eap-ttls and eap-peap againts OpenLdap
Hello I trying to setting up the next scenario: freeradius 2.1.7 with eap-peap (mschapv2) and eap-ttls-pap authentication againts and OpenLDAP with userpassword and Samba attributes. I've installed OpenLdap with samba and userPassword attributes : My username credentiales (uid=ohnith) sambaLMPassword: 90B5B9BABA2A661CAAD3B435B51404EE sambaNTPassword: 0499CCC684CBC2FC38F9C4A3627BCAFD userPassword: {MD5}bpVSyb2OYcjyd8ISIBYCNA== I' ve installed freeradius 2.1.7 with the default configuration My problem is when I try to authenticate using peap-mschapv2 I've read a lot mails about similar problems but i can't find the answer to it I send you the debug output Any suggestions? Thanks Nick Ohn
On Mon, Feb 22, 2010 at 2:04 AM, John smith <ohnith@gmail.com> wrote:
My problem is when I try to authenticate using peap-mschapv2 I've read a lot mails about similar problems but i can't find the answer to it
Did you use ntlm_auth? what version of samba? IIRC you need older version of samba (search list archive, someone mention v3.2.5 works). If you have cleartext password on your LDAP schema there might be other options. -- Fajar
Hi Fajar, I don't use ntlm_auth, i'd think was necessary when using a Active Directory, My version of samba is 3.0.24 I'm going to read about ntlm_auth option and i'll try it Thank you Nick 2010/2/22 Fajar A. Nugraha <fajar@fajar.net>
On Mon, Feb 22, 2010 at 2:04 AM, John smith <ohnith@gmail.com> wrote:
My problem is when I try to authenticate using peap-mschapv2 I've read a lot mails about similar problems but i can't find the answer to it
Did you use ntlm_auth? what version of samba? IIRC you need older version of samba (search list archive, someone mention v3.2.5 works).
If you have cleartext password on your LDAP schema there might be other options.
-- Fajar
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, Feb 22, 2010 at 9:14 PM, John smith <ohnith@gmail.com> wrote:
Hi Fajar, I don't use ntlm_auth, i'd think was necessary when using a Active Directory,
My version of samba is 3.0.24
I'm going to read about ntlm_auth option and i'll try it
IIRC, when you use peap-mschap, you need either: - use ntlm_auth (which in trun connects to AD or other LDAP server), OR - have cleartext password. You only have MD5 password. -- Fajar
participants (2)
-
Fajar A. Nugraha -
John smith