Per
your suggestions from the last email I checked and the:<div class="im"><br>
<br>
Un-comment the "unix" entry from the "authorize" section of<br>
raddb/sites-available/default<br>
<br></div>
Was un-commented and below is the output from trying to authenticate a
user that is a member of the DialupFS group and does not have an
account in /etc/passwd. For some reason it is falling though to PAP
and saying "No authenticate method (Auth-Type) configuration found for
the request:".<br>
<br>
This behavior only started when I tried to implement redundant ldap
servers and in the users file having DEFAULT LDAP Groups for each LDAP
module.<br>
<br>
If I do not use the redundant LDAP servers and just place both LDAP
servers in the LDAP module like this it works correctly:<br>
<br>
server ="<a href="http://server1.somedomain.com/" target="_blank">server1.somedomain.com</a>, <a href="http://server2.somedomain.com/" target="_blank">server2.somedomain.com</a>"<br>
<br>
Thanks for your help<br>
<br>
<br>
<p class="MsoNormal"><br>
rad_recv: Access-Request packet from host 127.0.0.1 port
52514, id=166, length=60<br>
User-Name = "testuser1"</p><div class="im"><br>
User-Password = "testpassword"<br>
NAS-IP-Address = 127.0.0.1<br>
NAS-Port = 0<br>
+- entering group authorize {...}<br>
++[preprocess] returns ok<br>
++[chap] returns noop<br>
++[mschap] returns noop<br></div>
[suffix] No '@' in User-Name = "testuser1", looking up realm NULL<div class="im"><br>
[suffix] No such realm "NULL"<br>
++[suffix] returns noop<br>
[eap] No EAP-Message, not doing EAP<br>
++[eap] returns noop<br></div>
++[unix] returns notfound<div class="im"><br>
[ldap-server1] Entering ldap_groupcmp()<br>
[files] expand: ou=people,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp
-> ou=people,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp<br>
[files] expand:
%{Stripped-User-Name} -> <br>
[files] ... expanding second
conditional<br></div>
[files] expand: %{User-Name}
-> testuser1<br>
[files] expand:
(uid=%{%{Stripped-User-Name}:-<div bgcolor="#ffffff" text="#000000">%{User-Name}}) -> (uid=testuser1)<div class="im"><br>
[ldap-server1] ldap_get_conn: Checking Id: 0<br>
[ldap-server1] ldap_get_conn: Got Id: 0<br>
[ldap-server1] attempting LDAP reconnection<br></div>
[ldap-server1] (re)connect to <a href="http://frank.isos.isu.edu:389/" target="_blank">server1.somedomain.com:389</a>,
authentication
0<br>
[ldap-server1] bind as uid=raduser, ou=people, o=<a href="http://isu.edu/" target="_blank">test</a>,
o=isp/testpassword to <a href="http://frank.isos.isu.edu:389/" target="_blank">server1.somedomain.com:389</a><div class="im"><br>
[ldap-server1] waiting for bind result ...<br>
[ldap-server1] Bind was successful<br></div>
[ldap-server1] performing search in ou=people,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp,
with filter (uid=testuser1)<div class="im"><br>
[ldap-server1] ldap_release_conn: Release Id: 0<br></div>
[files] expand:
(|(&(objectClass=GroupOfNames)(member=%{control:Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{control:Ldap-UserDn})))
->
(|(&(objectClass=GroupOfNames)(member=uid\3dtestuser1\2cou\3dpeople\2co\<a href="http://3disu.edu/" target="_blank">3dtest</a>\2co\3disp))(&(objectClass=GroupOfUniqueNames)(uniquemember=uid\3dtestuser1\2cou\3dpeople\2co\<a href="http://3disu.edu/" target="_blank">3dtest</a>\2co\3disp)))<div class="im">
<br>
[ldap-server1] ldap_get_conn: Checking Id: 0<br>
[ldap-server1] ldap_get_conn: Got Id: 0<br></div>
[ldap-server1] performing search in cn=DialupFS,ou=Groups,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp, with filter
(|(&(objectClass=GroupOfNames)(member=uid\3dtestuser1\2cou\3dpeople\2co\<a href="http://3disu.edu/" target="_blank">3dtest</a>\2co\3disp))(&(objectClass=GroupOfUniqueNames)(uniquemember=uid\3dtestuser1\2cou\3dpeople\2co\<a href="http://3disu.edu/" target="_blank">3dtest</a>\2co\3disp)))<div class="im">
<br>
[ldap-server1] ldap_release_conn: Release Id: 0<br>
[files] users: Matched entry DEFAULT at line 166<br>
++[files] returns ok<br>
++- entering policy redundant {...}<br></div>
[ldap-server1] performing user authorization for testuser1<div class="im"><br>
[ldap-server1] expand: %{Stripped-User-Name} -> <br>
[ldap-server1] ... expanding second conditional<br></div>
[ldap-server1] expand: %{User-Name} -> testuser1<br>
[ldap-server1] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}})
->
(uid=testuser1)<div class="im"><br>
[ldap-server1] expand: ou=people,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp
->
ou=people,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp<br>
[ldap-server1] ldap_get_conn: Checking Id: 0<br>
[ldap-server1] ldap_get_conn: Got Id: 0<br></div>
[ldap-server1] performing search in ou=people,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp,
with filter (uid=testuser1)<div class="im"><br>
[ldap-server1] looking for check items in directory...<br></div><div class="im">
[ldap-server1] looking for reply items in directory...<br>
WARNING: No "known good" password was found in LDAP. Are you
sure that the user is configured correctly?<br></div>
[ldap-server1] user testuser1 authorized to use remote access<br>
[ldap rlm_ldap::ldap_groupcmp: User found in group
cn=DialupFS,ou=Groups,o=<a href="http://isu.edu/" target="_blank">test</a>,o=isp<div class="im"><br>
-server1] ldap_release_conn: Release Id: 0<br>
+++[ldap-server1] returns ok<br>
++- policy redundant returns ok<br>
++[expiration] returns noop<br>
++[logintime] returns noop<br></div>
[pap] WARNING! No "known good" password found for the user.
Authentication may fail because of this.<br>
++[pap] returns noop<br>
<font color="#cc0000">No authenticate method (Auth-Type) configuration
found for the request:</font> Rejecting
the user<div class="im"><br>
Failed to authenticate the user.<br>
Using Post-Auth-Type Reject<br>
+- entering group REJECT {...}<br></div>
[attr_filter.access_reject] expand: %{User-Name} -> testuser1<div class="im"><br>
attr_filter: Matched entry DEFAULT at line 11<br>
++[attr_filter.access_reject] returns updated<br>
Delaying reject of request 0 for 1 seconds<br>
Going to the next request<br>
Waking up in 0.9 seconds.<br>
Sending delayed reject for request 0<br></div>
Sending Access-Reject of id 166 to 127.0.0.1 port 52514<div class="im"><br>
Reply-Message = "FS User
Authorized"<br>
Waking up in 4.9 seconds.<br></div>
Cleaning up request 0 ID 166 with timestamp +74<br>
Ready to process requests.</div><br><br><div class="gmail_quote">On Thu, Aug 12, 2010 at 1:59 AM, Alan Buxey <span dir="ltr"><<a href="mailto:A.L.M.Buxey@lboro.ac.uk">A.L.M.Buxey@lboro.ac.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Hi,<br>
<div class="im">> I apologize for the inconvenience of sending the configuration files. I thought sending more detail would help :-). The below steps you provided still didn't work and ended with the same problem. Again I apologize.<br>
<br>
</div>....radiusd -X ?<br>
<br>
<br>
we cannot help without this information<br>
<font color="#888888"><br>
<br>
alan<br>
</font><div><div></div><div class="h5">-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br>