<html>
<body>
Freeradius experts,<br>
I am trying to configure freeradius to use openldap as a backend
for authentication, but I can't seem to get the passwords to
authenticate. It seems to have no problem binding and finding the
username (uid). I am using crypt passwords in the ldap userPassword
field:<br>
userPassword::
e1NTSEF9aXBWQklEYnZYSU9RdWl2V0ZtdGR5MWxIWFFsZWVCMjQ=<br><br>
I am not using any radius attributes. I simply want to allow
any uid to authenticate. I get these results:<br>
<br>
rad_recv: Access-Request packet from host 144.89.40.8:59881, id=60,
length=59<br>
User-Name =
"tylertj"<br>
User-Password =
"xxxxxx"<br>
NAS-IP-Address =
255.255.255.255<br>
NAS-Port = 1812<br>
rlm_ldap: - authorize<br>
rlm_ldap: performing user authorization for tylertj<br>
rlm_ldap: ldap_get_conn: Checking Id: 0<br>
rlm_ldap: ldap_get_conn: Got Id: 0<br>
rlm_ldap: (re)connect to ldap.beloit.edu:389, authentication 0<br>
rlm_ldap: setting TLS CACert File to
/etc/openldap/cacerts/cacert.cer<br>
rlm_ldap: starting TLS<br>
rlm_ldap: bind as / to ldap.beloit.edu:389<br>
rlm_ldap: waiting for bind result ...<br>
rlm_ldap: Bind was successful<br>
rlm_ldap: looking for check items in directory...<br>
rlm_ldap: looking for reply items in directory...<br>
rlm_ldap: user tylertj authorized to use remote access<br>
rlm_ldap: ldap_release_conn: Release Id: 0<br>
rad_recv: Access-Request packet from host 144.89.40.8:59881, id=60,
length=59<br>
Sending Access-Reject of id 60 to 144.89.40.8:59881<br><br>
<br>
What might I be doing wrong? I presume that the ldap server
doesn't have to store the passwords in plain text, correct? I
can store them in md5 or SHA1 hash if I want, correct? I did
uncomment:<br><br>
<pre>authenticate
{
Auth-Type LDAP {
ldap
}
</pre> Am I wrong to think this is now a password issue?<br>
Tim<br><br>
<br><br>
<br>
<x-sigsep><p></x-sigsep>
Tim Tyler<br>
Network Engineer - Beloit College<br>
tyler@beloit.edu</body>
</html>