Re: possible to use webPassword or mailPassword for auth ?

[Andreas Stollar <andreas@speakeasy.net>]

Right, that is sort of a given is it not? The pppPassword attribute
contains a crypted string like this:
pppPassword: {crypt}$1$EYKv9Bek$7L9MLtzy9f3G2.70GDUc1/

I set up Radiator radius to map the radius PasswordAttr to the ldap
pppPassword attribute instead on the ldap userPassword attribute. I have
tested the radius server extensively, it works very well, and is able to
use the pppPassword attribute for authentication. It definitely won't let
me dial in with an incorrect password, but the correct password works like
a charm.

Andreas

On Fri, 10 Aug 2001, Michael Ströder wrote:

> Date: Fri, 10 Aug 2001 17:06:22 +0200
> From: Michael Ströder <michael@stroeder.com>
> To: Andreas Stollar <andreas@speakeasy.net>
> Cc: "'openldap-software@OpenLDAP.org'" <openldap-software@OpenLDAP.org>
> Subject: Re: possible to use webPassword or mailPassword for auth ?
>
> Andreas Stollar wrote:
> >
> > We created a new attribute called pppPassword.
>
> Note that this way has some security implications. You have to at
> least allow the authentication process to compare the password.
>
> Ciao, Michael.
>