FreeRADIUS + OpenLDAP + MSCHAPv2

[Tim Gustafson]

> ntlm_auth line is commented out by default.

Ok, I see that.

>From what I understand, MSCHAPv2 needs access to the unencrypted user password, and OpenLDAP doesn't offer that.  I'm guessing I'll have to add an unencrypted password field to the LDAP server to make this work, but that's not been made clear in any documentation.

And, how do you tell the FreeRADIUS eap/peap/MSCHAPv2 client to use the LDAP server as opposed to text files or PAM?

I'm attaching my radiusd.conf to this e-mail, any comments would be greatly appreciated.  I stripped out all the comments and removed the modules I wasn't using (like SQL stuff and unix/PAM/etc).

Tim Gustafson
SOE Webmaster
UC Santa Cruz
tjg at soe.ucsc.edu
831-459-5354


-------------- next part --------------
A non-text attachment was scrubbed...
Name: radiusd.conf
Type: application/octet-stream
Size: 2017 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20081114/65cda9d6/attachment.obj>