FreeRadius, OpenLDAP, Samba, etc.

Alan DeKok aland at
Wed Nov 8 00:38:47 CET 2006

Eric Faden <eric at> wrote:
> Alright.  I unset all of the Auth-Types in users and it is getting 
> closer, but not there yet.  Here is the new output.  It is getting the 
> correct NT-Passwords, but doesn't actually seem to test them.

  Because Auth-Type is Local, not PAP.  The CVS head handles this a
little better, unfortunately.

  In this case, you'll have to set Auth-Type = "nt-pap", and configure
an instance of the "pap" module, that handles nt password, *and*
configure LDAP to put them into the User-Password attribute.

  Yes, this is awkward.  Yes, it's broken.  We'll fix it soon...

  Alan DeKok.
--       - The web site of the book - The blog

More information about the Freeradius-Users mailing list