RE: Auth-Type LDAP and "WARNING: Unknown value specified for Auth-Type. Cannot perform requested action"

3 Sep 2015

      Hello,

My actions so far:

- I've updated /usr/local/etc/raddb/dictionary as requested, checking also for typos:

"
...
#ATTRIBUTE      My-Local-String         3000    string
#ATTRIBUTE      My-Local-IPAddr         3001    ipaddr
#ATTRIBUTE      My-Local-Integer        3002    integer
VALUE   Auth-Type LDAP_estudiantes 16
"

- I've checked dictionary loading in debug mode:

.....
including configuration file /usr/local/etc/raddb/modules/wimax
including configuration file /usr/local/etc/raddb/modules/LDAP_estudiantes
....
main {
        allow_core_dumps = no
}
including dictionary file /usr/local/etc/raddb/dictionary
main {
        name = "radiusd"
....

- I've checked module instantiation with no errors:

....
rlm_ldap: Registering ldap_groupcmp for Ldap-Group
rlm_ldap: Creating new attribute LDAP_estudiantes-Ldap-Group
rlm_ldap: Registering ldap_groupcmp for LDAP_estudiantes-Ldap-Group
rlm_ldap: Registering ldap_xlat with xlat_name LDAP_estudiantes
....
Module: Instantiating module "LDAP_estudiantes" from file /usr/local/etc/raddb/modules/LDAP_estudiantes
  ldap LDAP_estudiantes {
        server = "ldap.upo.es"
        port = 389
        password = ""

- I've upgraded to 2.2.8

But I'm still getting same error:

++++[LDAP_estudiantes] = ok
+++} # case alumno.upo.es = ok
++} # switch %{Realm} = ok
+} # group authorize = ok
Found Auth-Type = LDAP_estudiantes
  WARNING: Unknown value specified for Auth-Type.  Cannot perform requested action.
Failed to authenticate the user.
Using Post-Auth-Type Reject

Is migrating to v3 my only remaining option?

Should I check anything else? 

Regards,

Ignacio Siles.

-----Mensaje original-----
De: Freeradius-Users [mailto:freeradius-users-bounces+jisiles=ingenia.es@lists.freeradius.org] En nombre de Alan DeKok
Enviado el: miércoles, 5 de agosto de 2015 18:21
Para: FreeRadius users mailing list
Asunto: Re: Auth-Type LDAP and "WARNING: Unknown value specified for Auth-Type. Cannot perform requested action"

On Aug 5, 2015, at 11:36 AM, José Ignacio Siles Rueda <jisiles@ingenia.es> wrote:
...
I've tried those two recommendations, with no luck.
If you update the dictionaries, it will work.  The only reason it won't work is if you're editing a different dictionary file than the server is reading, OR if you have typos in the names.

  In v3, the automatic creation of values for Auth-Type works better.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html