Active Directory + LDAP

[Alan DeKok]

Stefan Winter <freeradius-users-ml at stefan-winter.de> wrote:
> >   You may set Auth-Type, but don't set it to MSCHAP.  Set it to LDAP.
...

  when the Access-Request contains a clear-text password.

> But then I don't understand why so many people complain that auth
> against Active Directory doesn't work with the LDAP module?

  LDAP "authentication" is "bind to ldap with username & password".
This works for clear-text passwords.  It doesn't work for MSCHAP.

  Alan DeKok.