Sven, Awesome, thanks for the hint. That was the issue now everything is working as expected. Thanks! _ /-\ ndrew On Thu, Aug 21, 2014 at 6:23 AM, Sven Hartge <sven@svenhartge.de> wrote:
On 18.08.2014 18:17, Andrew Niemantsverdriet wrote:
I'm am using FreeRadius 2.1.12 from the CentOS repo and am trying to get it working with OpenLDAP 2.3.43 also from the CentOS repo. Everything is working great until I add and ACL to OpenLDAP that gives self write access to sambaNTpassword. When that line is added FreeRadius will stop authenticating clients.
Do you use an ACL like:
access to attrs=sambaNTpassword by self =w
? If so, then you granted write access, but no read access. You need to use
access to attrs=sambaNTpassword by self =rw
Note that there is a difference between writing
access to attrs=sambaNTpassword by self write
and
access to attrs=sambaNTpassword by self =w
The first one includes read access, the second one does not.
Use the slapacl utility to test your ACLs and see the difference.
Grüße, Sven.
-- _ /-\ ndrew Niemantsverdriet Linux System Administrator Academic Computing (406) 238-7360 Rocky Mountain College 1511 Poly Dr. Billings MT, 59102