_ldap: Attribute "User-Password" is required for authentication).
Use LDAP as a database, not as an authentication server. See many, many, posts on this topic to this list.
Is there a way to do this authentification and NOT turning MS-CHAP protocol in VPN box? Are there some kind of preauth hooks in Radius?
Have FreeRADIUS get the password from LDAP, and let FreeRADIUS do the authentication. Alan DeKok.