Thanks for your help.
I think I'm not far from the end but I still have problems.
Here's the debug logs :
[...]
Fri Jun 18 14:11:17 2004 : Debug: rlm_ldap: performing search in dc=u-strasbg,dc=fr, with filter (uid=csaillard)
request 6 done
Fri Jun 18 14:11:31 2004 : Debug: rlm_ldap: Added password $1$QEnpt.4f$nixixczJ/xu0CnyuvaTLV/ in check items
Fri Jun 18 14:11:31 2004 : Debug: rlm_ldap: looking for check items in directory...
Fri Jun 18 14:11:31 2004 : Debug: rlm_ldap: looking for reply items in directory...
Fri Jun 18 14:11:31 2004 : Debug: rlm_ldap: user csaillard authorized to use remote access
Fri Jun 18 14:11:31 2004 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0
Fri Jun 18 14:11:31 2004 : Debug: modsingle[authorize]: returned from ldap (rlm_ldap) for request 4
Fri Jun 18 14:11:31 2004 : Debug: modcall[authorize]: module "ldap" returns ok for request 4
Fri Jun 18 14:11:31 2004 : Debug: modcall: group authorize returns updated for request 4
Fri Jun 18 14:11:31 2004 : Debug: rad_check_password: Found Auth-Type EAP
Fri Jun 18 14:11:31 2004 : Debug: auth: type "EAP"
Fri Jun 18 14:11:31 2004 : Debug: Processing the authenticate section of radiusd.conf
Fri Jun 18 14:11:31 2004 : Debug: modcall: entering group Auth-Type for request 4
Fri Jun 18 14:11:31 2004 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 4
Fri Jun 18 14:11:31 2004 : Debug: rlm_eap: Request not found in the list
Fri Jun 18 14:11:31 2004 : Error: rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request
Fri Jun 18 14:11:31 2004 : Debug: rlm_eap: Failed in handler
Fri Jun 18 14:11:31 2004 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 4
Fri Jun 18 14:11:31 2004 : Debug: modcall[authenticate]: module "eap" returns invalid for request 4
Fri Jun 18 14:11:31 2004 : Debug: modcall: group Auth-Type returns invalid for request 4
Fri Jun 18 14:11:31 2004 : Debug: auth: Failed to validate the user.
[...]
I use TTLS/PAP for authentication, so you can see that the LDAP server sends MD5 hased password...but I'm not sure that's what I need....
Could you tell me what kind of EAP method you use, with what type of password's hash ?
Thanks for help !
Bye.
-- --------------------------- Christophe Saillard Centre Réseau Communication Université Louis Pasteur --------------------------- Tél : 03 90 24 03 17 Fax : 03 90 24 03 12 ---------------------------
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
