Hi. Fajar. Thanks so much for your help. You helped me to find the problem. In ldap.attrmap I changed this line: checkitem Password-With-Header userPassword to this line: checkitem Cleartext-Password userPassword And now I can not see any error in the debug output. So I have to say my problem are solved. But I do wonder if this is something I should be able to find in the documentation and if so do you have any pointers to where? ( I have read everything I thought. But obviously not) :-) /Sonny 15 aug 2012 kl. 17:13 skrev "Fajar A. Nugraha" <list@fajar.net>:
On Wed, Aug 15, 2012 at 9:54 PM, Sonny Taberman <sonny.taberman@lan-master.eu> wrote:
I have to correct my self. The third column is the LDAP-name so that can't be it. I mean that is the container where the password is saved. Or am I missing something here?
Something is setting User-Password check item. If you store the cleartext password as userPassword ldap attribute, then you might have something like this on your ldap.attrmap
checkitem User-Password userPassword
... in which case you need to change the second column to Password-With-Header (or probably Cleartext-Password). But since you say the attrmap is identical (are you REALLY sure?), I don't know where else to look. Do you have User-Password somewhere on your attrmap, perhaps? Or users file? Or db?
-- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html