On Mon, Feb 23, 2015 at 05:40:13AM +0000, Sautron Nick wrote:

Would it be possible to implemente ldap with word passes into crypt/sha, with authentication method  EAP TTLS mschapv2 / EAP peap mschapv2 ?

http://deployingradius.com/documents/protocols/compatibility.html EAP-TTLS/PAP, yes. EAP-TTLS/MSCHAPv2, no. PEAP/MSCHAPv2, no. Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>

Hi,

Hello everyone, I installed freeradius 2.2.6, and I try to Implement an ldap server, however this ldap password server are "crypt" and "SHA".

My question is:

Would it be possible to implemente ldap with word passes into crypt/sha, with authentication method  EAP TTLS mschapv2 / EAP peap mschapv2 ?

no. docs: http://deployingradius.com/documents/protocols/oracles.html for EAP-TTLS/PAP this will work. however, for EAP-TTLS/MSCHAPv2 or EAP-PEAP/MSCHAPv2 you will need plain passwords or NT-HASH passwords alan