sorry here is ONLY the authenticate{ section...

commenting out pam, unix, ldap, won't fix it,
commenting out all but ldap won't fix it, etc...


authenticate {
        #
        #  PAP authentication, when a back-end database
listed
        #  in the 'authorize' section supplies a password. 
The
        #  password can be clear-text, or encrypted.
        Auth-Type PAP {
#               pap
        }

        #
        #  Most people want CHAP authentication
        #  A back-end database listed in the 'authorize'
section
        #  MUST supply a CLEAR TEXT password.  Encrypted
passwords
        #  won't work.
        Auth-Type CHAP {
#               chap
        }

        #
        #  MSCHAP authentication.
        Auth-Type MS-CHAP {
#               mschap
        }

        #
        #  If you have a Cisco SIP server authenticating
against
        #  FreeRADIUS, uncomment the following line, and the
'digest'
        #  line in the 'authorize' section.
#       digest

        #
        #  Pluggable Authentication Modules.
        pam

        #
        #  See 'man getpwent' for information on how the
'unix'
        #  module checks the users password.  Note that
packets
        #  containing CHAP-Password attributes CANNOT be
authenticated
        #  against /etc/passwd!  See the FAQ for details.
        #  
        unix

        # Uncomment it if you want to use ldap for
authentication
        #
        # Note that this means "check plain-text password
against
        # the ldap database", which means that EAP won't
work,
        # as it does not supply a plain-text password.
#       Auth-Type LDAP {
                ldap
#       }

        #
        #  Allow EAP authentication.
#       eap
}



--- Alan DeKok <[EMAIL PROTECTED]> wrote:

> "John H." <[EMAIL PROTECTED]> wrote:
> > Is it this line that is causing the problem(from
> > debug)
> > 
> >   Processing the authenticate section of
> radiusd.conf
> > modcall: entering group Auth-Type for request 0
> >   WARNING! Asked to process empty group. 
> Returning
> > reject.
> 
>   Yes, that's the problem.
> 
> > how do i fix that?  Is it talking about my LDAP
> group?
> 
>   No.  It's talking about the authenticate section
> of radiusd.conf.
> 
>   Please post it to the list.
> 
>   Odds are you edited it from the default config,
> and the edits are
> the cause of the problem.
> 
>   Alan Dekok.
> 
> 
> - 
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 



                
__________________________________
Do you Yahoo!?
Yahoo! Mail - 50x more storage than other providers!
http://promotions.yahoo.com/new_mail

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to