I got it fixed! Based on an earlier discussion (and as shown earlier in this thread) I had set auth-type=PAP in users.
After digging through about 300 messages in the archive, I found that it should be auth-type = local. Is there anywhere that LISTS and DEFINES all the valid auth-types? Gene and Alan: Thanks for your help! Tim > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:freeradius-users-admin@;lists.cistron.nl]On Behalf Of Tim D. > McCracken > Sent: Saturday, October 26, 2002 7:08 PM > To: [EMAIL PROTECTED] > Subject: RE: PAP & CHAP won't work together > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:freeradius-users-admin@;lists.cistron.nl]On Behalf Of Gene Parks > > Sent: Saturday, October 26, 2002 6:34 PM > > To: [EMAIL PROTECTED] > > Subject: RE: PAP & CHAP won't work together > > > > > > One thing that is not included in the schema for LDAP is 'chappassword'. > > It assumes you already have it. If you do not have this in your schema > > then you will need to add it and then add it to the customer record you > > are testing against. > > > > Then CHAP will start working. > > > I am acutally using mysql rather than ldap. Are you saying that > I will have > to store both a Password and and Chappassword in the database for this to > work? > > Looking at the SQL queries, it never queries for a chappassword in the > authentication query but I guess it could pick it up from the check query. > > However, the error message I am getting says that it doesn't like the > attrbute in the request. And depending on which one I have working (PAP or > CHAP) it will err off on the other because it has the wrong password > attribute type. > > I think I am supposed to tell it somewhere to change the attribute type > before passing it on for authentication. For example, if it is a chap > request, I think (?) it is supposed to change the chap-password > attribute to > a password or user-password attribute and then pass it on. But I > evidently > don't know where to do that or something. > > I take it you are supporting both PAP and CHAP using LDAP? and have them > both working properly? Perhaps if you sent my your radiusd.conf file, I > could make mine work properly. > > Thanks > > Tim > > > Gene Parks > > VIP Direct > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
