Hi,
I'm new to FreeRadius and trying to setup the server to authenticate using LDAP. I'm having some problem and hope to get some help from the list.
if your clients are doing EAP-TTLS/PAP then this will work - the PAP module can deal the requirements. if, as i suspect, you are using PEAP (PEAPv0/MSCHAPv2) then you cannot use {crypt} from the LDAP - you will either have to expose the passwords as cleartext in LDAP or use NT HASH instead (i'd personally go for the latter). what is your backend system - AD? as you might be going about it the wrong way...if its AD, then bind the FR server into your AD (following the plenty of examples eg www.deployingradius.com ) - and use ntlm_auth in the mschap module to do the authentication - you can still use LDAP for finding what group people belong to for eg VLAN override... alan