LDAP and FreeRadius

Sonny Taberman sonny.taberman at lan-master.eu
Wed Aug 15 18:40:04 CEST 2012

Hi. Fajar.
Thanks so much for your help.
You helped me to find the problem.

In ldap.attrmap I changed this line:
checkitem	Password-With-Header		userPassword
to this line:
checkitem	Cleartext-Password		userPassword

And now I can not see any error in the debug output.
So I have to say my problem are solved.

But I do wonder if this is something I should be able to find in the documentation and if so do you have any pointers to where?
( I have read everything I thought. But obviously not) :-)


15 aug 2012 kl. 17:13 skrev "Fajar A. Nugraha" <list at fajar.net>:

> On Wed, Aug 15, 2012 at 9:54 PM, Sonny Taberman
> <sonny.taberman at lan-master.eu> wrote:
>> I have to correct my self.
>> The third column is the LDAP-name so that can't be it. I mean that is the
>> container where the password is saved.
>> Or am I missing something here?
> Something is setting User-Password check item. If you store the
> cleartext password as userPassword ldap attribute, then you might have
> something like this on your ldap.attrmap
> checkitem User-Password userPassword
> ... in which case you need to change the second column to
> Password-With-Header (or probably Cleartext-Password). But since you
> say the attrmap is identical (are you REALLY sure?), I don't know
> where else to look. Do you have User-Password somewhere on your
> attrmap, perhaps? Or users file? Or db?
> -- 
> Fajar
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

More information about the Freeradius-Users mailing list