It´s work. I write into the ldap.attrmap: checkItem Cleartext-Password userPassword In the sites-available/default, I comment out everything except ldap, eap And I activate LDAP in the sites-available/inner-tunnel authorize. Thank you for help.