"Raval, Jabal" <[EMAIL PROTECTED]> wrote:
> I've been able to get the pptp server make requests to the radius server
> but the radius server fails and here are some logs.
...
>   rlm_mschap: Found MS-CHAP attributes.  Setting 'Auth-Type := LDAP'

  Huh?  Why did you do that?

>   rad_check_password:  Found Auth-Type LDAP
> auth: type "LDAP"
> modcall: entering group Auth-Type for request 0
> rlm_ldap: - authenticate
> rlm_ldap: Attribute "User-Password" is required for authentication.

  Please read the list archives.  You can't do MS-CHAP authentication
against LDAP.  You need to pull the password from the LDAP database,
and let the mschap module perform the authentication.

  I'm inclined to remove the LDAP authentication from future releases.
I don't see a real need for it, and it's confusing a lot of people.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to