Sorry for the delay. I've updated the files, LDAP is working now, I'm sorry I didn't catch that part in the configuration, I feel slightly overwhelmed. Good news though, LDAP is working using "radtest -t pap" and without the "-t pap". I've gone ahead and tested via the Wireless controller now, and I am seeing.. (9) mschap: WARNING: No Cleartext-Password configured. Cannot create NT-Password (9) mschap: WARNING: No Cleartext-Password configured. Cannot create LM-Password and (9) mschap: ERROR: FAILED: No NT/LM-Password. Cannot perform authentication (9) mschap: ERROR: MS-CHAP2-Response is incorrect Now, I know there's a way to map attributes using the LDAP modules 'update' section, but I have no idea how this works and I also do not know what googles structure is. So if this is the route I have to take, I'll have to do a bit of research on that then. I feel like that's what the problem is here, but at the same time, Authentication via radtest was successful, so I am having doubts. I've attached a full log of me connecting via WIFI for convenience. On Fri, Mar 8, 2019 at 12:05 PM Alan DeKok <aland@deployingradius.com> wrote:
On Mar 8, 2019, at 12:01 PM, Nate . <nate2077developer@gmail.com> wrote:
Ok, duly noted. I've restored the defaults. Migrated settings for certificates, and the LDAP. Now my LDAP isn't working anymore. Where am I looking to edit first so that I can begin testing and not accidentally
jump
ahead of myself? I added the flat file user, as many recommend, that's working. "radtest flatuser testpass 127.0.0.1 0 testing123" When I run the test using my LDAP credentials I get "ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject"
See mods-available/ldap. It has documentation on how to fix this. Look for "Auth-Type".
You will also need to uncomment the "Auth-Type LDAP" block sites-enabled/default, in the "authenticate" section.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html