RE: PEAP LDAP password problem

2008-02-26 Thread Alexey Eronko
Eronko Sent: Tuesday, February 26, 2008 5:30 PM To: FreeRadius users mailing list Subject: RE: PEAP LDAP password problem Thank you for detailed explanation. I'll try to reenter all users password in NTpassword attribute. Could someone give me link to appoporate openldap guide. Where I can

RE: PEAP LDAP password problem

2008-02-26 Thread Alexey Eronko
EMAIL PROTECTED] g] On Behalf Of Alan DeKok Sent: Tuesday, February 26, 2008 2:10 PM To: FreeRadius users mailing list Subject: Re: PEAP LDAP password problem Alexey Eronko wrote: > I have huge problem that I need to ask 200 users to reenter there passwords > in OpenLDAP. Then I guess you'

Re: PEAP LDAP password problem

2008-02-26 Thread Alan DeKok
Alexey Eronko wrote: > I have huge problem that I need to ask 200 users to reenter there passwords > in OpenLDAP. Then I guess you're not going to deploy PEAP. > Another problem is that I'm not sure that I can store two kind of password > simultaneously(nt and crypt). Yes, you can. They can

RE: PEAP LDAP password problem

2008-02-26 Thread Alexey Eronko
Alexey Eronko wrote: > Thanks for you replay. > > According with this link : > http://deployingradius.com/documents/protocols/compatibility.html. > > I need EAP-GTC. Huh? How did you conclude that? [AE:] Becasuse of GTC support Crypt password. I have huge problem that I need to ask 200 user

Re: PEAP LDAP password problem

2008-02-26 Thread Alan DeKok
Alexey Eronko wrote: > Thanks for you replay. > > According with this link : > http://deployingradius.com/documents/protocols/compatibility.html. > > I need EAP-GTC. Huh? How did you conclude that? All you need to do is to put the NT hash into LDAP, as you said. You do NOT need to use EAP

Re: PEAP LDAP password problem

2008-02-26 Thread Phil Mayers
Alexey Eronko wrote: Thanks for you replay. According with this link : http://deployingradius.com/documents/protocols/compatibility.html. I need EAP-GTC. I'm not sure that my Proxim AP700 support this kind of EAP. APs should not care. All EAP types (that generate crypto keys) should work Is

RE: PEAP LDAP password problem

2008-02-26 Thread Alexey Eronko
Sent: Tuesday, February 26, 2008 12:19 PM To: FreeRadius users mailing list Subject: Re: PEAP LDAP password problem Alexey Eronko wrote: > Hi! > I have several services who use LDAP (openldap). For example Linux(via > pam),apache,svn. > On my ldap server passwords stored in encrypted h

Re: PEAP LDAP password problem

2008-02-26 Thread Alan DeKok
Alexey Eronko wrote: > Hi! > I have several services who use LDAP (openldap). For example Linux(via > pam),apache,svn. > On my ldap server passwords stored in encrypted hash. > Do I right understand you that I need add another field(nt hash) for radius > authorization? Yes: http://deployingradi

RE: PEAP LDAP password problem

2008-02-26 Thread Alexey Eronko
Hi! I have several services who use LDAP (openldap). For example Linux(via pam),apache,svn. On my ldap server passwords stored in encrypted hash. Do I right understand you that I need add another field(nt hash) for radius authorization? I don't want to store clear text password in my LDAP. Anothe

Re: PEAP LDAP password problem

2008-02-26 Thread Alan DeKok
Alexey Eronko wrote: > I have usual problem for persons who wants to setup LDAP+PEAP integration. > I want to setup WIFI with PEAP auth. via FreeRadius. > The problem is that I can login with ldap login thought radtest testuser > 123456 localhost 10 secret. Which probably does LDAP bind. That'