Certificate based authentication in rlm_ldap

Rahul Srinivas srahul at novell.com
Wed Mar 29 05:36:46 CEST 2006


Hi,
   The rlm_ldap module accepts the configuration parameters
"tls_certfile" 
and "tls_keyfile" in radiusd.conf. But in the code, after setting the
LDAP 
options LDAP_OPT_X_TLS_CERTFILE and LDAP_OPT_X_TLS_KEYFILE, 'ldap_bind'
is 
done with a password (LDAP_AUTH_SIMPLE). Shouldn't a 'ldap_sasl_bind' be

done whenever the certificate and key are specified ?

Regards,

-Rahul S.



More information about the Freeradius-Devel mailing list