FreeRADIUS and OpenLDAP

Alan DeKok aland at ox.org
Tue Jan 17 18:30:54 CET 2006


Michael Schwartzkopff <misch at multinet.de> wrote:
> If I use OpenLDAP to authorize / authenticate my users, what kinds of
> passwords can I store in LDAP?

  In 1.1.0, only one kind of password.  I suggest "clear".

> Is this controlled by the password_header configuation or does this
> only strip the header of the password?

  In 1.1.0, only the 'clear" header works very well.  The others don't.

> Is there any difference if use the EAP module?

  EAP is not a database.  LDAP is a database.

  If you're using EAP and getting passwords from LDAP, then the only
password format that will always work is "clear".

  Alan DeKok.



More information about the Freeradius-Users mailing list