9 Jul
2005
9 Jul
'05
1:11 a.m.
Gandalf the Gray <gtheg1@yahoo.com> wrote:
I would like to submit user and password to my LDAP server, and this one have to check the right relationship!
LDAP is a database, not an authentication server. FreeRADIUS is an authentication server.
Now: is it possible to tell MSCHAP to use LDAP or passwd file to authenticate the user? And, before this, is it possible to obtain the PW from the EAP challenge in order to submit it further?
No. It's impossible, and designed to be impossible. Make the LDAP server return a clear-text, or NT-Password to FreeRADIUS, and it will Just Work. Any other combination is impossible. Alan DeKok.