<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v = "urn:schemas-microsoft-com:vml" xmlns:o = "urn:schemas-microsoft-com:office:office" xmlns:w = "urn:schemas-microsoft-com:office:word" xmlns:st1 = "urn:schemas-microsoft-com:office:smarttags"><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.18975">
<STYLE>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</STYLE>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="place"></o:SmartTagType>
<STYLE>
st1\:*{behavior:url(#default#ieooui) }
</STYLE>
<STYLE>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";
mso-believe-normal-left:yes;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
span.EmailStyle18
{mso-style-type:personal-reply;
color:black;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</STYLE>
</HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Tahoma" lang=EN-US link=blue vLink=blue>
<DIV>thanks, I'll try that.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>robert</DIV>
<DIV> </DIV>
<DIV>
<DIV>Robert Koskey,</DIV>
<DIV>Systems and Network Manager</DIV>
<DIV> </DIV>
<DIV>Rocky View Schools</DIV>
<DIV>Telephone: 403-945-4080<BR>Cell: 403-988-4640</DIV><BR><BR>>>> Gary Gatten <Ggatten@waddell.com> 12/10/2010 7:59 AM >>><BR></DIV>
<DIV><FONT color=navy size=2 face=Arial>Look in the configure script, or maybe try ./configure --help. Else the config options are probably listed in one of the readme's. </FONT></DIV><BR>
<DIV>
<HR tabIndex=-1 align=center SIZE=2 width="100%">
<FONT size=2 face=Tahoma><B>From</B>: freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org <freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org> <BR><B>To</B>: 'FreeRadius users mailing list' <freeradius-users@lists.freeradius.org> <BR><B>Sent</B>: Fri Dec 10 08:54:18 2010<BR><B>Subject</B>: RE: ldap - edirectory authentication <BR></FONT><BR></DIV>
<DIV>Not too sure. We've looked thru all the conf's. Where would I look?</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>robert</DIV>
<DIV> </DIV>
<DIV>
<DIV>Robert Koskey,</DIV>
<DIV>Systems and Network Manager</DIV>
<DIV> </DIV>
<DIV>Rocky View Schools</DIV>
<DIV>Telephone: 403-945-4080<BR>Cell: 403-988-4640</DIV><BR><BR>>>> Gary Gatten <Ggatten@waddell.com> 12/10/2010 7:37 AM >>><BR></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT color=black size=3 face="Times New Roman"><SPAN style="COLOR: black; FONT-SIZE: 12pt">It’s a configure flag no?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT color=black size=3 face="Times New Roman"><SPAN style="COLOR: black; FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<DIV style="TEXT-ALIGN: center; MARGIN: 0in 0in 0pt" class=MsoNormal align=center><FONT size=3 face="Times New Roman"><SPAN style="FONT-SIZE: 12pt">
<HR tabIndex=-1 align=center SIZE=2 width="100%">
</SPAN></FONT></DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><B><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt; FONT-WEIGHT: bold">From:</SPAN></FONT></B><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"> freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org] <B><SPAN style="FONT-WEIGHT: bold">On Behalf Of </SPAN></B>Robert Koskey<BR><B><SPAN style="FONT-WEIGHT: bold">Sent:</SPAN></B> Friday, December 10, 2010 8:30 AM<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> FreeRadius users mailing list<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> Re: ldap - edirectory authentication</SPAN></FONT><o:p></o:p></P></DIV>
<P class=MsoNormal><FONT size=3 face="Times New Roman"><SPAN style="FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">We really aren't too sure about that. We just installed it from the media that OpenSuse 11.3 came with. We have noticed the bit about the --with-edir but even when we downloaded and compiled the FR 2.1.10 (latest) we didn't see how we could install with that option. If you know, please shed some light.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">thanks,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Robert Koskey,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Systems and Network Manager<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Rocky View Schools<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Telephone: 403-945-4080<BR>Cell: 403-988-4640<o:p></o:p></SPAN></FONT></P></DIV>
<P style="MARGIN-BOTTOM: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; mso-margin-top-alt: 0in" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"><BR><BR>>>> Peter Lambrechtsen <plambrechtsen@gmail.com> 12/9/2010 3:48 PM >>><BR>You may need to comment out the logintime and pap sections, since this isn't a pap authentication.<BR><BR>It seems like the password is being correctly extracted out of eDirectory using Universal Password, but are you sure that's properly configured in the build version of FreeRadius?<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">On Fri, Dec 10, 2010 at 11:40 AM, Robert Koskey <<A href="mailto:rkoskey@rockyview.ab.ca">rkoskey@rockyview.ab.ca</A>> wrote:<o:p></o:p></SPAN></FONT></P>
<DIV style="MARGIN: 3pt 3pt 0.75pt">
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Can anyone help? We are trying to do a ldap authentication from novell's edirectory to an <st1:place w:st="on">Aruba</st1:place> controller for wireless access. These are the error's we are getting.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">It used to work perfectly but the original radius server blew up. We installed a new one with the same configuration and it doesn't work. The problem areas are bold'ed.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">The problem seems to occur after the ldap authentication. I don't think we are entirely clear about the order in which the whole process happens. <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Any help or suggestions would be greatly appreciated.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">The set up is:<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">OpenSuse 11.0<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">FreeRadius 2.0.5<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">We have tried:<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">OpenSuse 11.3<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">FreeRadius 2.1.9 (same result)<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">rad_recv: Access-Request packet from host 10.215.10.100 port 34806, id=218, length=199<BR>User-Name = "jordanhkaltenbruner"<BR>NAS-IP-Address = 10.200.8.30<BR>NAS-Port = 2<BR>NAS-Identifier = "10.215.10.99"<BR>NAS-Port-Type = Wireless-802.11<BR>Calling-Station-Id = "78CA39B5D3E5"<BR>Called-Station-Id = "000B8661AC58"<BR>Service-Type = Login-User<BR>Framed-MTU = 1100<BR>EAP-Message = 0x02010018016a6f7264616e686b616c74656e6272756e6572<BR>Aruba-Essid-Name = "SCHS-Student"<BR>Aruba-Location-Id = "SpringbankW2-9"<BR>Message-Authenticator = 0x4542e9b98b5978ca1ca52b7617910620<BR>+- entering group authorize<BR>++[preprocess] returns ok<BR>++[chap] returns noop<BR>++[mschap] returns noop<BR>rlm_realm: No <A href="mailto:%27@%27" target=_blank>'@'</A> in User-Name = "jordanhkaltenbruner", looking up realm NULL<BR>rlm_realm: No such realm "NULL"<BR>++[suffix] returns noop<BR>rlm_ldap: - authorize<BR>rlm_ldap: performing user authorization for jordanhkaltenbruner<BR>WARNING: Deprecated conditional expansion ":-". See "man unlang" for details<BR>expand: (uid=%{Stripped-User-Name:-%{User-Name}}) -> (uid=jordanhkaltenbruner)<BR>expand: ou=springhigh_lab,o=springhigh -> ou=springhigh_lab,o=springhigh<BR>rlm_ldap: ldap_get_conn: Checking Id: 0<BR>rlm_ldap: ldap_get_conn: Got Id: 0<BR>rlm_ldap: attempting LDAP reconnection<BR>rlm_ldap: (re)connect to <A href="http://10.215.0.3:636" target=_blank>10.215.0.3:636</A>, authentication 0<BR>rlm_ldap: setting TLS mode to 1<BR>rlm_ldap: bind as cn=admin,o=springhigh/???? to <A href="http://10.215.0.3:636" target=_blank>10.215.0.3:636</A><BR>rlm_ldap: waiting for bind result ...<BR>rlm_ldap: Bind was successful<BR>rlm_ldap: performing search in ou=springhigh_lab,o=springhigh, with filter (uid=jordanhkaltenbruner)<BR>rlm_ldap: Added the eDirectory password 51601222 in check items as Cleartext-Password<BR>rlm_ldap: No default NMAS login sequence<BR>rlm_ldap: looking for check items in directory...<BR>rlm_ldap: looking for reply items in directory...<BR>rlm_ldap: user jordanhkaltenbruner authorized to use remote access<BR>rlm_ldap: ldap_release_conn: Release Id: 0<BR>++[ldap] returns ok<BR><B><SPAN style="FONT-WEIGHT: bold">++[expiration] returns noop<BR>++[logintime] returns noop<BR>rlm_pap: No clear-text password in the request. Not performing PAP.<BR>++[pap] returns noop<BR>auth: type Local<BR>auth: No User-Password or CHAP-Password attribute in the request<BR>auth: Failed to validate the user.<BR></SPAN></B>Found Post-Auth-Type Reject<BR>+- entering group REJECT<BR>expand: %{User-Name} -> jordanhkaltenbruner<BR>attr_filter: Matched entry DEFAULT at line 11<BR>++[attr_filter.access_reject] returns updated<BR>Sending Access-Reject of id 218 to 10.215.10.100 port 34806<BR>Finished request 0.<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Robert Koskey,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Systems and Network Manager<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Rocky View Schools<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Telephone: 403-945-4080<BR>Cell: 403-988-4640<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Robert Koskey,<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Systems and Network Manager<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Rocky View Schools<o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">Telephone: 403-945-4080<BR>Cell: 403-988-4640<o:p></o:p></SPAN></FONT></P></DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"><o:p> </o:p></SPAN></FONT></P>
<P><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">_____________________________________________________________________________________ <o:p></o:p></SPAN></FONT></P>
<P><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">This communication is intended for the use of the recipient to which it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communication received in error, or subsequent reply, should be deleted or destroyed. <o:p></o:p></SPAN></FONT></P></DIV>
<P style="MARGIN: 0in 0in 0pt" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"><BR>-<BR>List info/subscribe/unsubscribe? See <A href="http://www.freeradius.org/list/users.html" target=_blank>http://www.freeradius.org/list/users.html</A><o:p></o:p></SPAN></FONT></P></DIV>
<P style="MARGIN-BOTTOM: 12pt; MARGIN-LEFT: 0in; MARGIN-RIGHT: 0in; mso-margin-top-alt: 0in" class=MsoNormal><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt"><o:p> </o:p></SPAN></FONT></P>
<P><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">_____________________________________________________________________________________ <o:p></o:p></SPAN></FONT></P>
<P><FONT size=2 face=Tahoma><SPAN style="FONT-FAMILY: Tahoma; FONT-SIZE: 10pt">This communication is intended for the use of the recipient to which it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communication received in error, or subsequent reply, should be deleted or destroyed. <o:p></o:p></SPAN></FONT></P></DIV><FONT size=1>
<DIV style="BORDER-BOTTOM: windowtext 2.25pt double; BORDER-LEFT: medium none; PADDING-BOTTOM: 1pt; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in"></DIV>"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </FONT><BR>
<P>_____________________________________________________________________________________ </P>
<P>This communication is intended for the use of the recipient to which it is addressed, and may contain confidential, personal, and or privileged information. Please contact us immediately if you are not the intended recipient of this communication, and do not copy, distribute, or take action relying on it. Any communication received in error, or subsequent reply, should be deleted or destroyed. </P><FONT size=1>
<DIV style="BORDER-BOTTOM: windowtext 2.25pt double; BORDER-LEFT: medium none; PADDING-BOTTOM: 1pt; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in"></DIV>"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </FONT><BR>
<p>
_____________________________________________________________________________________
</p>
<p>
This communication is intended for the use of the recipient to which it
is addressed, and may contain confidential, personal, and or privileged
information. Please contact us immediately if you are not the intended
recipient of this communication, and do not copy, distribute, or take
action relying on it. Any communication received in error, or subsequent
reply, should be deleted or destroyed.
</p>
</BODY></HTML>