migrate PAP to CHAP for LDAP

[Rohaizam Abu Bakar]

How can i migrate PAP authentication method to CHAP using existing LDAP data ??   Tested below:   - In radiusd.conf under ldap module:   password_header = "{clear}" password_attribute = radiusCHAPPassword         [mapped to CHAP-Password]         => added radiusCHAPPassword in LDAP entry     Although at first its detect Auth-Type = CHAP...  then rlm_ldap still complaining needing "User-Password"         ######### debug MODE####################   rad_recv: Access-Request packet from host 10.1.1.1:16941, id=30, length=51         User-Name = "haizamchap"         CHAP-Password = 0xf47dcdd9b0c307fc682539df2704ac6a20 modcall: entering group authorize for request 0   modcall[authorize]: module "preprocess" returns ok for request 0   rlm_chap: Setting 'Auth-Type := CHAP'   modcall[authorize]: module "chap" returns ok for request 0     rlm_realm: No '@' in User-Name = "haizamchap", looking up realm NULL     rlm_realm: Found realm "NULL"     rlm_realm: Adding Stripped-User-Name = "haizamchap"     rlm_realm: Proxying request from user haizamchap to realm NULL     rlm_realm: Adding Realm = "NULL"     rlm_realm: Authentication realm is LOCAL.   modcall[authorize]: module "suffix" returns noop for request 0     users: Matched DEFAULT at 43   modcall[authorize]: module "files" returns ok for request 0   modcall[authorize]: module "mschap" returns noop for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for haizamchap radius_xlat:  '(uid=haizamchap)' radius_xlat:  'ou=People,dc=jaring,dc=my' ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to 127.0.0.1:389, authentication 0 rlm_ldap: bind as cn=Sysadmin,ou=Applications,dc=jaring,dc=my/xxxxxxxx to 127.0.0.1:389 rlm_ldap: waiting for bind result ... rlm_ldap: performing search in ou=People,dc=jaring,dc=my, with filter (uid=haizamchap) rlm_ldap: checking if remote access for haizamchap is allowed by dialupAccess rlm_ldap: Password header not found in password haizamchap for user haizamchap rlm_ldap: looking for check items in directory... rlm_ldap: Adding radiusCHAPPassword as CHAP-Password, value haizamchap & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: Adding radiusFramedCompression as Framed-Compression, value Van-Jacobson-TCP-IP & op=11 rlm_ldap: Adding radiusFramedMTU as Framed-MTU, value 1500 & op=11 rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11 rlm_ldap: Adding radiusServiceType as Service-Type, value Framed-User & op=11 rlm_ldap: user haizamchap authorized to use remote access ldap_release_conn: Release Id: 0   modcall[authorize]: module "ldap1" returns ok for request 0 modcall: group authorize returns ok for request 0   rad_check_password:  Found Auth-Type LDAP auth: type "LDAP" modcall: entering group Auth-Type for request 0 rlm_ldap: - authenticate rlm_ldap: Attribute "User-Password" is required for authentication. Cannot use "CHAP-Password".   modcall[authenticate]: module "ldap1" returns invalid for request 0 modcall: group Auth-Type returns invalid for request 0 auth: Failed to validate the user.         --haizam