Google LDAP integration failure

[Alan DeKok]

On Feb 23, 2019, at 5:04 PM, Phil Grace <phil.grace at hssd.k12.ar.us> wrote:
> I’m not sure, I just followed google’s provided setup guide for freeradius to work with their LDAP service. 

  So they say it will work with MS-CHAP?

> So would I just disable MS-CHAP or do something different with LDAP config to get the “known good”password. Would my issue probably be in the inner-tunnel file or the default file?

  You can't really disable MS-CHAP.  It's chosen by the users system, and sent to FreeRADIUS.

  If you disable MS-CHAP on the server, all that happens is the user gets rejected when they try to use MS-CHAP.

  Alan DeKok.