Patrick Bartkus wrote:
Please tell me someone has fixed this problem.

I'm trying to authenticate an Ascend MAX dial-up server back to Windows Active Directory.

I am using a local unix group for authorization.

I have Pam set up on my system and it uses Kerberos 5 to authenticate to AD just fine.

But I'm getting:
auth: type "PAM"
  Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 0
rlm_pam: Attribute "User-Password" is required for authentication. Cannot use "CHAP-Password".
  modcall[authenticate]: module "pam" returns invalid for request 0

I did some checking and found this posting from 2003 basically saying it can't be done:
http://www.mail-archive.com/freeradius-users@lists.cistron.nl/msg19439.html

I do have other options other than the Windows Domain authentication, but I was not wanting to pursue them unless I had to.

Has this been solved or am I SOL?

It is not a code bug. It is a fundamental feature of the algorithm. It *cannot* be solved. You are, as you put it, SOL. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to