On Mon, Nov 26, 2012 at 12:13:06PM +0100, alexdhelmet@free.fr wrote:
Thanks, it's working now.
That's good.
I will try with PAP as soon as I have more time.
There's nothing to try - your debug log shows that PAP is already being called (it's in be default), so all you need to to is remove the auth-type := local from your config. It will work exactly as it does now. Setting Auth-Type like this has been deprecated for *years*, and is only likely to cause you problems some time in the future. There are very few situations where it should be set manually. Matthew
On Mon, Nov 26, 2012 at 08:17:21AM +0100, alexdhelmet@free.fr wrote:
Thanks for your answer. I've just re-read what you're doing - you're looking up the lowercase password in the users file instead of the username (e.g. you're ignoring the username), but then your password check is between User-Password and Cleartext-Password, as usual.
Try something like this in your sites-enabled/default, after preprocess:
update request { User-Password := "%{tolower:%{User-Password}}" }
But, at the moment, we must keep this Auth-Type, to be compatible wirth an old version of freeradius, we couldn't update at the moment. No, you still don't need it. The PAP module will do it for you - read the debug output.
Matthew
(waiting for 3.x so that Auth-Type := Local will actually break things at last).
On Wed, Nov 21, 2012 at 09:01:22AM +0100, alexdhelmet@free.fr wrote:
"00c51180d29c" Auth-Type := Local, Cleartext-Password := "00c51180d29c" Alcatel-Lucent-Auth-Group = 4 As the debug log says, Remove "Auth-Type := Local" from the above.
Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Architect (UNIX and Networks), Network Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>