Using RADIUS and eDirectory for wireless authentication

[Nuri Inuki]

I have a SLES 10 SP 1 OES 2 server with OpenRADIUS installed on it. I have
OpenRADIUS working with LDAP authentication for my VPN.

Now I'm trying to get the same OpenRADIUS to work with my new wireless
system so that my users can login using their eDir credentials.

I was told to use MSCHAPV2 as the password won't be sent over the wire/air
and I can't seem to get myself authenticated. When I try, I get this error
in the log:

Thu Oct 9 15:28:04 2008 : Auth: rlm_ldap: Attribute "User-Password" is required for authentication.
Thu Oct 9 15:28:04 2008 : Auth: Login incorrect: [hcyuan] (from client Trapeze port 0)

I've tried added that attribute to my OpenRADIUS configuration
(radiusd.conf) by adding the following lines:

password_attribute = "nspmpassword"
password_radius_attribute = "User-Password"

but it still won't work. LDAP traces shows that it's finding my user and
returning the results.

Any ideas or suggestions on where else to look to troubleshoot this?

Thanks in advance.
Howard

[Nuri Inuki]

WOOHOO! I got it! I GOT IT!

Man, I didn't know the radiusd.conf is so flippin' long~!!! But going
through it, I found out that my methods weren't turned on under
authorization and authentication sections! <sarcasm on> Who'd ever thought
turning on the services would make it work. </sarcasm off>

:)

[msales]

Hay.
I'm reviewing this type of config for my company.
can I review your radius.conf file and see what you made work?
I'm having a hell of a time.

thanks

--
msales
------------------------------------------------------------------------
msales's Profile: http://forums.novell.com/member.php?userid=35487
View this thread: http://forums.novell.com/showthread.php?t=346872