mschap and ldap issue
Hi everyone, I'm having issue with mschap auth with ldap background. My log says: No Cleartext-Password configured. Cannot create LM-Password. FAILED: No NT/LM-Password. Cannot perform authentication. I've found few questions like this on your mailing list but none of them helped. Can someone tell me what am I doing wrong? Thanks. Cheers, K
On Wed, 2018-10-03 at 10:51 +0200, Amstaff zg wrote:
I'm having issue with mschap auth with ldap background. My log says: No Cleartext-Password configured. Cannot create LM-Password. FAILED: No NT/LM-Password. Cannot perform authentication.
I've found few questions like this on your mailing list but none of them helped.
Can someone tell me what am I doing wrong?
http://wiki.freeradius.org/list-help We've got no idea what your LDAP server is (if it's Active Directory, this isn't going to work), what type of password you've put in to the LDAP directory, or what the debug output says. Which means we've got no idea on the answer, either... -- Matthew
HI Matthew, thanks for fast response. My ldap is openldap, passwords in are plain text in field userPassword. record in ldap is inetOrgPerson. Debug otput is attached. On Wed, Oct 3, 2018 at 11:08 AM Matthew Newton <mcn@freeradius.org> wrote:
On Wed, 2018-10-03 at 10:51 +0200, Amstaff zg wrote:
I'm having issue with mschap auth with ldap background. My log says: No Cleartext-Password configured. Cannot create LM-Password. FAILED: No NT/LM-Password. Cannot perform authentication.
I've found few questions like this on your mailing list but none of them helped.
Can someone tell me what am I doing wrong?
http://wiki.freeradius.org/list-help
We've got no idea what your LDAP server is (if it's Active Directory, this isn't going to work), what type of password you've put in to the LDAP directory, or what the debug output says.
Which means we've got no idea on the answer, either...
-- Matthew
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Oct 3, 2018, at 5:20 AM, Amstaff zg <amstaff.zg@gmail.com> wrote:
My ldap is openldap, passwords in are plain text in field userPassword. record in ldap is inetOrgPerson.
Debug otput is attached.
You didn't read the wiki page. Go back and read it: http://wiki.freeradius.org/list-help Sending the output of "radiusd -Xx" is not helpful. Attaching it as a separate, non-text file is not helpful. When you make it hard for us to help you, we're less likely to help you. And if you *read* the debug output, you will see that there are essentially no references to the "ldap" module. When we say "post the debug output", we also mean that *you* should read it. And think carefully about what it says. It's not that difficult. No references to "ldap" means that it's not using ldap. i.e. you didn't configure FreeRADIUS to query the LDAP server. Read sites-available/default, and look for "ldap". Alan DeKok.
participants (3)
-
Alan DeKok -
Amstaff zg -
Matthew Newton