On Tue, 6 Jun 2006, Rainer Brinkmann wrote:
Hello, despite the FAQ- Entry "How do I make CHAP work with LDAP?":
can anybody tell us if its basically possible to run a chap-Auth against an LDAP? I know, that a specific LDAP-Service must be able to retrieve a user-Pwd and often it cant, cause of the storage of the pwd as "one-directioned (hashed)". So, only a "simple bind" is ok. But if LDAP can run a chap-based password-check by retrieving a password: is the LDAP-Protocol (v3) basically capable of doing this?
If clear text passwords are available and can be retrieved by the ldap store then yes. Otherwise no. The ldap protocol has nothing to do with all this. Its only a matter of password availability.
Hamburg/Germany, Rainer Brinkmann - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Kostas Kalevras Network Operations Center kkalev@noc.ntua.gr National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf