Hello everyone, I'm dificult with freeradius and LDAP. the user autheticate only it's work when I put in the user file User-Password clear text as follow. "maicon.pereira" Cleartext-Password := "meleca" Reply-Message = "Hello, %{User-Name}" however, my integration between Freeradius and Ldap it isn't working. My question is: there is possible to make the intragation?? because I've read that freeradius needs supply to ldap User-Password clear text. it's true ?? I wish to use the ldap as database authetication. thank!
Maicon, como vi o Pereira no seu nome, deduzo que você seja do Brasil, portanto irei responder sua pergunta em português. 1º Sim o freeradius se integra perfeitamente com o LDAP> 2º Que base LDAP vc esta utilizando? OpenLDAP, Active Directory??? 3° Como esta a configuração de seu arquivo ldap? isso é onde você define a árvore de pesquisa do LDAP. 4º A partir de onde você esta tentando se autenticar?? Windows, linux, mac, (ou esta testando com os utilitários radtest e epol_test). 5º para ajudar poste aqui a saída de debug do seu freeradius (basta executar o freeradius com o comando "freeradius -X") Com essas informações acredito que posso te ajudar. Abraços. Att. Em 21 de março de 2011 18:04, Usuário do Sistema <maiconlp@ig.com.br>escreveu:
Hello everyone, I'm dificult with freeradius and LDAP.
the user autheticate only it's work when I put in the user file User-Password clear text as follow.
"maicon.pereira" Cleartext-Password := "meleca" Reply-Message = "Hello, %{User-Name}" however, my integration between Freeradius and Ldap it isn't working.
My question is: there is possible to make the intragation?? because I've read that freeradius needs supply to ldap User-Password clear text.
it's true ??
I wish to use the ldap as database authetication.
thank!
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- João Paulo de Lima Barbosa Fone: (45) 9938-8399 Blog: http://joao.us Twitter: @joaocdc "O erro dos que tem poder é colocar barreiras para que ninguém os alcance, incentivando-nos a buscar todas as formas que encontramos para alcança-los."
Usuário do Sistema <maiconlp@ig.com.br> wrote:
Hello everyone, I'm dificult with freeradius and LDAP.
the user autheticate only it's work when I put in the user file User-Password clear text as follow.
"maicon.pereira" Cleartext-Password := "meleca" Reply-Message = "Hello, %{User-Name}" however, my integration between Freeradius and Ldap it isn't working.
My question is: there is possible to make the intragation?? because I've read that freeradius needs supply to ldap User-Password clear text.
it's true ??
That depends. If you want to use _any_ Challenge-Handshake auth method like MSCHAPv2 for wireless LAN you need to supply a cleartext password. If you only want to use PAP, you can keep using ldap_bind() and an encrypted/hashed password.
[-- text/html, encoding quoted-printable, charset: ISO-8859-1, 30 lines --]
Ugh. Grüße, Sven. -- Sig lost. Core dumped.
Hello everyone, after a long time my freeradius it's working with Ldap. The problem it was because I hasn't Installed the Samba. my aim is to use the freeradius to authencticate my wireless users with EAP-TLS. As I'm using the MSCHAP it's necessary the attributes SambaNTPassword and SambaLMPassword then it's need install Samba and Ldap. I'm using the freeradius version 2.1.7 on the Red-Hat Enterprise 5.6 Thank Joaocdc!! 2011/3/21 Sven Hartge <sven@svenhartge.de>
Usuário do Sistema <maiconlp@ig.com.br> wrote:
Hello everyone, I'm dificult with freeradius and LDAP.
the user autheticate only it's work when I put in the user file User-Password clear text as follow.
"maicon.pereira" Cleartext-Password := "meleca" Reply-Message = "Hello, %{User-Name}" however, my integration between Freeradius and Ldap it isn't working.
My question is: there is possible to make the intragation?? because I've read that freeradius needs supply to ldap User-Password clear text.
it's true ??
That depends. If you want to use _any_ Challenge-Handshake auth method like MSCHAPv2 for wireless LAN you need to supply a cleartext password.
If you only want to use PAP, you can keep using ldap_bind() and an encrypted/hashed password.
[-- text/html, encoding quoted-printable, charset: ISO-8859-1, 30 lines --]
Ugh.
Grüße, Sven.
-- Sig lost. Core dumped.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
joaocdc＠gmail.com -
Sven Hartge -
Usuário do Sistema