<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body dir="ltr" bgcolor="#ffffff" text="#000000">
<p style="margin-bottom: 0cm; margin-top: 0pt;">Hi Alan,</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">Sorry for the html. I
thought I had disabled it.</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">Yes user laurence can
search ldap successfully.</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">This search was done
with user laurence<br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">-bash-3.2$ ldapsearch
-x -b 'uid=laurence, ou=People,dc=istraresearch,dc=com'<br>
# extended LDIF<br>
#<br>
# LDAPv3<br>
# base <uid=laurence, ou=People,dc=istraresearch,dc=com> with
scope subtree<br>
# filter: (objectclass=*)<br>
# requesting: ALL<br>
#<br>
<br>
# laurence, People, istraresearch.com<br>
dn: uid=laurence,ou=People,dc=istraresearch,dc=com<br>
uid: laurence<br>
cn: laurence<br>
objectClass: account<br>
objectClass: posixAccount<br>
objectClass: top<br>
objectClass: shadowAccount<br>
userPassword:: e2NyeXB0fSQxJFZWFhRzZCUzE=<br>
shadowLastChange: 14064<br>
shadowMax: 99999<br>
shadowWarning: 7<br>
loginShell: /bin/bash<br>
uidNumber: 506<br>
gidNumber: 506<br>
homeDirectory: /home/laurence<br>
<br>
# search result<br>
search: 2<br>
result: 0 Success<br>
<br>
# numResponses: 2<br>
# numEntries: 1<br>
<br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">Thanks</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;">Laurence<br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><br>
</p>
<p style="margin-bottom: 0cm; margin-top: 0pt;"><a class="moz-txt-link-abbreviated" href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a>
wrote:<br>
</p>
<blockquote cite="mid:20080831121216.GA16567@lboro.ac.uk" type="cite">
<pre wrap="">Hi,
lovely. HTML email. please dont
looks like your problem is here:
</pre>
<blockquote type="cite">
<pre wrap="">rlm_ldap: login attempt by "laurence" with password "xxxx"<br>
rlm_ldap: user DN: cn=Laurence Mayer,ou=people,dc=istraresearch,dc=com<br>
rlm_ldap: (re)connect to 172.16.16.5:389, authentication 1<br>
rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow<br>
rlm_ldap: bind as cn=Laurence
Mayer,ou=people,dc=istraresearch,dc=com/xxxx to 172.16.16.5:389<br>
rlm_ldap: waiting for bind result ...<br>
rlm_ldap: Bind failed with invalid credentials<br>
</pre>
</blockquote>
<pre wrap=""><!---->
this is in the authenticate section rather than authorize.
the FR box was unable to bind to your LDAP with the credentials
supplied - is the user 'laurence' able to do such connections
and lookups?
alan
-
List info/subscribe/unsubscribe? See <a class="moz-txt-link-freetext" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a>
</pre>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
--------------------------
Laurence Mayer
Director of Operations & IT
Istra Research Ltd.
Tel: +972545233107
Fax: +972722765124
</pre>
</body>
</html>