SOLVED: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-18 Thread Douglas G. Phillips
On Wed, 2005-05-11 at 17:28 -0500, Douglas G. Phillips wrote: The problem is this: If I pass the radtest client a clear-text password, authentication is successful. If either I pass the client an encrypted password (copied from the logs) or point the 5350 at the radius server, it doesn't

OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Douglas G. Phillips
I'm running into an issue here, and I can't seem to find the forest for the trees. I'm probably overlooking something obvious, and am not searching correctly for the problem. Our LDAP server is using crypted passwords at the moment. The router is a cisco 5350. RADIUS is FreeRADIUS 1.0.1-2 on

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Vladimir Vuksan
Douglas G. Phillips wrote: Here is a sample of the password that is being passed: User-Password = \240d\351E\3737\025\022\0227,(rest removed) This may imply that your shared secret is incorrect. Please verify that RADIUS shared secret on Cisco 5350 and shared secret for that particular IP in

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Alan DeKok
Douglas G. Phillips [EMAIL PROTECTED] wrote: Our LDAP server is using crypted passwords at the moment. RADIUS clients can use PAP. Nothing else. The problem is this: If I pass the radtest client a clear-text password, authentication is successful. If either I pass the client an encrypted

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Julien freeradius
Hello Douglas, The password that you try to resend is not the encrypted password it s an ascii representation of your encrypted password. I assume that you need to activate the chap (or pap with a encryption_scheme = crypt) module to be able to authenticate this request. I don't know about

Re: OpenLDAP / FreeRADIUS / Cisco 5350 problem

2005-05-11 Thread Alexei Chetroi
On Wed, May 11, 2005 at 05:28:27PM -0500, Douglas G. Phillips wrote: Date: Wed, 11 May 2005 17:28:27 -0500 From: Douglas G. Phillips [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: OpenLDAP / FreeRADIUS / Cisco 5350 problem I'm running into an issue here, and I can't