Hi frree-radius users !
I'm running a freeradius 2.0.4 on a DEBIAN 5.0.5
We want to access an LDAP / windows base , wich is declared
in radiusd.conf file
Below is the output produced by the radiusd -X debugging mode
when I run the radtest :
radtest command:
/usr/sbin/radtest -d /etc/freeradius "ldap" "xxxx" 127.0.0.1:1812 10
testing123
Output produced:
rad_recv: Access-Request packet from host 127.0.0.1 port 59383,
id=56, length=56
User-Name = "ldap"
User-Password = "xxxx"
NAS-IP-Address = 192.168.55.150
NAS-Port = 10
+- entering group authorize
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
rlm_realm: No '@' in User-Name = "ldap", looking up realm NULL
rlm_realm: No such realm "NULL"
++[suffix] returns noop
rlm_eap: No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
++[files] returns noop
++[expiration] returns noop
++[logintime] returns noop
rlm_pap: WARNING! No "known good" password found
for the user. Authentication may fail because of this.
++[pap] returns noop
auth: No authenticate method (Auth-Type) configuration
found for the request: Rejecting the user
auth: Failed to validate the user.
Login incorrect: [ldap/xxxx] (from client localhost port 10)
Found Post-Auth-Type Reject
+- entering group REJECT
expand: %{User-Name} -> ldap
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 56 to 127.0.0.1 port 59383
Waking up in 4.9 seconds.
Cleaning up request 0 ID 56 with timestamp +40
Ready to process requests.
Obviously, it's the authenticate method which
is missing . I've add this entry it in the
/etc/freeradius/sites-available/default:
- The entries ldap pap are uncommented in Authorize { } section
- The entry
Auth-Type LDAP {
ldap
}
is in the authenticate {} section.
Any idea ?
Have a nice day, everybody !!
--
__________________________________
Isabelle RECH LE RECIS
Enssib
Département informatique
17-21 Bd du 11 Novembre 1918
69623 Villeurbanne Cedex
Tel : 04 72 44 43 34
http://www.enssib.fr/
__________________________________