Advice on poptop - freeradius - ldap

[Alan DeKok]

Dirk Enrique Seiffert wrote:

> I set ldap in authorize {} and authenticate {}. In users I added
>> 
> DEFAULT         Auth-Type := LDAP
>                Fall-Through = 1

  Why?  That's not necessary.

> When i try to connect from an pptp client my logs show:
> 
> Tue Dec 12 19:07:31 2006 : Debug: rlm_ldap: Added password
> {md5}rcBovg3Uck47CSFRhqdtdQ== in check items

  1.1.3 doesn't really support that.

> Tue Dec 12 19:07:31 2006 : Debug: rlm_ldap: looking for check items in
> directory...
> Tue Dec 12 19:07:31 2006 : Debug: rlm_ldap: Adding sambaNTPassword as
> CHAP-Password, value 80B328568267E5A48ACD43F6F67DAD2F & op=21

  Huh?  It looks like you edited the "ldap.attrmap" file.  Why?

...
> Tue Dec 12 19:07:31 2006 : Debug: auth: type Local
> Tue Dec 12 19:07:31 2006 : Debug: auth: No User-Password or CHAP-Password
> attribute in the request
> 
> Auth seems to fall back to local, why?

  Because it didn't reach the "users" file entry you added.  Read the
rest of the debug log (i.e. the part you DIDN'T post here) to see why.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog