On Apr 3, 2025, at 11:37 AM, Wayne Sprouse via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
The user is unable to bind to LDAP using that DN. The user can authenticate using the actual email address though. Testing with a user from the primary domain, I was able to bind to LDAP using the DN format. i.e. "uid=joseph.test,ou=Central Management,ou=Users,dc=madeupdomain,dc=com".
Run the test with the ldapsearch command-line utility. if that fails, it's definitely not FreeRADIUS.
I keep telling Google that the issue appears to be on their end, but they say it is a FreeRADIUS issue. I cannot see how that could be the case since the user cannot bind using the full DN.
Yeah. "We're big and smart, and you're a stupid Open Source project". Unfortunately the opposite is usually true. Alan DeKok.