<div class="gmail_quote"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Wayne Van der Merwe wrote:<br>
> I have FreeRADIUS 2.1.1 setup on SUS server 10.1<br>
><br>
> We are wanting to do a LDAP connection to Novell edirectory server for<br>
> our users.<br>
><br>
> From the debug out put the LDAP session binded corectly<br>
> The searched part failed.<br>
><br>
> I would like to know did the radius server send out the loging name as<br>
> uid=53986067? as indicated below.<br>
> rlm_ldap: performing search in<br>
> ou=USERS,ou=ELS-FRERE,ou=AMATOLA,ou=HLT,o=EC, with filter (uid=53986067)<br>
<br>
Because:<br>
<br>
1) the Access-Request contains "53986067" as the User-Name<br>
2) the ldap module is configured to use "uid=%{User-Name}"<br>
<br>
This is all shown in the debug output.<br>
<br>
> When i do a ldapsearch -h 10.219.176.30 -b<br>
> ou=USERS,ou=ELS-FRERE,ou=AMATOLA,ou=HLT,o=EC -x "uid=53986067"<br>
> I get no results.<br>
><br>
> If i use -x "cn=53986067" the user is found.<br>
<br>
So... edit the ldap module configuration to use "cn=%{User-Name}"<br>
instead of "uid". There's a reason the configuration files are text:<br>
they can be edited.<br>
<br>
Alan DeKok.<br>
<br>
<br>
<br>
------------------------------<br>
<br></blockquote></div>Noted<br>After the change i have this problem in the debug output<br><br>rlm_ldap: waiting for bind result ...<br>rlm_ldap: Bind was successful<br>rlm_ldap: performing search in ou=USERS,ou=ELS-FRERE,ou=AMATOLA,ou=HLT,o=EC, with filter (cn=53986067)<br>
[ldap] No default NMAS login sequence<br>[ldap] looking for check items in directory...<br>[ldap] looking for reply items in directory...<br>WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?<br>
[ldap] user 53986067 authorized to use remote access<br>rlm_ldap: ldap_release_conn: Release Id: 0<br><br>The "[ldap] No default NMAS login sequence how do i sort this out?"<br>and <br>"WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly?"<br>
is to do with a clear text password that radius needs to read from the LDAP server as per other posts. how or where do i sort this out. <br>Is this also related to the NMAS login sequence?<br>