Re: 'Attribute "User-Password" is required for authentication.' (EAP/TTLS/RADIUS/PAM)

2008-06-11 Thread Alan DeKok
sth wrote: > Hi folks, Posting huge amounts of configuration files to the list isn't necessary. > My NAS is talking to the FR instance (being run in "-X" debug mode, of > course), but the NAS doesn't appear to be sending the "User-Password" > attribute that FR is expecting. No. It's sending

Re: 'Attribute "User-Password" is required for authentication.' (EAP/TTLS/RADIUS/PAM)

2008-06-11 Thread Nicolas Goutte
As far as I understand your config files, you want to use MD5. So the question are: - is the client really sending MD5 hashes (or is it sending NT hashes for example) - can PAM handle it? - has PAM access to the password in MD5 or in clear to be able to check against it? I hope that my hi

'Attribute "User-Password" is required for authentication.' (EAP/TTLS/RADIUS/PAM)

2008-06-11 Thread sth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi folks, I've been tasked with determining the feasibility of migrating a campus wireless deployment from "open wireless plus VPN" to WPA2 Enterprise. The existing VPN server authenticates against a RHEL4 FreeRADIUS server (1.0.1-3.RHEL4.5, the late