Re: VS: Chap auhtentication against LDAP

2009-04-06 Thread tnt
So i cannot do this about using freeradius, but i can make it using IAS (see link)? http://h40060.www4.hp.com/procurve/includes/application-notes/index.php?cc=uklc=encontent=ans2-en But that's not LDAP, that's Active Directory. Active Directory can be made to reveal a clear text password to IAS

VS: Chap auhtentication against LDAP

2009-04-05 Thread Ville Leinonen
@lists.freeradius.org puolesta: Alan DeKok Lähetetty: pe 3.4.2009 16:10 Vastaanottaja: FreeRadius users mailing list Aihe: Re: Chap auhtentication against LDAP Ville Leinonen wrote: Does Freeradius 2.1.5 support chap authentication against ldap? No RADIUS server supports this. It's impossible

Re: VS: Chap auhtentication against LDAP

2009-04-05 Thread Alan DeKok
Ville Leinonen wrote: So i cannot do this about using freeradius, but i can make it using IAS (see link)? No. You seemed to have misunderstood my response. Let me say it a different way: LDAP servers cannot do CHAP authentication. Why? Because LDAP servers are *DATABASES*. LDAP

VS: VS: Chap auhtentication against LDAP

2009-04-05 Thread Ville Leinonen
Vastaanottaja: FreeRadius users mailing list Aihe: Re: VS: Chap auhtentication against LDAP Ville Leinonen wrote: So i cannot do this about using freeradius, but i can make it using IAS (see link)? No. You seemed to have misunderstood my response. Let me say it a different way: LDAP

Chap auhtentication against LDAP

2009-04-03 Thread Ville Leinonen
Hi, Does Freeradius 2.1.5 support chap authentication against ldap? If i try it here is messages what i get: Found Auth-Type = CHAP +- entering group CHAP {...} rlm_ldap: Attribute User-Password is required for authentication. Cannot use CHAP-Password. ++[ldap] returns invalid Failed to

Re: Chap auhtentication against LDAP

2009-04-03 Thread Alan DeKok
Ville Leinonen wrote: Does Freeradius 2.1.5 support chap authentication against ldap? No RADIUS server supports this. It's impossible. Instead, have FreeRADIUS pull the clear-text password from LDAP. FreeRADIUS can then do CHAP. If you don't have a clear-text password in LDAP, it's