rlm_ldap and auto_header

[tnt at kalik.net]

I had a look at the code and from what I see password value should be
added to a User-Password attribute. Can you post the whole debug with
auto_header disabled in ldap (and enabled in pap). You haven't mapped
userPassword to Cleartext-Password by any chance?

Ivan Kalik
Kalik Informatika ISP


Dana 11/11/2008, "Tim Palmer" <tpalmer at bestweb.net> piše:

>tnt at kalik.net wrote:
>>> No amount of changing settings in modules/pap and other config files
>>> would help. I finally noticed in the rlm_ldap debug output "auto_headers
>>> = no".
>>>
>>> So, I set auto_headers = yes in modules/ldap, and login passes. Remove
>>> it, and login fails.
>>>
>>>
>>
>> Are you saying that if you enable auto_header in pap module
>> authentication fails but if you enable it in ldap it works?
>>
>> Ivan Kalik
>> Kalik Informatika ISP
>>
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>>
>That is correct. I haven't yet tried disabling auto_header in pap module
>with it enabled in ldap, but enable/disable in ldap module, with it set
>in pap gives repeatable joy/no joy.
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>