wekz <fbl.list@gmail.com> wrote:
The user is authorized and the password is got from the ldap (rlm_ldap: Adding userPassword as User-Password, value {sha}rur+4yJuecpmc8vxS/8wAyAMNHM= & op=21)
In 1.1.x, you have to configure the "ldap" module to know about the "{sha}" password header. See the "ldap" section of "modules".
And after matching the group Local in my users-file:
auth: type Local auth: user supplied User-Password does NOT match local User-Password auth: Failed to validate the user.
Unfortunately, this is one of the few cases where you probably have to set Auth-Type = PAP. Note that this is ONLY a 1.1.x limitation. The CVS head, and therefore 2.0 has that fixed. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog