Freeradius v3.0.11 LDAP "userpassword: {SASL}bob" problems

Arran Cudbard-Bell a.cudbardb at
Thu Jun 16 16:34:04 CEST 2016

> On 16 Jun 2016, at 10:13, Alan DeKok <aland at> wrote:
> On Jun 15, 2016, at 4:54 AM, Kouata Modibo <sande7kouata at> wrote:
>> I installed freeradius version 3.0.11. I have two LDAP directory servers.
>> An LDAP server prinicpal A that contains all users. and an LDAP server B
>> directly connected to radius server (same network). LDAP server B contacts
>> the prinicpal server  A when needed to authenticate a user. The password
>> fields of  users on the server B are in the form
>> userpassword: {SASL}bob
>  That isn't supported by FreeRADIUS.
>  You will need to put real passwords into LDAP for it to work.
>  Alan DeKok.

I think OP is using it as some kind of weird aliasing thing, in which case it's doable, OP just needs to read 'man unlang' and figure out the logic OP's self.


Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 872 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the Freeradius-Users mailing list