Hi<br><br>Still something is wrong.<br><br>I have the following authorize section:<br> authorize {<br> preprocess<br><br> auth_req_log<br><br> suffix<br><br> sql
<br><br> ldap<br><br> }<br><br>I tried such authenticate sections:<br> authenticate {<br><br> Auth-Type LDAP {<br> ldap<br> }<br><br> Auth-Type Digest {
<br> digest<br> }<br><br> Auth-Type PAP {<br> pap<br> }<br> }<br><br> authenticate {<br><br> ldap<br> }
<br><br>all the time I receive failed authentication,<br>what do I miss here?<br><br>hu Jan 24 09:40:35 2008 : Debug: rlm_ldap: - authorize<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: performing user authorization for tzl
<br>Thu Jan 24 09:40:35 2008 : Debug: expand: (mail=%u@touk.pl) -> (mail=<a href="mailto:tzl@touk.pl">tzl@touk.pl</a>)<br>Thu Jan 24 09:40:35 2008 : Debug: expand: ou=Touki,ou=People,dc=touk,dc=pl -> ou=Touki,ou=People,dc=touk,dc=pl
<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: ldap_get_conn: Checking Id: 0<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: performing search in ou=Touki,ou=People,dc=touk,dc=pl, with filter (mail=
<a href="mailto:tzl@touk.pl">tzl@touk.pl</a>)<br>request 5 done<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: Added User-Password = {MD5}SNNMxdM+Zfvr//0yEp0DuA== in check items<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: looking for check items in directory...
<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: LDAP attribute userPassword as RADIUS attribute Cleartext-Password == "{MD5}SNNMxdM+Zfvr//0yEp0DuA=="<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: looking for reply items in directory...
<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: user tzl authorized to use remote access<br>Thu Jan 24 09:40:35 2008 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0<br>Thu Jan 24 09:40:35 2008 : Debug: modsingle[authorize]: returned from ldap (rlm_ldap) for request 3
<br>Thu Jan 24 09:40:35 2008 : Debug: ++[ldap] returns ok<br>Thu Jan 24 09:40:35 2008 : Debug: auth: type Local<br>Thu Jan 24 09:40:35 2008 : Debug: auth: user supplied User-Password does NOT match local User-Password<br>
Thu Jan 24 09:40:35 2008 : Debug: auth: Failed to validate the user.<br>Thu Jan 24 09:40:35 2008 : Auth: Login incorrect: [tzl/somepass] (from client localhost port 0)<br>Thu Jan 24 09:40:35 2008 : Debug: Found Post-Auth-Type Reject
<br>Thu Jan 24 09:40:35 2008 : Debug: +- entering group REJECT<br>Thu Jan 24 09:40:35 2008 : Debug: modsingle[post-auth]: calling attr_filter.access_reject (rlm_attr_filter) for request 3<br>Thu Jan 24 09:40:35 2008 : Debug: expand: %{User-Name} -> tzl
<br>Thu Jan 24 09:40:35 2008 : Debug: attr_filter: Matched entry DEFAULT at line 11<br>Thu Jan 24 09:40:35 2008 : Debug: modsingle[post-auth]: returned from attr_filter.access_reject (rlm_attr_filter) for request 3<br>
Thu Jan 24 09:40:35 2008 : Debug: ++[attr_filter.access_reject] returns updated<br><br>regards<br>tomasz<br><br><div class="gmail_quote">2008/1/23 <<a href="mailto:tnt@kalik.co.yu">tnt@kalik.co.yu</a>>:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Uncomment ldap in authenticate section.<br><br>Ivan Kalik<br>Kalik Informatika ISP<br><br><br>Dana 23/1/2008, "Tomasz Zieleniewski" <<a href="mailto:tzieleniewski@gmail.com">tzieleniewski@gmail.com</a>> piše:
<br><div><div></div><div class="Wj3C7c"><br>>Hi,<br>><br>>I am using version 2.0.2-pre<br>>I would like to use ldap for freeradius authentication.<br>>I couldn't find anything on web about this topic.<br>
>I have ldap module in the authorize section in my default virtual server.<br>>I see in the debug that ldap module returns ok during authorization<br>>please point me what do I have to do to use ldap olso for authentication
<br>><br>>is it enough to put ldap invocation in authentication section?<br>>below debug from authorization<br>><br>>thanks a lot for any help!<br>>regards<br>>-tomasz<br>><br>>rlm_ldap: waiting for bind result ...
<br>>request 1 done<br>>rlm_ldap: Bind was successful<br>>rlm_ldap: performing search in ou=Touki,ou=People,dc=touk,dc=pl, with filter<br>>(mail=<a href="mailto:tzl@touk.pl">tzl@touk.pl</a>)<br>>request 2 done
<br>>rlm_ldap: Added User-Password = {MD5}SNNMxdM+Zfvr//0yEp0DuA== in check items<br>>rlm_ldap: looking for check items in directory...<br>>rlm_ldap: LDAP attribute userPassword as RADIUS attribute Cleartext-Password
<br>>== "{MD5}SNNMxdM+Zfvr//0yEp0DuA=="<br>>rlm_ldap: looking for reply items in directory...<br>>rlm_ldap: user tzl authorized to use remote access<br>>rlm_ldap: ldap_release_conn: Release Id: 0<br>
>++[ldap] returns ok<br>><br>><br><br></div></div><div><div></div><div class="Wj3C7c">-<br>List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html
</a><br></div></div></blockquote></div><br>