10 Jun
2015
10 Jun
'15
2:34 p.m.
On Wednesday, 10 June 2015, Alan DeKok <aland@deployingradius.com> wrote:
Honestly, the best approach is to use OpenDirectory as an LDAP server. Ignore the OpenDirectory API. Just let FreeRADIUS grab the password from LDAP, and then use that to authenticate.
I'm pretty sure that Open Directory only stores password hashes, so the plaintext won't be available over LDAP... Perhaps EAP/PAP is the only option? Alan
-- -- Alan