Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-04-01 Thread mel
Hi, authorize { preprocess ldap chap mschap suffix eap #files } See? You edited that. A lot. And broke it. You got that right - I've accidently/intentionally (I can't remember which) deleted "pap". My bad. I have *no* idea why so many people install the

Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-04-01 Thread Alan DeKok
mel wrote: > In that case, something is *really* wrong with my setup and I have no > idea why. I can only authenticate if the password in OpenLDAP is > cleartext, but never if it's hashed. debug output, radiud.conf (modules > ldap section), sites-enable/default follows. You have edited the confi

Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-04-01 Thread mel
mel wrote: In that case, something is *really* wrong with my setup and I have no idea why. I can only authenticate if the password in OpenLDAP is cleartext, but never if it's hashed. debug output, radiud.conf (modules ldap section), sites-enable/default follows. I managed to get the authenti

Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-03-31 Thread mel
Alan DeKok wrote: password to the server. The server looks up the user in a database, and (perhaps) finds a SHA hashed password. The server then SHA hashes the password supplied by the client, and compares it to the SHA password from the database. In that case, something is *really* wrong wi

Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-03-31 Thread Alan DeKok
mel wrote: > A bit clearer now. So you're saying that I should use: > > radtest testuser {SHA}... 0 No. The *client* is not the *server*. The client sends a clear-text password to the server. The server looks up the user in a database, and (perhaps) finds a SHA hashed password. The serve

Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-03-31 Thread mel
Hi, FreeRADIUS does that automatically... IF it receives a password in the Access-Request. If it doesn't receive a password in the Access-Request, what you want to do is impossible. See the web page for more explanations. A bit clearer now. So you're saying that I should use: radtest t

Re: Freeradius and OpenLDAP authentication with hashed passwords

2008-03-31 Thread Alan DeKok
mel wrote: > I've managed to setup FreeRadius with OpenLDAP. The passwords however, > are hashed (e.g. "{SHA}") in LDAP. Authenticating directly to LDAP > works, but it failed with Freeradius. What does that mean? > If the password is in plain-text, > authentication is successful. Well,

Freeradius and OpenLDAP authentication with hashed passwords

2008-03-30 Thread mel
Hi all, I've managed to setup FreeRadius with OpenLDAP. The passwords however, are hashed (e.g. "{SHA}") in LDAP. Authenticating directly to LDAP works, but it failed with Freeradius. If the password is in plain-text, authentication is successful. Question: What are the setting in FR th

Re: FreeRadius and Openldap authentication

2006-01-02 Thread Zoltan Ori
On Monday 02 January 2006 10:11, Robert WAKIM wrote: > > Thanks for the answer, I've tried radeapclient but it keeps segfaulting. > I've browsed google to find a windows eap-md5 test client without any > success. > Sorry, I can't help with radeapclient. > > Do you have any advices on how to test

RE: FreeRadius and Openldap authentication

2006-01-02 Thread Robert WAKIM
> -Message d'origine- > De : [EMAIL PROTECTED] > [mailto:freeradius-users-bounces+rwakim=mind- > [EMAIL PROTECTED] De la part de Zoltan A. Ori > Envoyé : lundi 2 janvier 2006 12:51 > À : FreeRadius users mailing list > Objet : Re: FreeRadius and Openldap authen

RE: FreeRadius and Openldap authentication

2006-01-02 Thread S�bastien Cantos
freeradius-users@lists.freeradius.org > Objet : FreeRadius and Openldap authentication > > Hello, > > I'm pretty new to ldap and radius, I try to put and 802.x > authentication > but I have difficulties setting it up correctly. > > Here is my problem: > > W

Re: FreeRadius and Openldap authentication

2006-01-02 Thread Zoltan A. Ori
On Monday 02 January 2006 05:46, [EMAIL PROTECTED] wrote: > Here is my problem: > > When I start the radtest binary: > > radtest "test" "supersecret" localhost 2 testing123 > > rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=45, > length=20 > You have set your server to d

FreeRadius and Openldap authentication

2006-01-02 Thread [EMAIL PROTECTED]
Hello, I'm pretty new to ldap and radius, I try to put and 802.x authentication but I have difficulties setting it up correctly. Here is my problem: When I start the radtest binary: radtest "test" "supersecret" localhost 2 testing123 Here is the result: Sending Access-