[RADIATOR] trouble with LDAPv2 and simple bind

[Hugh Irvine]

Hello Matt -

My guess would be incorrect shared secrets between the device you are  
testing with and the new installation of Radiator.

regards

Hugh


On 3 Jul 2008, at 05:14, Matt Richard wrote:

> Hello,
>
> I am working on upgrading Radiator from 3.17.1 to 4.2 on my Mac OSX  
> 10.4.11 systems.
>
> In one authentication scenario, a Cisco VPN3000 authenticates  
> against Radiator.  Radiator in turn uses LDAPv2 with  
> ServerChecksPassword to authenticate user passwords.
>
> Server #1 is still running 3.17.1.  It is working just fine.
>
> Server #2 is running 4.2 with patches up to 2008-06-27.  Radiator  
> on this server cannot perform simple binds to authenticate users.   
> The password seems to be munged before it gets sent from Radiator  
> to the LDAP server.
>
> When I do a packet capture on Server #1, looking at the ldap bind,  
> I can see the password in cleartext.
>
> However when I do the same capture on Server #2 the password is  
> longer and it does not match the cleartext of the user password.
>
> Both servers are Mac OSX 10.4.11 and are using the same perl  
> modules including perl-ldap-0.36.  They are also using the same  
> configuration files.
>
> Do you have any thoughts or suggestions?
>
> Thanks!
>
> -Matt
>
> -- 
> Matt Richard '08
> Access and Security Coordinator
> Computing Services
> Franklin & Marshall College
> matt.richard at fandm.edu
> (717) 291-4157
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.