I had a look at the code and from what I see password value should be added to a User-Password attribute. Can you post the whole debug with auto_header disabled in ldap (and enabled in pap). You haven't mapped userPassword to Cleartext-Password by any chance?
Ivan Kalik Kalik Informatika ISP Dana 11/11/2008, "Tim Palmer" <[EMAIL PROTECTED]> piše: >[EMAIL PROTECTED] wrote: >>> No amount of changing settings in modules/pap and other config files >>> would help. I finally noticed in the rlm_ldap debug output "auto_headers >>> = no". >>> >>> So, I set auto_headers = yes in modules/ldap, and login passes. Remove >>> it, and login fails. >>> >>> >> >> Are you saying that if you enable auto_header in pap module >> authentication fails but if you enable it in ldap it works? >> >> Ivan Kalik >> Kalik Informatika ISP >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> >That is correct. I haven't yet tried disabling auto_header in pap module >with it enabled in ldap, but enable/disable in ldap module, with it set >in pap gives repeatable joy/no joy. >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html