Another LDAP/RADIUS integration problem.

Alan DeKok aland at deployingradius.com
Tue Jul 27 09:00:23 CEST 2010


Tom Leach wrote:
> Alan, I changed the ldap.attrmap file from "checkItem Crypt-Password
> userPassword" to "checkItem User-Password userPassword" and it's
> authenticating now, but I now have a new message in the debug output and
> I'm not sure if it's a problem, suggestion, or otherwise.

  It's a suggestion.  But the first step was to get it to work.

>  I can't
> change the LDAP directory to contain actual cleartext passwords, so it
> may just be something that I have to live with.

  Change the mapping in ldap.attrmap to:

checkItem Password-With-Header userPassword

  That should *still* work, and will remove the warning.

  The process here is to first get it to work, and then get it to work
better.

  Alan DeKok.



More information about the Freeradius-Users mailing list