FreeRADIUS + OpenLDAP + NAS (it�s make me crazy!!!please HELP!!!)
Please, help me.. I am confuse why my freeradius server can´t detect the password that i write on the client? I am use OpenLDAP for the database rad_recv: Access-Request packet from host 10.10.53.100:1812, id=76, length=83 User-Name = "htrisnadi" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000e0168747269736e616469 NAS-IP-Address = 10.10.53.100 Message-Authenticator = 0x4e8851c2f8e7f31d426d4a853af3ef1d ... auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group LDAP for request 1 rlm_ldap: - authenticate rlm_ldap: Attribute "User-Password" is required for authentication. modcall[authenticate]: module "ldap" returns invalid for request 1 modcall: leaving group LDAP (returns invalid) for request 1 auth: Failed to validate the user. Login incorrect: [htrisnadi/<no User-Password attribute>] (from client liv1 port 0) There is no User-Password in there. Should i change the configuration? in which file? --------------------------------- Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. --------------------------------- Looking for last minute shopping deals? Find them fast with Yahoo! Search.
Koko Kurniawan wrote:
why my freeradius server can´t detect the password that i write on the client?
Because the password is NOT in the RADIUS packet. Go read it: no "User-Password" attribute.
rad_recv: Access-Request packet from host 10.10.53.100:1812, id=76, length=83 User-Name = "htrisnadi" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000e0168747269736e616469
EAP is an authentication protocol that does not send the password from the client to the server.
auth: type "LDAP"
You forced "Auth-Type := LDAP". DO NOT DO THAT. Please explain WHY you are doing this, and WHERE in the documentation (or web pages) it said to do this.
There is no User-Password in there. Should i change the configuration? in which file?
Do NOT set Auth-Type. If LDAP has a clear-text password available for the user, FreeRADIUS will figure out how to authenticate the user. Alan DeKok.
participants (2)
-
Alan DeKok -
Koko Kurniawan