Doh! Nevermind. Had to uncomment the auth-type declaration for ldap in the authenticate section. On Thursday, July 30, 2015 11:56 AM, Scott Pickles via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote: From the documentation within the ldap module, I added the following to my default site config: # The ldap module reads passwords from the LDAP database. ldap if(Ldap-Group == "VPN-Internal") { if ((ok || updated) && User-Password) { update { control:Auth-Type := ldap } } } else { reject } ntlm_auth I get the following error: /etc/raddb/sites-enabled/default[386]: Unknown value 'ldap' for attribute 'Auth-Type' /etc/raddb/sites-enabled/default[385]: Failed to parse "update" subsection. /etc/raddb/sites-enabled/default[384]: Failed to parse "if" subsection. /etc/raddb/sites-enabled/default[254]: Errors parsing authorize section. I thought I saw somewhere that I have to add that to the dictionary? On Tuesday, July 28, 2015 5:44 PM, "A.L.M.Buxey@lboro.ac.uk" <A.L.M.Buxey@lboro.ac.uk> wrote: Hi,
>>How come search fails first time >>(0) Search returned no results >>(0) Search returned not found
different scope
>>To fix this, do I add Auth-Type to my unlang statement? >>(0) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject
in version 2 this is one of the times when you would set the Auth-Type...as per some of the docs. in versiojn 3 this is much different...and I would advise that you use version 3 in version 2 you could probably do something like this (after the PAP section in Authorize) if (!control:Auth-Type) { update control { Auth-Type = "ntlm_auth" } } alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html