John Dennis wrote: > Just from looking at the rlm_ldap code (not actual testing) I thought if > auto_header was set to True in the ldap config then rlm_ldap after > looking up the configured password attribute would perform the steps you > describe above. (strip the hash prefix and add a new attribute with the > correct attribute type for the hash type) > > Am I confused?
The auto-header should be off by default. I think it was off in the debug log posted earlier. And it shouldn't be used. The PAP module does all that, and more. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html