deactivate ldap.attrmap

[Wm. Josiah Erikson]

What struck me was that you need more attributes, but maybe I missed them:

-cacertfile
-certfile
-keyfile

    -Josiah


Sebastian Heil wrote:
>> Sebastian Heil wrote:
>> ...
>>     
>>> i added the following lines to the ldap-section:
>>>       
>> ...
>>     
>>> rlm_ldap: could not start TLS Can't contact LDAP server
>>>       
>>   Maybe you need to check that there is an LDAP server listening on that
>> port?
>>
>>   Alan DeKok.
>>
>>     
>
> thanks for your fast answer, alan.
> but i am afraid, this is not the solution... the ldap-server is listening and even responding to my ldap-request. i captured the communication between the freeradius and the edirectory with etherreal:
>
> Someone any idea about the "Encrypted Alert" in no. 14?? Thanks.
>
> ---------------------
> No.     Time        Source                Destination           Protocol Info
>       1 0.000000    radtestclient       freeradius          RADIUS   Access-Request(1) (id=74, l=58)
>
>       3 0.000749    freeradius          edirectory          TCP      56302 > ldaps [SYN] Seq=0 Len=0 MSS=1460 TSV=445748676 TSER=0 WS=2
>
>       5 0.012986    edirectory          freeradius          TCP      ldaps > 56302 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 WS=0 TSV=3386151196 TSER=445748676
>
>       6 0.013057    freeradius          edirectory          TCP      56302 > ldaps [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=445748679 TSER=3386151196
>
>       7 0.013639    freeradius          edirectory          SSLv2    Client Hello
>
>       8 0.021887    edirectory          freeradius          TLSv1    Server Hello, 
>
>       9 0.022035    freeradius          edirectory          TCP      56302 > ldaps [ACK] Seq=143 Ack=1449 Win=8736 Len=0 TSV=445748682 TSER=3386151206
>
>      10 0.030390    edirectory          freeradius          TLSv1    Certificate
>
>      11 0.030550    freeradius          edirectory          TCP      56302 > ldaps [ACK] Seq=143 Ack=1946 Win=11632 Len=0 TSV=445748684 TSER=3386151215
>
>      12 0.032263    freeradius          edirectory          TLSv1    Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
>
>      13 0.048990    edirectory          freeradius          TLSv1    Change Cipher Spec, Encrypted Handshake Message
>
>      14 0.049652    freeradius          edirectory          TLSv1    Encrypted Alert
>
>      15 0.049923    freeradius          edirectory          TCP      56302 > ldaps [FIN, ACK] Seq=506 Ack=2005 Win=11632 Len=0 TSV=445748689 TSER=3386151237
>
>      17 0.057441    edirectory          freeradius          TCP      ldaps > 56302 [ACK] Seq=2005 Ack=507 Win=4885 Len=0 TSV=3386151247 TSER=445748689
>
>      18 0.057774    edirectory          freeradius          TLSv1    Encrypted Alert
>
>      19 0.057807    freeradius          edirectory          TCP      56302 > ldaps [RST] Seq=507 Len=0
>
>      20 0.057880    edirectory          freeradius          TCP      ldaps > 56302 [FIN, ACK] Seq=2042 Ack=507 Win=4885 Len=0 TSV=3386151247 TSER=445748689
>
>      21 0.057903    freeradius          edirectory          TCP      56302 > ldaps [RST] Seq=507 Len=0
>
>
>   

-- 
Wm. Josiah Erikson
Computing Support
School of Cognitive Science
Hampshire College
Amherst, MA 01002
(413) 559-6091