Another LDAP/RADIUS integration problem.

Alan DeKok aland at deployingradius.com
Sat Jul 24 05:43:23 CEST 2010


John Dennis wrote:
> Just from looking at the rlm_ldap code (not actual testing) I thought if
> auto_header was set to True in the ldap config then rlm_ldap after
> looking up the configured password attribute would perform the steps you
> describe above. (strip the hash prefix and add a new attribute with the
> correct attribute type for the hash type)
> 
> Am I confused?

  The auto-header should be off by default.  I think it was off in the
debug log posted earlier.  And it shouldn't be used.

  The PAP module does all that, and more.

  Alan DeKok.




More information about the Freeradius-Users mailing list