I have configured freeradius+ldap+802.1X for a wireless lan, but i can't get it to work because of mschap, and i dont have windows domain.
Then why the heck are you using ntlm_auth? It's only purpose is to do MSCHAP authentication to a Windows domain controller.
Because the configuration for 802.1X, using the 802.1X howto and http://vuksan.com/linux/dot1x/802-1x-LDAP.html, said that needs to configure peap and peap use mschap (....mmmm {thinking} but don't said nothing about ntlm) how the mschap module can perform authentication itself?? or how can i use 802.1X/peap and ldap ??? can i use it??? thank you in advance Manuel Lopez
mlopez@uabc.mx wrote:
Then why the heck are you using ntlm_auth? It's only purpose is to do MSCHAP authentication to a Windows domain controller.
Because the configuration for 802.1X, using the 802.1X howto and http://vuksan.com/linux/dot1x/802-1x-LDAP.html, said that needs to configure peap and peap use mschap (....mmmm {thinking} but don't said nothing about ntlm)
Exactly. You don't need ntlm_auth. Please believe me.
how the mschap module can perform authentication itself??
Because, as I said in a previous message, FreeRADIUS gets the password from LDAP.
or how can i use 802.1X/peap and ldap ??? can i use it???
Yes. Stop asking questions. Follow the HOWTO's. It WILL work. You're refusing to follow the howto's because you don't understand why they tell you to do things. That's *why* they're HOWTO's: they tell you HOW. They don't tell you WHY. If they did, they would be called WHYTO's. Alan DeKok.
On Wed, 2005-11-02 at 18:10 -0500, Alan DeKok wrote:
mlopez@uabc.mx wrote:
Then why the heck are you using ntlm_auth? It's only purpose is to do MSCHAP authentication to a Windows domain controller.
Because the configuration for 802.1X, using the 802.1X howto and http://vuksan.com/linux/dot1x/802-1x-LDAP.html, said that needs to configure peap and peap use mschap (....mmmm {thinking} but don't said nothing about ntlm)
Exactly. You don't need ntlm_auth. Please believe me.
I believe you.
how the mschap module can perform authentication itself??
Because, as I said in a previous message, FreeRADIUS gets the password from LDAP.
Automagically !!!!
or how can i use 802.1X/peap and ldap ??? can i use it???
Yes. Stop asking questions. Follow the HOWTO's. It WILL work.
following all the steps, again, and after a day without thinking about this, finally today it's ready. Thanks. -- LCC Juan Manuel Lopez Villalobos Departamento de Sistemas de Informacion Coordinacion de Informacion Academica Universidad Autonoma de Baja California Tel: (686) 551 8274 Fax: (686) 551 8269 Conmutador: (686) 551 8222 y 8270 ext. 3360
participants (3)
-
Alan DeKok -
Juan Mauel Lopez Villalobos -
mlopez＠uabc.mx