RE: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP

2008-11-13 Thread CJ O
Alan - Thank you. Making the change to the inner-tunnel worked. Regards CJ Date: Thu, 13 Nov 2008 08:44:07 +0100 From: [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Re: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP CJ O wrote: Good Afternoon - I've read

Re: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP

2008-11-12 Thread tnt
In site-enable/default under authorize I've uncommented ldap. You don't need ldap there. Uncomment ldap in sites-enabled/inner-tunnel virtual server. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP

2008-11-12 Thread CJ O
Ivan - Thank you for your help. That change has allowed MS-Chapv2 to work from my tunnel. Since I've specified PEAP in the eap.conf, is it possible to use GTC too? Thanks CJ To: freeradius-users@lists.freeradius.org Subject: Re: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP Date: Thu

RE: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP

2008-11-12 Thread tnt
That change has allowed MS-Chapv2 to work from my tunnel. Since I've specified PEAP in the eap.conf, is it possible to use GTC too? Yes, you can use any eap method you want. default_eap_type will be tried first. If refused, server and suppicant will try to agree on another. It just means one

RE: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP

2008-11-12 Thread CJ O
Ivan - Thank you for your help. I removed the password_attribute field from modules/ldap and everything seems to be working with PEAP and GTC. Thank you again! CJ To: freeradius-users@lists.freeradius.org Subject: RE: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP Date: Thu, 13 Nov 2008 01

Re: FreeRadius 2.1.1 - OpenLDAP + NT hash + PEAP

2008-11-12 Thread Alan DeKok
CJ O wrote: Good Afternoon - I've read through a lot of threads and documents and have piced information together, however I am still having issues. We are running an OpenLDAP with the passwords encrypted. I know that PEAP requires the clear text password to be stored in the LDAP Server,