Here's another one: rlm_ldap: (re)connect to ldap01.mtlcnds.int.distributel.net:389, authentication 0 User-Password = "test123" NAS-IP-Address = 1.1.1.1 rlm_ldap: - authorize rlm_ldap: - authorize rlm_ldap: - authorize rlm_ldap: ldap_start_tls_s() User-Name = "ip_fixe@distributel.net"rlm_ldap: performing user authorization for ip_fixe rlm_ldap: performing user authorization for ip_fixe rlm_ldap: could not start TLS Connect error rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: performing user authorization for ip_fixe rlm_ldap: ldap_get_conn: Checking Id: 0 User-Password = "test123"rlm_ldap: ldap_get_conn: Checking Id: 1 rad_recv: Access-Request packet from host 10.224.4.117:65039rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: (re)connection attempt failed rlm_ldap: setting TLS CACert File to /usr/local/radiusd/current/etc/raddb/certs/cacert.pem, id=86, length=69 rlm_ldap: ldap_get_conn: Checking Id: 1 rlm_ldap: ldap_get_conn: Checking Id: 2 rlm_ldap: ldap_get_conn: Checking Id: 1 rlm_ldap: setting TLS CACert File to /usr/local/radiusd/current/etc/raddb/certs/cacert.pem rlm_ldap: search failed rlm_ldap: ldap_get_conn: Checking Id: 2 rlm_ldap: setting TLS CACert File to /usr/local/radiusd/current/etc/raddb/certs/cacert.pem rlm_ldap: setting TLS CACert File to /usr/local/radiusd/current/etc/raddb/certs/ NAS-IP-Address = 206.80.253.241rlm_ldap: ldap_get_conn: Checking Id: 3 rlm_ldap: ldap_get_conn: Checking Id: 2 rlm_ldap: ldap_release_conn: Release Id: 1 rlm_ldap: ldap_get_conn: Checking Id: 3 User-Name = "ip_fixe@distributel.net"radiusd in free(): error: chunk is already free rlm_ldap: ldap_get_conn: Checking Id: 4 Abort Crashed at about same place. Thanx Paul On Thu, 2005-12-29 at 16:56 -0500, Alan DeKok wrote:
"Paul Khavkine" <paul.khavkine@distributel.ca> wrote:
rlm_ldap: setting TLS CACert File to /usr/local/radiusd/current/etc/raddb/certs/cacert.pem rlm_ldap: setting TLS CACert File to /usr/local/radiusd/current/etc/raddb/certs/cacert.pem
That second entry should be a directory, not a file. There's a typo in the debugging output which makes that harder to figure out.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html