28 Oct
2008
28 Oct
'08
9:25 a.m.
On Mon, 2008-10-27 at 18:41 -0600, Anthony Chavez wrote:
Module: Instantiating ldap ldap { server = "directory.somedomain" port = 389 password = "secret" identity = "cn=Manager,dc=somedomain"
I don't know how much of this was from clean up, but if possible you really really shouldn't use cn=Manager,dc=somedomain for this. It is generally concidered a no go to let anything use the directory manager. At our site I created a dedicated radiusd user who has exactly and only the rights needed by radius. I don't know if that is an option at your site, but if it is I strongly suggest it. Pat