Re: Ldap + EAP

Rafa³ Kamiñski wrote:
> Phil Mayers napisa³(a):
>> Assuming you want the most common EAP type, PEAP/MS-CHAP, your LDAP
>> server must contain the users plaintext password or NT/LM hash, and you
>> must configure FreeRadius to extract this information and add it to the
>> configure items for a given request.
>>
>
> Hi,
>
> Can you tell me how configure FreeRadius to extract this information and
> add it to the configure items for request ?

You need the correct values in the "ldap.attrmap" file. The default file
comes with (amongst other) mappings:

checkItem LM-Password lmPassword
checkItem NT-Password ntPassword

>
> A set clear password in ldap and still i have that in debug mode:
>
> Login incorrect: [rka/<no User-Password attribute>] - rka is my user
>
> BR,

You'll need to add the relevant mapping e.g. if your cleartext password
is in "clearPassword" you would use:

checkItem User-Password clearPassword

Modify as appropriate.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html