thank you alan,

i noticed that error before but don't know, somewhere in the previous posts somebody said it is an error related to mschap,

anyway i tried to fix it, but unsucessfuly, i have changed everything to clear instead of crypt, i also modified the users ldap entry to clear password
so the configuration looks like following:
---------------------------------------------
radiusd.conf:
pap {
encryption_scheme = clear
}



ldap { server = "localhost" identity = "xxx" password = xxx basedn = "xxx" filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"

start_tls = no

               profile_attribute = "radiusProfileDn"
               access_attr = "dialupAccess"

dictionary_mapping = ${raddbdir}/ldap.attrmap

               ldap_connections_number = 5
               password_header = "{clear}"
               password_attribute = userPassword
               timeout = 4
               timelimit = 3
               net_timeout = 1
       }
-------------------------------------------------
but still do i get the same errors when running in the debug mode...
-------------------------------------------------
.
.
.
rlm_ldap: Password header not found in password 123 for user soe
.
.
.

*  rad_check_password:  Found Auth-Type PAP
auth: type "PAP"
modcall: entering group Auth-Type
rlm_pap: login attempt by "soe" with password 123
rlm_pap: No password (or empty password) to check against for for user soe
modcall[authenticate]: module "pap" returns invalid
modcall: group Auth-Type returns invalid
--------------------------------------------------

could you please help me fix that error??

best regards

ossama


Alan DeKok wrote:


Ossama Suleiman <[EMAIL PROTECTED]> wrote:


but still do i get the same error:*
*rlm_pap: No password (or empty password) to check against for for user soe


...


rlm_ldap: Password header not found in password {CRYPT}wCXDeZp/uLRGE for user soe



You might try fixing that error. See the configuration for the 'ldap' module.

Alan DeKok.

- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html





-- Ossama Suleiman Systems Engineer TE Data S.A.E Email: [EMAIL PROTECTED] Web: www.tedata.net Phone: +(202)-416-6600, EXT: 1105

"Learn from yesterday, live for today, hope for tomorrow."



- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to