Freeradius with EAP and LDAP

[Marek Zarychta]

W dniu 19.12.2019 o 17:09, Juntunen, Jarkko pisze:
> Hello,
> We have Freeradius server 3.0.16 up and running and it'll authenticate Our
> test users successfully via default and inner-tunnel with PAP against Our
> test LDAP-server. But when we try to authenticate those same test users
> against that very same LDAP-server from/via Meraki (Cisco) Wifi-endpoints
> with EAP we'll have rejected auths.
>
> We have also created some test users in Freeradius db, and if we disable
> LDAP from Our configs those users can authenticate without problems against
> Freeradius itself.
>
> I'm just a newbie with Freeradius (and radius in general as well), so can
> anyone help and give a hint what We are missing?
>
> All help will be appreciated.
>
> -Jarkko
> -
>
Dear Jarkko,

please follow Alan's instructions to debug, but also bear in mind that
to get PEAP with MSCHAP working you probably need either
Cleartext-Password or hashed NT-Password available for users.

-- 
Marek Zarychta

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20191219/901c5861/attachment.sig>