"known good" error

Ivan Kalik tnt at kalik.net
Thu Sep 24 13:37:08 CEST 2009


>    I decided to install free radius 2.1.6-2 to test it and then to upgrade
> my existing versions in my servers. I configured my free radius to use
> ldap.
> When I tried to authenticate from the new radius it gave me the following
> message "from radius -X".
>
>  Replacing User-Password in config items with Cleartext-Password.     !!!
> !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
> !!! Please update your configuration so that the "known good"
> !!!
> !!! clear text password is in Cleartext-Password, and not in
> User-Password.
> !!!
>
>
> Note that when I wrote the password encrypted  "like
> *%@&ksjd%@sdgsadgjhsb"
> I was able to login but when I wrote the password in clear text  "like
> test"
> I failed to login.

Password in ldap probably has a header. You can ignore the message then,
because server will convert User-Password to appropriate password
attribute on it's own (Crypt-Password for {crypt}, SHA-Password for {sha}
etc.) if auto-header is enabled. Post the whole debug.

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list