<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body dir="ltr" bgcolor="#ffffff" text="#000000">
<p style="margin-bottom: 0cm; margin-top: 0pt;">I found that this works
now but ONLY for root, does this get us any closer?</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">ldap {<br>
server = "127.0.0.1"<br>
basedn = "ou=People,dc=istraresearch,dc=com"<br>
filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"<br>
identity = "cn=root,dc=istraresearch,dc=com"<br>
password = xxxxxx</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">
start_tls = no<br>
set_auth_type = yes<br>
auto_header = yes<br>
password_header = "{crypt}"<br>
password_attribute = userPassword<br>
<br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><a class="moz-txt-link-abbreviated" href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a>
wrote:<br>
</p>
<blockquote cite="mid:20080831121216.GA16567@lboro.ac.uk" type="cite">
<pre wrap="">Hi,
lovely. HTML email. please dont
looks like your problem is here:
</pre>
<blockquote type="cite">
<pre wrap="">rlm_ldap: login attempt by "laurence" with password "xxxx"<br>
rlm_ldap: user DN: cn=Laurence Mayer,ou=people,dc=istraresearch,dc=com<br>
rlm_ldap: (re)connect to 172.16.16.5:389, authentication 1<br>
rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow<br>
rlm_ldap: bind as cn=Laurence
Mayer,ou=people,dc=istraresearch,dc=com/xxxx to 172.16.16.5:389<br>
rlm_ldap: waiting for bind result ...<br>
rlm_ldap: Bind failed with invalid credentials<br>
</pre>
</blockquote>
<pre wrap=""><!---->
this is in the authenticate section rather than authorize.
the FR box was unable to bind to your LDAP with the credentials
supplied - is the user 'laurence' able to do such connections
and lookups?
alan
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
--------------------------
Laurence Mayer
Director of Operations & IT
Istra Research Ltd.
Tel: +972545233107
Fax: +972722765124
</pre>
</body>
</html>