<html><head><style type='text/css'>p { margin: 0; }</style><style type='text/css'>body { font-family: 'Times New Roman'; font-size: 10pt; color: #000000}</style></head><body> Hi all, <br><br>I'm trying to configure freeradius to authenticate at LDAP Database. I have a poor knowledgement about freeradius and need help :) ...<br>What i need to do to configure correctly my freeradius to authenticate at ldap database? how do i can test it?<br><br><br>today i have the following structure at my ldap tree, OU, and user example:<br><br>#######################################################################<br>dn: dc=peixotoradius,dc=com,dc=br<br>objectClass: top<br>objectClass: dcObject<br>objectClass: organization<br>o: Peixoto<br>dc: peixotoradius<br><br>dn: ou=usuarios,dc=peixotoradius,dc=com,dc=br<br>objectClass: top<br>objectClass: organizationalUnit<br>ou: usuarios<br><br>dn: uid=1015,ou=Usuarios,dc=peixotoradius,dc=com,dc=br<br>uid: 1015<br>cn: 1015<br>userPassword: {crypt}$1$1gLC/3mY$aEsZ9ckW6FvyNkUrWDtv0.<br>objectClass: radiusObjectProfile<br><br>#######################################################################<br><br>and at my /etc/raddb/radiusd.conf i have the following at ldap:<br><br>#######################################################################<br>prefix = /usr<br>exec_prefix = /usr<br>sysconfdir = /etc<br>localstatedir = /var<br>sbindir = /usr/sbin<br>logdir = ${localstatedir}/log/radius<br>raddbdir = ${sysconfdir}/raddb<br>radacctdir = ${logdir}/radacct<br>confdir = ${raddbdir}<br>run_dir = ${localstatedir}/run/radiusd<br>log_file = ${logdir}/radius.log<br>libdir = /usr/lib64<br>pidfile = ${run_dir}/radiusd.pid<br>user = radiusd<br>group = radiusd<br>max_request_time = 30<br>delete_blocked_requests = no<br>cleanup_delay = 5<br>max_requests = 1024 <br>bind_address = *<br>port = 0<br>hostname_lookups = no<br>allow_core_dumps = no<br>regular_expressions = yes<br>extended_expressions = yes<br>log_stripped_names = no<br>log_auth = no<br>log_auth_badpass = no<br>log_auth_goodpass = no<br>usercollide = no<br>lower_user = no<br>lower_pass = no<br>nospace_user = no<br>nospace_pass = no<br>checkrad = ${sbindir}/checkrad<br>security {<br> max_attributes = 200<br> reject_delay = 1<br> status_server = no<br>}<br>proxy_requests = yes<br>$INCLUDE ${confdir}/proxy.conf<br>$INCLUDE ${confdir}/clients.conf<br>snmp = no<br>$INCLUDE ${confdir}/snmp.conf<br>thread pool {<br> start_servers = 5<br> max_servers = 32<br> min_spare_servers = 3<br> max_spare_servers = 10<br> max_requests_per_server = 0<br>}<br>modules {<br><br> pap {<br> encryption_scheme = crypt<br> }<br> chap {<br> authtype = CHAP<br> }<br><br> pam {<br> pam_auth = radiusd<br> }<br><br> unix {<br> cache = no<br> cache_reload = 600<br> shadow = /etc/shadow<br> radwtmp = ${logdir}/radwtmp<br> }<br><br>$INCLUDE ${confdir}/eap.conf<br><br><br> ldap {<br> server = "localhost"<br> identity = "cn=admin,dc=peixotoradius,dc=com,dc=br"<br> password = My_password<br> basedn = "dc=peixotoradius,dc=com,dc=br"<br> filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"<br> base_filter = "(objectclass=radiusprofile)"<br> start_tls = no<br> access_attr = "dialupAccess"<br> dictionary_mapping = ${raddbdir}/ldap.attrmap<br> timeout = 4<br> timelimit = 3<br> net_timeout = 1<br> }<br><br>#######################################################################<br><br><br><br><br><br></body></html>