Do you create a symbolic link to file ldap1 and ldap2? */etc/raddb/mods-enabled/files[**9]: Instantiation failed for module "files"* It occurs when freeradius don't find the file especified in virtual server configuration. So, first, create the simbolic link to these files. After, review the group configuration. I use a filter to memberOf and I take only the attribuite cn that identify my group. In file user I use only the attribute for to filter. IE: DEFAULT Ldap-Group == admin-vlan Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 10 that's why I made the filter in ldap file mod-enable. Atenciosamente. Manoel Bezerra da Costa Neto Analista de infraestruta em Redes de Computadores. Em qua, 1 de mai de 2019 às 12:29, Alan DeKok <aland@deployingradius.com> escreveu:
On May 1, 2019, at 11:23 AM, Satish Patel <satish.txt@gmail.com> wrote:
I have freeradius configure with LDAP servers and so far everything is working great but today when i have added second ldap server i got following error
I have created two ldap file as per document ldap1 & ldap2 and my authorization and authentication section look like following. ... when i start radiusd -X it failed here
reading pairlist file /etc/raddb/mods-config/files/authorize /etc/raddb/mods-config/files/authorize[48]: Parse error (check) for entry DEFAULT: Unknown name "Ldap-Group" Failed reading /etc/raddb/mods-config/files/authorize /etc/raddb/mods-enabled/files[9]: Instantiation failed for module "files"
Yes.
but when i changed Ldap-Group to ldap1-LDAP-Group it works do does that means i have to create two section in users file for two LDAP?
ldap1-LDAP-Group ldap2-LDAP-Group
The LDAP-Group checks are *not* done in a redundant fashion. So yes, you will need two group checks.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html