Using other ldap attribute as wifi password
Hi List, I've configured freeIPA and freeRadius so I could use my ldap password as login to the network. Unfortunatly my manager wants me to change the system so it would be possible to use another ldap attribute as wifi password. I already extended the ldap configuration with an wifiCode attribute and when I query the ldap database I get the correct result back. The ipa-tools also return the correct value. Now I want to use this field in freeradius but I get stuck. I replaced the line "control:NT-Password := 'ipaNTHash'" by "control:Cleartext-Password := 'wifiCode'" but without any result. Is there any other thing I have to change to make it working? Kind regards, Wim Vinckier. -- I would love to change the world, but they wont give me the source code.
On Sep 5, 2018, at 11:54 AM, Wim Vinckier <wimpunk@gmail.com> wrote: I've configured freeIPA and freeRadius so I could use my ldap password as login to the network. Unfortunatly my manager wants me to change the system so it would be possible to use another ldap attribute as wifi password.
That should be simple enough.
I already extended the ldap configuration with an wifiCode attribute and when I query the ldap database I get the correct result back. The ipa-tools also return the correct value. Now I want to use this field in freeradius but I get stuck. I replaced the line "control:NT-Password := 'ipaNTHash'" by "control:Cleartext-Password := 'wifiCode'" but without any result.
See the FAQ for "it doesn't work".
Is there any other thing I have to change to make it working?
Asking a good question would help. http://wiki.freeradius.org/list-help Alan DeKok.
On Wed, 5 Sep 2018 at 18:44, Alan DeKok <aland@deployingradius.com> wrote:
On Sep 5, 2018, at 11:54 AM, Wim Vinckier <wimpunk@gmail.com> wrote: I've configured freeIPA and freeRadius so I could use my ldap password as login to the network. Unfortunatly my manager wants me to change the system so it would be possible to use another ldap attribute as wifi password.
That should be simple enough.
I was glad to hear this. It motivated me to continue searching.
I already extended the ldap configuration with an wifiCode attribute and when I query the ldap database I get the correct result back. The ipa-tools also return the correct value. Now I want to use this field in freeradius but I get stuck. I replaced the line "control:NT-Password := 'ipaNTHash'" by "control:Cleartext-Password := 'wifiCode'" but without any result.
See the FAQ for "it doesn't work".
Is there any other thing I have to change to make it working?
Asking a good question would help.
http://wiki.freeradius.org/list-help
Alan DeKok
You were right again. I've should have be more detailed on my question. Anyway, I found the solution. Adding the wifiCode was a good step. I just had to allow the user to read the wifiCode at the ldap side, that was the part I was missing. Kind regards, Wim Vinckier. -- I would love to change the world, but they wont give me the source code.
Have a look at http://lists.freeradius.org/pipermail/freeradius-users/2018-September/092606... and http://lists.freeradius.org/pipermail/freeradius-users/2018-September/092675... Regards, Kostas On Παρ, Σεπ 14 2018 at 12:01:52 μμ, wim vinckier <wimpunk@tisnix.be> wrote:
On Wed, 5 Sep 2018 at 18:44, Alan DeKok <aland@deployingradius.com> wrote:
On Sep 5, 2018, at 11:54 AM, Wim Vinckier <wimpunk@gmail.com> wrote: I've configured freeIPA and freeRadius so I could use my ldap password as login to the network. Unfortunatly my manager wants me to change the system so it would be possible to use another ldap attribute as wifi password.
That should be simple enough.
I was glad to hear this. It motivated me to continue searching.
I already extended the ldap configuration with an wifiCode attribute and when I query the ldap database I get the correct result back. The ipa-tools also return the correct value. Now I want to use this field in freeradius but I get stuck. I replaced the line "control:NT-Password := 'ipaNTHash'" by "control:Cleartext-Password := 'wifiCode'" but without any result.
See the FAQ for "it doesn't work".
Is there any other thing I have to change to make it working?
Asking a good question would help.
http://wiki.freeradius.org/list-help
Alan DeKok
You were right again. I've should have be more detailed on my question. Anyway, I found the solution. Adding the wifiCode was a good step. I just had to allow the user to read the wifiCode at the ldap side, that was the part I was missing.
Kind regards,
Wim Vinckier.
-- Kostas Zorbadelos http://gr.linkedin.com/in/kzorba
participants (4)
-
Alan DeKok -
Kostas Zorbadelos -
Wim Vinckier -
wim vinckier