How "bind as user" mode works?

[Alan DeKok]

On Aug 17, 2023, at 8:14 AM, Rodrigo Abrantes Antunes <rodrigoantunes at pelotas.ifsul.edu.br> wrote:
> 
> With TTLS + PAP I still need read access to the user password in AD right?

  No.  You can do "bind as user".  That's what I said.

> This is what is said in the debug output at least, so it doesn't help me because I don't have this access like I said earlier.

  Did you read what I said?  TTLS+PAP means that "bind as user" will work.  Which means that FreeRADIUS doesn't need to read the password.

  Stop arguing and go test it.  It will work.

  Alan DeKok.