- Freeradius-Users - lists.freeradius.org

Freeradius and users with ADS domain
by Marxy 17 Jan '07

17 Jan '07

I has this configuration [poptop pptpd & pppd & radiusclient]----[freeradius+mysql]-----[Microsoft IAS]----[ADS] pptpd is 1.3.3 pppd is 2.4.4 freeradius is 1.1.3 radiusclient is 0.3.2 mysql is 5.0.27 Clients go from internet, make auth via MS IAS/ADS, but accounting does freeradius writing logs to file and to mysql DB. All seems good. Clients go OK. Auth and accounting seems OK too. But some clients use domain with their user names. For ex: user smith sends ORG\Smith as username. Its accounting string appears like this in /var/log/radius/radacct/NAS1/detail-20070117 file ---------------------------------- User-Name = "ORG\\Smith" ----------------------------------- But its accounting's UserName in the mysql DB (radacct table) appears as ----------------------------------- ORG=5C=5C=5C=5CSmith ----------------------------------- What's going wrong? It would be like an ideal situation when I could strip the domain from user's names. I has the only domain in the net. But in the common case I think it could be right to write the EXACT usename as it sent by user. I mean if the user authorizes as ORG\Smith it seems like accounting should be done AS User-Name = "ORG\Smith" in log file and it should be UserName='ORG\Smith' in the nysql database -- View this message in context: http://www.nabble.com/Freeradius-and-users-with-ADS-domain-tf3027388.html#a… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

setting user profile depending on realms?
by Markus Krause 17 Jan '07

17 Jan '07

Hi list! We have an internal LAN with several VLANs, each corresponding the the unix group of the users. This VLAN information is stored in OpenLDAP (via radiusprofiledn), and that works :-) But we want to give our users the possibility to get into a special VLAN, in particular one which is called "Internetcafe" (in which the can use "special services"). I thought of doing this by adding a realm to the username, so the users can either use "username" or "username@ic" and gets the appropriate VLAN. To do this i added the following line in /etc/raddb/users: DEFAULT User-Name =~ "@ic$", User-Profile := "cn=InternetCafe,ou=VLAN,o=Testnet" But this works only if i do not have a radiusprofiledn attribute in the users entry in OpenLDAP, otherwise it works. Is there a way to override the userprofile given back by the freeradius if the user adds a "@ic" (or whatever realm) ? Or is there even a better way to achieve this goal and i am thinking in a completly wrong direction? Thanks in advance for any hints! Regards Markus -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 ---------------------------------------------------------------------- This message was sent using https://webmail2.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

1 0

Re: building 1.4 (CentOS 4.4) MYSQL 99% home [unclas]
by Long 17 Jan '07

17 Jan '07

>Are all the log files in /var/log/radius writable by the user you are running >radiusd as? > Configured to run as nobody:nobody. chmod -R nodody:nobody /usr/local/var/log/radiusd allows me to run it as nobody now, but if I do "radiusd > radlog &" the radlog still only contains the first line "Starting - reading configuration files..." - although it does run and I can ps the process. Should I change permissions on all the other (/usr/local/etc/raddb..., /usr/local/share/freeradius...) files? I would very much appreciate a dir-by-dir listing of someone else's permissions, including the relevant libraries. Is there anything wrong with my "radiusd > radlog &" (as root), considering I am including the "&" while the process drops to background anyway? And does the user need to have a real shell, as nobody is nologin? -Andrew

1 0

RE: building 1.4 (CentOS 4.4) MYSQL 99% home [unclas]
by Long 17 Jan '07

17 Jan '07

BTW - I have it configued in radiusd.conf to run under nobody:nobody. Andrew

3 2

building 1.4 (CentOS 4.4) MYSQL
by Andrew Long 17 Jan '07

17 Jan '07

I have the server running and can now authenticate remotely and records are correctly added to radacct. Part of our setup requires the rlm_sqlcounter module. I inserted the $INCLUDE line and the output tells me it is loading. However, I read in rlm_sqlcounter doc that you must ./configure --with-experimental-modules. I did not do this. Is it necessary to re-compile? (I DO see our daypasscounter queries loading, with the session-timout we need, being run in the debug). I think (off the top of my head) it is no longer necessary to compile with experimental modules in order to use rlm_sqlcounter... Will I be able to test it via ntradping assuming I create entries for a test group in usergroup/radgroupreply (I need to see the full reply with all sent strings). BTW- I am a bit fuzzy on rlm_sql_log. As I am getting accounting without it, can someone briefly elaborate on it's function. IE, if accounting works in sql without it, what other function does it provide? (Yes, I read the doc and am still fuzzy). Andrew

5 7

RE: building 1.4 (CentOS 4.4) MYSQL 99% home [unclas]
by Long 17 Jan '07

17 Jan '07

>Probably a file or directory has the wrong permissions. When you run in >debug with -X the server runs as root. When you run for real it changes >to user radiusd or whatever you set up. > >Try strace -e open,stat -f radiusd and look for EPERM lines. > >Frank ------------------ Here is the output... No EPERM but it does have that one line, "Starting - reading configuration..." which as far as the server gets when starting normally. [root@auth2 ~]# strace -e open,stat -f radiusd open("/usr/local/lib/tls/i686/libnsl.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/local/lib/tls/libnsl.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/local/lib/i686/libnsl.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/local/lib/libnsl.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 open("/lib/libnsl.so.1", O_RDONLY) = 3 open("/usr/local/lib/libresolv.so.2", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/libresolv.so.2", O_RDONLY) = 3 open("/usr/local/lib/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/tls/libpthread.so.0", O_RDONLY) = 3 open("/usr/local/lib/libradius-1.1.4.so", O_RDONLY) = 3 open("/usr/local/lib/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/libcrypt.so.1", O_RDONLY) = 3 open("/usr/local/lib/libltdl.so.3", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/lib/libltdl.so.3", O_RDONLY) = 3 open("/usr/local/lib/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/libdl.so.2", O_RDONLY) = 3 open("/usr/local/lib/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib/tls/libc.so.6", O_RDONLY) = 3 open("/etc/localtime", O_RDONLY) = 3 Tue Jan 16 21:39:28 2007 : Info: Starting - reading configuration files ... open("/usr/local/etc/raddb/radiusd.conf", O_RDONLY) = 3 open("/usr/local/etc/raddb/proxy.conf", O_RDONLY) = 4 open("/usr/local/etc/raddb/clients.conf", O_RDONLY) = 4 open("/usr/local/etc/raddb/snmp.conf", O_RDONLY) = 4 open("/usr/local/etc/raddb/sqlcounter.conf", O_RDONLY) = 4 open("/usr/local/etc/raddb/eap.conf", O_RDONLY) = 4 open("/usr/local/etc/raddb/sql.conf", O_RDONLY) = 4 open("/usr/local/etc/raddb/dictionary", O_RDONLY) = 3 open("/dev/urandom", O_RDONLY) = 4 open("/usr/local/share/freeradius/dictionary", O_RDONLY) = 4 open("/usr/local/share/freeradius/dictionary.compat", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc2865", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc2866", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc2867", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc2868", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc2869", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc3162", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc3576", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.rfc3580", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.3com", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.3gpp", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.3gpp2", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.acc", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.airespace", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.alcatel", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.alteon", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.alvarion", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.aruba", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.ascend", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.bay", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.bintec", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.cablelabs", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.cabletron", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.cisco", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.cisco.vpn5000", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.cisco.bbsm", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.colubris", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.cosine", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.digium", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.epygi", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.erx", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.ericsson", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.extreme", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.freeradius", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.fortinet", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.foundry", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.gandalf", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.gemtek", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.issanni", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.itk", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.ipunplugged", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.juniper", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.karlnet", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.livingston", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.localweb", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.lucent", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.hp", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.microsoft", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.mikrotik", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.navini", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.netscreen", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.ntua", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.nomadix", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.nortel", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.packeteer", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.patton", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.propel", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.quintum", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.redback", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.redcreek", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.riverstone", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.roaringpenguin", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.shasta", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.shiva", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.sofaware", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.sonicwall", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.springtide", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.starent", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.telebit", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.trapeze", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.tropos", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.t_systems_nova", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.usr", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.valemount", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.versanet", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.waverider", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.walabi", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.wispr", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.xedia", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.xylan", O_RDONLY) = 5 open("/usr/local/share/freeradius/dictionary.freeradius.internal", O_RDONLY) = 5 open("/usr/local/etc/raddb/naslist", O_RDONLY) = 3 open("/usr/local/var/log/radius/radius.log", O_WRONLY|O_APPEND|O_CREAT, 0666) = 4 open("/etc/resolv.conf", O_RDONLY) = 4 open("/etc/nsswitch.conf", O_RDONLY) = 4 open("/usr/local/lib/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 4 open("/lib/libnss_files.so.2", O_RDONLY) = 4 open("/etc/host.conf", O_RDONLY) = 4 open("/etc/hosts", O_RDONLY) = 4 open("/usr/local/etc/raddb/clients", O_RDONLY) = 3 open("/usr/local/etc/raddb/realms", O_RDONLY) = 3 open("/etc/passwd", O_RDONLY) = 3 open("/etc/group", O_RDONLY) = 3 open("/etc/passwd", O_RDONLY) = 3 open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 3 open("/etc/group", O_RDONLY) = 3 open("/etc/services", O_RDONLY) = 3 open("/usr/local/var/log/radius/radius.log", O_WRONLY|O_APPEND|O_CREAT, 0666) = 3 Process 30825 detached [root@auth2 ~]# Any thoughts on where to go... I need this running production tomorrow. - Andrew

2 1

Bypassing freeradius accounting?
by Tas Dionisakos 17 Jan '07

17 Jan '07

I have successfully setup a freeradius, mysql, chillispot. Im just wondering if there is a way to allow free sites for my users, without radius accounting? I guessing that an IP table rules will do the job, as in allow a subnet range to bypass accounting. Has anyone successfully done this before, maybe some IP tables rules? Tas. -- ************************************* Tas Dionisakos IT Manager St Mary’s College and Newman College The University of Melbourne T: 03 9342 1708 M: 0439 655 565 E: tas(a)newman.unimelb.edu.au C: (0o (||||)(||||) o0) *************************************

3 2

Is there a simple way to restrict a user in the 'users' file to access only a specific ip addr/device?
by Ellis, Scott 1 (N-Comptel Inc.) 17 Jan '07

17 Jan '07

I am using PAM for auth-type in my users file. Is there a simple way to say that user 'x' can only login to IP addr 'y' and /or 'z'? I have groups of engrs, admins, and operators and need to discriminate who can access which device........ Scott -----Original Message----- From: Ellis, Scott 1 (N-Comptel Inc.) Sent: Tuesday, January 02, 2007 11:40 AM To: 'FreeRadius users mailing list' Cc: Ellis, Scott 1 (N-Comptel Inc.) Subject: RE: How to restrict users /PAM to specific NAS devices?? I have looked it over, but I am still not clear. I was thinking that I could use huntgroups to map devices to specific groups, but then I am not clear on how to restrict users ('users' file) to those groups. I know this has probably been done most everywhere in one form or another. Any examples that show the actual entries in the approp. files? Thanks, Scott -----Original Message----- From: freeradius-users-bounces+scott.1.ellis=lmco.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+scott.1.ellis=lmco.com@lists.freeradius .org] On Behalf Of Alan DeKok Sent: Tuesday, January 02, 2007 9:43 AM To: FreeRadius users mailing list Subject: Re: How to restrict users /PAM to specific NAS devices?? Ellis, Scott 1 (N-Comptel Inc.) wrote: > I am using PAM for Auth-Type. > I want to be able to either 1) restrict the devices the user has > access to (admins,operators, etc) by username and/or 2) preferably > carve into groups my network gear/NAS devices and then assign users to groups. See "man rlm_passwd". It's documentation describes how to create groups like this. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 3

Strange behaviour of freeradius...?
by apolyxrono 16 Jan '07

16 Jan '07

Hi list , I have set up a wlan using : freeradius-1.1.4 (peap-eap/mschapv2-authentication), AccessPoint-3Com7250 and windows xp wireless users. My AP has the option for accounting and i have set it on. I logged the accounting info in the radius database in the radacct table to be more specific. When a wireless user connected to the wlan i am executing the following sql query: select UserName , NASIPAddress , AcctStartTime , AcctStopTime , AcctSessionTime , AcctInputOctets , AcctOutputOctets from radacct ; and the output is : +----------+--------------+---------------------+---------------------+-----------------+-----------------+------------------+ | UserName | NASIPAddress | AcctStartTime | AcctStopTime | AcctSessionTime | AcctInputOctets | AcctOutputOctets | +----------+--------------+---------------------+---------------------+-----------------+-----------------+------------------+ | sony | 10.0.0.10 | 2007-01-15 22:33:12 | 0000-00-00 00:00:00 | 41 | 718 | 164 | +----------+--------------+---------------------+---------------------+-----------------+-----------------+------------------+ After If the user select from his wireless card software to disconnect from the specific wlan and make the same query to the database i can see that the AcctStopTime have a specific value and accounting for this user has stopped. However if the user does not use his/her wireless software to disconnect from the wlan and tun-off the wlan switcher of his/her card the accounting is continued (AcctSessionTime is counting) on freeradius but the AcctInputOctets and AcctOutputOctets stop counting. Why is that happening ? How should i know when the user is connected in the wlan and the user was just turned-off his/her switch of wlan ? thanks ___________________________________________________________ The all-new Yahoo! Mail goes wherever you go - free your email address from your Internet provider. http://uk.docs.yahoo.com/nowyoucan.html

5 5

Problem with Freeradius+LDAP+wifi
by Rafał Kamiński 16 Jan '07

16 Jan '07

Hello, I have that configuration: -server with Freeradius + connect with internal system and Ldap server -Linksys WPA54G -laptop with wifi -PC with freebsd when i testing connections from PC use radtest i was auth. by radius and ldap server. But when i want to use laptop and wifi i see some freeradius logs: - i see that linksys connect to ldap.server over freeradius but user (the same what on the pc auth) didn't be auth :( LOGS: rad_recv: Access-Request packet from host 192.168.1.245:3072, id=0, length=119 User-Name = "rka" NAS-IP-Address = 192.168.1.245 Called-Station-Id = "001217694588" Calling-Station-Id = "000d93ee9b55" NAS-Identifier = "001217694588" NAS-Port = 32 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0200000801726b61 Message-Authenticator = 0x31c848a6f4f552bd2024d49b5ffa79c4 Mon Jan 15 13:39:00 2007 : Debug: Processing the authorize section of radiusd.conf Mon Jan 15 13:39:00 2007 : Debug: modcall: entering group authorize for request 2 Mon Jan 15 13:39:00 2007 : Debug: modsingle[authorize]: calling ldap (rlm_ldap) for request 2 Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: - authorize Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: performing user authorization for rka Mon Jan 15 13:39:00 2007 : Debug: radius_xlat: '(uid=rka)' Mon Jan 15 13:39:00 2007 : Debug: radius_xlat: 'ou=Users,dc=domain' Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: ldap_get_conn: Checking Id: 0 Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0 Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: performing search in ou=Users,dc=blstream, with filter (uid=rka) Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: looking for check items in directory... Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: looking for reply items in directory... Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: user rka authorized to use remote access Mon Jan 15 13:39:00 2007 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0 Mon Jan 15 13:39:00 2007 : Debug: modsingle[authorize]: returned from ldap (rlm_ldap) for request 2 Mon Jan 15 13:39:00 2007 : Debug: modcall[authorize]: module "ldap" returns ok for request 2 Mon Jan 15 13:39:00 2007 : Debug: modcall: leaving group authorize (returns ok) for request 2 Mon Jan 15 13:39:00 2007 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Mon Jan 15 13:39:00 2007 : Debug: auth: Failed to validate the user. Mon Jan 15 13:39:00 2007 : Debug: Delaying request 2 for 1 seconds Mon Jan 15 13:39:00 2007 : Debug: Finished request 2 Mon Jan 15 13:39:00 2007 : Debug: Going to the next request Mon Jan 15 13:39:00 2007 : Debug: --- Walking the entire request list --- Mon Jan 15 13:39:00 2007 : Debug: Waking up in 1 seconds... Mon Jan 15 13:39:01 2007 : Debug: --- Walking the entire request list --- Mon Jan 15 13:39:01 2007 : Debug: Waking up in 1 seconds... Mon Jan 15 13:39:02 2007 : Debug: --- Walking the entire request list --- Sending Access-Reject of id 0 to 192.168.1.245 port 3072 I set in /etc/freeradius/clients.conf client 192.168.1.245 { secret = password shortname = ldap_test } Why ldap didn't want auth. me ? And it is so freak because when i used PC with the same users ldap auth me. BR, -- Rafal Kaminski http://blstream.com email: rafal.kaminski(a)blstream.com jid: rka(a)im.blstream.com

4 12