<div dir="ltr">I think i have it!<div><br></div><div>I dont think it allows passwords of 8 chars, anyone confirm?</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Mar 5, 2014 at 3:40 PM, Adam Seed <span dir="ltr"><<a href="mailto:adamjseed@gmail.com" target="_blank">adamjseed@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">so as an example, I changed the user adamjseed password to oracle and it works, then changed it to <span style="color:rgb(38,38,38);font-family:arial,sans-serif;font-size:13px;line-height:16px">oracle01 and it doesnt and then to </span><span style="color:rgb(38,38,38);font-family:arial,sans-serif;font-size:13px;line-height:16px">oracle9999 which does... all of which are passwords I have never used before in this setup. </span><div>
<span style="color:rgb(38,38,38);font-family:arial,sans-serif;font-size:13px;line-height:16px"><br></span></div><div><span style="color:rgb(38,38,38);font-family:arial,sans-serif;font-size:13px;line-height:16px">Is there anymore debugging I can enable?</span></div>
</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Mar 5, 2014 at 3:30 PM, Adam Seed <span dir="ltr"><<a href="mailto:adamjseed@gmail.com" target="_blank">adamjseed@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">ok, something very strange is going on!!!!<div><br></div><div>so I have been fiddling around with it getting a mix of accepted and rejected commands and the only thing I have pined it down to is the password...</div>
<div>Some passwords work, some dont im not sure if there is some kind of caching going on. It appears my older passwords i was using during inital testing dont work...</div><div><br></div><div>The password I get back from ldap in the debug is always correct and matches what I have put into the test utility but some get rejected. Any ideas why? </div>
<div><br></div><div><br></div><div><br></div></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Mar 5, 2014 at 1:18 PM, Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Adam Seed wrote:<br>
> I have two users:<br>
><br>
> cn=adamjseed,ou=users,dc=adamjseed,dc=co,dc=uk<br>
> cn=guest,ou=users,dc=adamjseed,dc=co,dc=uk<br>
><br>
> what's important is that the uid=cn in both cases<br>
><br>
> guest works where adamjseed doesnt, if I change the uid (not cn) of<br>
> adamjseed to adamjseed1 it then does work.<br>
><br>
> im guessing its conflicting with the dn?<br>
<br>
</div> I don't see how. FreeRADIUS just queries LDAP for a password.<br>
FreeRADIUs doesn't care about cn, dn, or anything else. LDAP returns<br>
the password, and FreeRADIUS uses it.<br>
<br>
Run the queries manually. Be sure that LDAP is returning the correct<br>
password in both cases.<br>
<div><div><br>
Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>