Dear I have implement freeradius with LDAP + cisco VPDN my problem is my authentication working with PAP but when i try for authentication from CHAP it is not working error is password not clear text so i have read many document about it and ppl talking about store passwd in clear text but also i have ass passwd in clear text still it is not working $cat users.ldif dn: uid=example,ou=users,ou=radius,dc=tulipit,dc=com objectClass: person objectClass: inetOrgPerson cn: example sn: example uid: example userPassword: test but this is not work with my CHAP authentication so what is the problem can anyone explain me in detail i want to know resone about this problem also i have change password_header ="{clear}" in radius.conf file but still not working $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
satish patel wrote:
I have implement freeradius with LDAP + cisco VPDN my problem is my authentication working with PAP but when i try for authentication from CHAP it is not working error is password not clear text so i have read many document about it and ppl talking about store passwd in clear text but also i have ass passwd in clear text still it is not working
Like many people, you have configured the server to use LDAP for authentication. This is wrong. Don't do it. If you read the debugging output, it will likely tell you what you're doing wrong. Don't set Auth-Type = LDAP, and it will probably work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Thanks for reply I also have remove LDAP from authentication and try to connect from clinet with CHAP authentication and error is "not clear text paswd " so i want to know LDAP support CHAP ??? and what about clear text passwd i also have add clear text passwd for Users/ldif but still now working so is it bug or anything else Alan DeKok <aland@deployingradius.com> wrote: satish patel wrote:
I have implement freeradius with LDAP + cisco VPDN my problem is my authentication working with PAP but when i try for authentication from CHAP it is not working error is password not clear text so i have read many document about it and ppl talking about store passwd in clear text but also i have ass passwd in clear text still it is not working
Like many people, you have configured the server to use LDAP for authentication. This is wrong. Don't do it. If you read the debugging output, it will likely tell you what you're doing wrong. Don't set Auth-Type = LDAP, and it will probably work. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
satish patel wrote:
I also have remove LDAP from authentication and try to connect from clinet with CHAP authentication and error is "not clear text paswd "
Run the server in debugging mode. Read the output.
so i want to know LDAP support CHAP ???
No. http://deployingradius.com/documents/protocols/oracles.html
and what about clear text passwd i also have add clear text passwd for Users/ldif but still now working so is it bug or anything else
Read the debug output. Odds are it's telling you that it did an LDAP lookup, and didn't find anything. That's why the userPassword field wasn't found. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
satish patel wrote:
so i want to know LDAP support CHAP ???
No. LDAP does not support CHAP. FreeRADIUS supports CHAP and FreeRADIUS supports LDAP. In other words, you need to make FR get the login credentials from the user and then the LDAP backend and let FR use CHAP to compare them. LDAP goes in the *authorization* section. CHAP goes in the *authentication* section. Read that carefully. Also read the debug output very carefully. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com
I have put LDAP in authorized section and CHAP in authentication section but still i have problem not clear text passwd in radiusd -X output so that users not able to login i understand what u want to say but i dont kow how come i solve this problem :( Dennis Skinner <dskinner@bluefrog.com> wrote: satish patel wrote:
so i want to know LDAP support CHAP ???
No. LDAP does not support CHAP. FreeRADIUS supports CHAP and FreeRADIUS supports LDAP. In other words, you need to make FR get the login credentials from the user and then the LDAP backend and let FR use CHAP to compare them. LDAP goes in the *authorization* section. CHAP goes in the *authentication* section. Read that carefully. Also read the debug output very carefully. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers
participants (3)
-
Alan DeKok -
Dennis Skinner -
satish patel