How to use different ldap-modules?

Florian Prester Florian.Prester at rrze.uni-erlangen.de
Tue Jun 21 09:12:33 CEST 2005


Alan DeKok wrote:

>Florian Prester <Florian.Prester at rrze.uni-erlangen.de> wrote:
>  
>
>>I configured 2 ldap modules, one using a clear-text password for 
>>PEAP-TLS with MS-CHAPv2 or only CHAP authentication,
>>and one retrieving a Crypt-Password for using PAP-Authentication.
>>    
>>
>
>  Why?  Just use the clear-text password to do all of the
>authentication.  You're making work for yourself without any gain.
>  
>

But how can I do PAP with a clear-text password?

>  
>
>>group {
>>    
>>
>...
>
>  You're listing EAP in that group.  DON'T.
>  
>

Sorry, didn`t wanna do that!
But I want to achieve that the authentication is first trying CHAP, then 
PAP and so on.

>  
>
>>But it only takes the first entry, and if I switch the order of ldap-PAP 
>>and ldap-PEAP, so it should take ldap-PAP, therefore retrieve an 
>>Crypt-Password from the ldap-PAP-section it wants to use ldap for 
>>authentication!?!?!?
>>    
>>
>
>  Yes.
>  
>
How can I change that?
I thought  radius is taking that kind of authentication which request is 
comming in?!
So I sniffed and there are comming different request:

    PAP: User-Password
    CHAP: CHAP-Password

So how can I tell the radius to take the proper authentication and 
therefore a specific password using the LDAP profile?
In LDAP the clear-text password is given as well as the crypt one?

>  
>
>>What do I wrong?
>>    
>>
>
>  You've made massive changes to the configuration files.
>
>  Stop using two LDAP instances.  You don't need them.  Use the
>default configuration, with one LDAP module in the places shown by the
>default configuration.  It WILL work.
>
>  Alan DeKok.
>
>- 
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>  
>
I am sorry, if I am annoying you, but I am kind of confused and do not 
know what to do anymore.
Thanks
Florian

-- 
--------------------------------------------------------------
Dipl. Inf. Florian Prester
Network Administration
Regionales RechenZentrum Erlangen
Universitaet Erlangen-Nuernberg
Germany

Tel.: +499131 8527813




More information about the Freeradius-Users mailing list