<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7226.0">
<TITLE>Re: Freeradius 2.1.5 and LDAP+EAP-TLS problem.</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Hi,<BR>
<BR>
Maybe im not started this post clearly. So i try open again what i want to do.<BR>
<BR>
I have a computer certificates.<BR>
I also have openldap and that ldap includes my computer accounts.<BR>
<BR>
Now I want to use those certificates to authenticate<BR>
computers and get authorization information inside my ldap. If<BR>
computers dont have account in my ldap it's rejected.<BR>
<BR>
But if i put only ldap in my authorization section radius gives:<BR>
<BR>
"No authenticate method (Auth-Type) configuration found for the<BR>
request: Rejecting the user"<BR>
<BR>
If i put also eap in authorization section, the radius uses eap<BR>
for authorization and give access-accept. Even if user not found<BR>
in ldap.<BR>
<BR>
Br,<BR>
<BR>
Ville<BR>
<BR>
<BR>
>Here is some other logs if i use only ldap for authorize section:<BR>
><BR>
<BR>
>You have butchered the configuration and now you are wondering why it's<BR>
>not working? If you don't know what you are doing - don't do it. If<BR>
>you feel the urge to disable something (disbling unused modules is<BR>
>hardly going to make any impact on preformance) get things working first<BR>
>- than remove things you feel you must one by one. If you remove<BR>
>something vital you will know what it was and will be able to put it<BR>
>back.<BR>
<BR>
>Use default configuration. Configure *only* ldap module. Don't make<BR>
>*any* changes to virtual servers (authorize, authenticate etc.). And it<BR>
>will work.<BR>
<BR>
>Ivan Kalik<BR>
>Kalik Informatika ISP<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>