- Freeradius-Users - lists.freeradius.org

is there any book available for freeradius ??
by ashish edkee 03 Aug '10

03 Aug '10

Hi, I am new to using freeradius and hence pardon my ignorance :) I googled to check if theres any book which explains the deployment of freeradius but no success. Is there any book available or forums and READMEs are the only source ? Thanks, Ashish

3 3

Samba Bug #6563
by Colantuoni, Robert 02 Aug '10

02 Aug '10

Our AD team recently upgraded their servers from Windows 2003 to 2008 and broke the Samba 3.0.34 installation we had been using for ntlm_auth. We couldn't get this version of Samba to join the upgraded servers, so we were forced to look into patching Samba 3.5.4 (latest) to fix the issue where ntlm_auth returns an invalid NT_KEY. I believe this issue has been open for about 2 years and hasn't moved much in the Samba bug list: https://bugzilla.samba.org/show_bug.cgi?id=6563 A committer named Volker Lendecke suggested that the source was SamLogonEx... by using SamLogon instead, you can get around the issue. This seems to stem from the SamLogonEx function using session keys versus credentials... but I'd like to ask a windows/samba expert for a better opinion. I've attached a patch to the bug report above which adds the --force-samlogon option to winbind. If winbind is started without this flag, it operates "normally" and we get an invalid NT_KEY returned. If it's started with the flag, the issue is resolved. We've been running this in production and haven't run into any issues with a few thousand 802.1x users. I hope this helps a few people who have been stuck in Samba purgatory. Rob Colantuoni

2 1

Freeradius as DHCP sending DHCP Offer to interface where default gateway is
by Urazaev Vadim 02 Aug '10

02 Aug '10

Hi All. I`m trying to set up freeradius as dhcp server and everythins seem to be ok, in radiusd -X I can see the DHCP-Discover packets that comes from client and DHCP-Offer that server sending to client. When I tried to find out to which interface server send`s responses I saw that responses server put into interface where dafult gateway is In configuration of dhcp listener there is an option "interface", but when I tried to set it up I see a message Failed binding to interface "ifname": "bind to device" is unsupported My question is: Is there solution for this situation ? Freeradius ver. 2.1.10 from git OS: FreeBSD 7.2-RELEASE-p8

2 3

Bandwidth using report for PPP User
by Peer Kohlstetter 01 Aug '10

01 Aug '10

Hi, We use our freeradius Server to authenticate PPP Users. I need a tool that give me a report about the consumed bandwidth of a user. Is there a tool that create such a report out of the freeradius logs? Is it also possible to create a alarm or start a action (Chaning a port Configuration), if a defined bandwidth is reached? In future we also like to use these information for billing. Thanks and best regards, Peer

2 1

LDAP failover question for Radius
by Kory Wheatley 31 Jul '10

31 Jul '10

Is it acceptable to setup LDAP failover in the modules/ldap file by simply adding a second server in the servers value. Example server = "server1.somedomain.com,server2.somedomain.com" It seems to work in the testing that I have done, but I am not sure that it is the correct way to setup a failover ldap server. This is for RedHat 5.5 FreeRadius 2.1.9 version. -- Kory Wheatley

2 5

# sign in username ??
by Peer Kohlstetter 31 Jul '10

31 Jul '10

Hi, I have a freeradius server running since some days. Everything is working fine for normal users: username(a)domain.de In the proxy.conf I have configured: Realm domain.de { authhost = local accthost = local } In the users file I configure for the username a entry: username Cleartext-Password := "password" ... I now have the problem that I have also users in the following format username#group(a)domain.de I must use this format because of some special settings on the Radius server of my partner. My problem is that my freeradius server is handling the # like the letter for comment. If I add the # sign into my users or proxy.conf file the syntax is not correct any more. Can somebody help me with that problem? thanks and best regards, Peer

2 2

thanks
by Johnny R 30 Jul '10

30 Jul '10

Hi List, Just want to thank U all & the development team for your support. Especially Alan. In fact, finally my infrastructure has been implemented( just following the daily thread): 1/- CP ----- AAA Serv ----- OpenLDAP serv --- MySQL Serv --- SendMail (it was dedicated for 802.11i using open source software) 2/ OpenVPN serv -AAA serv - OpenLDAP serv - MySQL Serv --- SendMail Email, and SMS notifications is sent to admin if someone is trying or already connected ...(Nagios) Thank U all. All The Best. -- ----------------------------------------------------------------- |JJohnny RANDRIAMAMPIONONA | | Phone: +212663682554 | | National School of Applied Sciences | | 1818 TANGIER 90000 | |----------------------------------------------------------------|

1 0

Freeradius AS DHCP + rlm_perl
by Urazaev Vadim 30 Jul '10

30 Jul '10

Hi everybody. FreeRadius ver. 2.1.10 from git My problem is string : ======================= ++[perl] returns reject ======================== from radiusd -X debug The last strings in perl script that executed : &radiusd::radlog(L_ERR, " --- RLM_MODULE_OK ---".RLM_MODULE_OK."----") if $DEBUG; return RLM_MODULE_OK; As you can see from output radiusd -X log message --- RLM_MODULE_OK --- then I`m expected some thing like that ++[perl] returns ok I think maybe it`s because I`m using wrong return code and tried to return 3 , but it didn`t help. Please give me advice. Thanks. radiusd -X output is : FreeRADIUS Version 2.1.10, for host i386-unknown-freebsd7.2, built on Jul 30 2010 at 11:27:44 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radiusd.conf including configuration file /usr/local/etc/raddb/proxy.conf including configuration file /usr/local/etc/raddb/clients.conf including files in directory /usr/local/etc/raddb/modules/ including configuration file /usr/local/etc/raddb/modules/wimax including configuration file /usr/local/etc/raddb/modules/always including configuration file /usr/local/etc/raddb/modules/attr_filter including configuration file /usr/local/etc/raddb/modules/attr_rewrite including configuration file /usr/local/etc/raddb/modules/chap including configuration file /usr/local/etc/raddb/modules/checkval including configuration file /usr/local/etc/raddb/modules/counter including configuration file /usr/local/etc/raddb/modules/cui including configuration file /usr/local/etc/raddb/modules/detail including configuration file /usr/local/etc/raddb/modules/detail.example.com including configuration file /usr/local/etc/raddb/modules/detail.log including configuration file /usr/local/etc/raddb/modules/digest including configuration file /usr/local/etc/raddb/modules/echo including configuration file /usr/local/etc/raddb/modules/etc_group including configuration file /usr/local/etc/raddb/modules/exec including configuration file /usr/local/etc/raddb/modules/expiration including configuration file /usr/local/etc/raddb/modules/expr including configuration file /usr/local/etc/raddb/modules/files including configuration file /usr/local/etc/raddb/modules/inner-eap including configuration file /usr/local/etc/raddb/modules/ippool including configuration file /usr/local/etc/raddb/modules/krb5 including configuration file /usr/local/etc/raddb/modules/ldap including configuration file /usr/local/etc/raddb/modules/linelog including configuration file /usr/local/etc/raddb/modules/logintime including configuration file /usr/local/etc/raddb/modules/mac2ip including configuration file /usr/local/etc/raddb/modules/mschap including configuration file /usr/local/etc/raddb/modules/mac2vlan including configuration file /usr/local/etc/raddb/modules/ntlm_auth including configuration file /usr/local/etc/raddb/modules/otp including configuration file /usr/local/etc/raddb/modules/pam including configuration file /usr/local/etc/raddb/modules/pap including configuration file /usr/local/etc/raddb/modules/passwd including configuration file /usr/local/etc/raddb/modules/perl including configuration file /usr/local/etc/raddb/modules/policy including configuration file /usr/local/etc/raddb/modules/preprocess including configuration file /usr/local/etc/raddb/modules/radutmp including configuration file /usr/local/etc/raddb/modules/realm including configuration file /usr/local/etc/raddb/modules/smbpasswd including configuration file /usr/local/etc/raddb/modules/smsotp including configuration file /usr/local/etc/raddb/modules/sql_log including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /usr/local/etc/raddb/modules/sradutmp including configuration file /usr/local/etc/raddb/modules/unix including configuration file /usr/local/etc/raddb/modules/acct_unique including configuration file /usr/local/etc/raddb/eap.conf including configuration file /usr/local/etc/raddb/policy.conf including files in directory /usr/local/etc/raddb/sites-enabled/ including configuration file /usr/local/etc/raddb/sites-enabled/default including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel including configuration file /usr/local/etc/raddb/sites-enabled/control-socket including configuration file /usr/local/etc/raddb/sites-enabled/dhcp main { user = "freeradius" group = "freeradius" allow_core_dumps = no } including dictionary file /usr/local/etc/raddb/dictionary main { prefix = "/usr/local" localstatedir = "/var" logdir = "/var/log" libdir = "/usr/local/lib/freeradius-2.1.9" radacctdir = "/var/log/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = yes auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/var/log/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/var/log/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } # modules } # server server dhcp { modules { Module: Checking dhcp DHCP-Discover {...} for more modules to load Module: Linked to module rlm_perl Module: Instantiating perl perl { module = "/usr/local/etc/raddb/example.pl" func_authorize = "authorize" func_authenticate = "authenticate" func_accounting = "accounting" func_preacct = "preacct" func_checksimul = "checksimul" func_detach = "detach" func_xlat = "xlat" func_pre_proxy = "pre_proxy" func_post_proxy = "post_proxy" func_post_auth = "post_auth" func_recv_coa = "recv_coa" func_send_coa = "send_coa" } Module: Linked to module rlm_always Module: Instantiating ok always ok { rcode = "ok" simulcount = 0 mpp = no } Module: Checking dhcp DHCP-Request {...} for more modules to load Module: Checking dhcp DHCP-Release {...} for more modules to load Module: Instantiating handled always handled { rcode = "handled" simulcount = 0 mpp = no } Module: Checking dhcp DHCP-Inform {...} for more modules to load Module: Checking dhcp (null) {...} for more modules to load /usr/local/etc/raddb/sites-enabled/dhcp[156]: No name specified for Post-Auth-Type block } # modules } # server server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/var/log/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/var/run/radiusd/radiusd.sock" } } listen { type = "dhcp" ipaddr = 192.168.40.5 port = 67 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on dhcp address 192.168.40.5 port 67 as server dhcp Listening on proxy address * port 1814 Ready to process requests. Received DHCP-Discover of id d52ca059 from 192.168.40.17:68 to 192.168.40.5:67 DHCP-Opcode = Client-Message DHCP-Hardware-Type = Ethernet DHCP-Hardware-Address-Length = 6 DHCP-Hop-Count = 1 DHCP-Transaction-Id = 3576471641 DHCP-Number-of-Seconds = 0 DHCP-Flags = 0 DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 0.0.0.0 DHCP-Server-IP-Address = 0.0.0.0 DHCP-Gateway-IP-Address = 192.168.40.17 DHCP-Client-Hardware-Address = 00:19:db:ee:ce:a6 DHCP-Message-Type = DHCP-Discover DHCP-Requested-IP-Address = 192.168.1.122 DHCP-Hostname = "urazaev-laptop" DHCP-Parameter-Request-List = DHCP-Subnet-Mask DHCP-Parameter-Request-List = DHCP-Broadcast-Address DHCP-Parameter-Request-List = DHCP-Time-Offset DHCP-Parameter-Request-List = DHCP-Router-Address DHCP-Parameter-Request-List = DHCP-Domain-Name DHCP-Parameter-Request-List = DHCP-Domain-Name-Server DHCP-Parameter-Request-List = DHCP-Domain-Search DHCP-Parameter-Request-List = DHCP-Hostname DHCP-Parameter-Request-List = DHCP-NETBIOS-Name-Servers DHCP-Parameter-Request-List = DHCP-NETBIOS DHCP-Parameter-Request-List = DHCP-Interface-MTU-Size DHCP-Parameter-Request-List = DHCP-Classless-Static-Route DHCP-Parameter-Request-List = DHCP-NTP-Servers DHCP-Relay-Circuit-Id = 0x000400010101 DHCP-Relay-Remote-Id = 0x0006001ee5d09d87 server dhcp { Trying sub-section dhcp DHCP-Discover {...} +- entering group DHCP-Discover {...} expand: %{Packet-Dst-IP-Address} -> 192.168.40.5 ++[reply] returns noop rlm_perl: --- START --- rlm_perl: --- Circuit-ID Found: 0x000400010101 rlm_perl: --- Switch: 192.168.40.17, Vlan: 1, Port: 1, UIP: 0.0.0.0, UMAC: 00:19:db:ee:ce:a6 --- rlm_perl: --- DHCP-Packet-Type: DHCP-Discover rlm_perl: --- Searching for possible ips in DB --- rlm_perl: --- Found 1 possible ips in DB rlm_perl: --- Found only one possible IP for this port in DB --- rlm_perl: --- IP: 10.128.0.244 MASK: 255.255.255.0 GW: 10.128.0.1 --- rlm_perl: --- RAD_REPLY Formed. --- rlm_perl: --- RLM_MODULE_OK ---2---- rlm_perl: Added pair DHCP-Your-IP-Address = 0.0.0.0 rlm_perl: Added pair DHCP-Relay-Circuit-Id = 0x000400010101 rlm_perl: Added pair DHCP-Message-Type = DHCP-Discover rlm_perl: Added pair DHCP-Hop-Count = 1 rlm_perl: Added pair DHCP-Relay-Remote-Id = 0x0006001ee5d09d87 rlm_perl: Added pair DHCP-Number-of-Seconds = 0 rlm_perl: Added pair DHCP-Client-IP-Address = 0.0.0.0 rlm_perl: Added pair DHCP-Gateway-IP-Address = 192.168.40.17 rlm_perl: Added pair DHCP-Hardware-Type = Ethernet rlm_perl: Added pair DHCP-Flags = 0 rlm_perl: Added pair DHCP-Hardware-Address-Length = 6 rlm_perl: Added pair DHCP-Hostname = urazaev-laptop rlm_perl: Added pair DHCP-Opcode = Client-Message rlm_perl: Added pair DHCP-Transaction-Id = 3576471641 rlm_perl: Added pair DHCP-Client-Hardware-Address = 00:19:db:ee:ce:a6 rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Subnet-Mask rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Broadcast-Address rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Time-Offset rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Router-Address rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Domain-Name rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Domain-Name-Server rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Domain-Search rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Hostname rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-NETBIOS-Name-Servers rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-NETBIOS rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Interface-MTU-Size rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-Classless-Static-Route rlm_perl: Added pair DHCP-Parameter-Request-List = DHCP-NTP-Servers rlm_perl: Added pair DHCP-Server-IP-Address = 0.0.0.0 rlm_perl: Added pair DHCP-Requested-IP-Address = 192.168.1.122 rlm_perl: Added pair DHCP-Your-IP-Address = 10.128.0.244 rlm_perl: Added pair DHCP-DHCP-Server-Identifier = 192.168.40.5 rlm_perl: Added pair DHCP-Subnet-Mask = 255.255.255.0 rlm_perl: Added pair DHCP-Domain-Name-Server = 195.64.148.2 rlm_perl: Added pair DHCP-Server-IP-Address = 192.168.40.5 rlm_perl: Added pair DHCP-IP-Address-Lease-Time = 120 rlm_perl: Added pair DHCP-Router-Address = 10.128.0.1 ++[perl] returns reject } # server dhcp Finished request 0. Cleaning up request 0 ID -718495655 with timestamp +2 Going to the next request Ready to process requests.

2 2

unlang and 1st of 4 ldap source fail
by Gary Prosser 30 Jul '10

30 Jul '10

Hi I am using FreeRADIUS Version 2.0.4 On failure of the first of 4 ldap sources the freeradius server does not continue to the next source but reports 'failed'. In radiusd.conf modules I have defined 4 ldap items ldap ldap1 { server = "192.168.4.250" identity = "cn=LDAPBIND,cn=Users,dc=public,dc=trinity-bris,dc=ac,dc=uk" password = * basedn = "OU=Students,DC=PUBLIC,DC=trinity-bris,DC=ac,DC=uk" filter = "(samAccountName= %{%{Stripped-User-Name}:-%{User-Name}})" access_attr = "samAccountName" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 edir_account_policy_check=no timeout = 4 timelimit = 3 net_timeout = 3 } ldap ldap2 { [relevant config] } ldap ldap3 { [relevant config] } ldap ldap4{ [relevant config] } in authorise I have authorize { preprocess chap mschap suffix ldap1 if(notfound || fail){ ldap3 if(notfound || fail){ ldap2 if(notfound || fail){ ldap4 } } } files pap } and in authenticate I have authenticate { ldap1 ldap2 ldap3 ldap4 chap } My ldap1 source is down yet server does not continue to next, ldap3 etc but simply reports failed. Prior to ldap source ldap1 going offline all worked as expected ie finding valid logins in ldap3 or ldap2 or ldap4 Is my unlang incorrect ? Thanks, Gary - IT Manager Trinity College, Bristol (http://www.trinity-bris.ac.uk) To ensure you receive email from Trinity College into your inbox, please add @trinity-bris.ac.uk to your email safe list (also known as whitelist).

3 4

Re: Freeradius-Users Digest, Vol 63, Issue 108
by Gilbert Lo 30 Jul '10

30 Jul '10

Thank you for your message. I am away until Aug 9. I will respond to your message on my return . For urgent matters, please contact helpdesk(a)stgeorges.bc.ca . Cheers, Gilbert Lo

1 0