LDAP & MSCHAP errors

Simon Palmer Simon.Palmer at colegsirgar.ac.uk
Wed Nov 12 14:55:48 CET 2008


Great - thanks,
Absolutely outstanding help thanks! :)
I hashed from ldap.attrmap as below
#checkItem      LM-Password                     sambaLmPassword
#checkItem      NT-Password                     sambaNtPassword
And it all worked! :)
Thanks very much! 
Simon

>>> <tnt at kalik.net> 12/11/2008 13:46 >>>
>[ldap] Added the eDirectory password password in check items as
>Cleartext-Password

OK. Here is the clear text password.

>[ldap] No default NMAS login sequence
>[ldap] looking for check items in directory...
>rlm_ldap: acctFlags -> SMB-Account-CTRL-TEXT == "[UX         ]"
>rlm_ldap: sambaNtPassword -> NT-Password ==
>0x4145394341303636374133413937333342303139423034323645363933373332
>rlm_ldap: sambaLmPassword -> LM-Password ==
>0x3635423939303044343142344533363831394631304139333344343836384443

So, you don't need these. Remove them and mschap will work. That hash
looks decimal not hex to me. I don't think that they are correct.

Ivan Kalik
Kalik informatika ISP

-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

Mae'r e-bost hwn ac unrhyw ffeiliau atodedig yn gyfrinachol ac at sylw'r
unigolyn neu'r sefydliad a enwir uchod. Bydd 
unrhyw farn neu sylwadau a fynegir yn perthyn i'r awdur yn unig ac ni
chynrychiolant o anghenraid farn Coleg Sir Gâr. 
Os ydych chi wedi derbyn yr e-bost hwn ar gam, rhowch sylw i'r
gweinyddwr ar y cyfeiriad canlynol:
postmaster at colegsirgar.ac.uk 

Cysidrwch yr amgylchedd - a oes wir angen argraffu'r ebost hwn?

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to 
whom they are addressed. Any views or opinions expressed are solely
those of the author and do not necessarily represent those of Coleg Sir
Gâr. If you have received this email in error please notify the
administrator on the following address:
postmaster at colegsirgar.ac.uk 

Please consider the environment - do you really need to print this
email?

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20081112/0e291ded/attachment.html>


More information about the Freeradius-Users mailing list