rad_recv: Access-Request packet from host 172.16.8.7:1543, id=106, length=57 User-Name = "icore" User-Password = "" NAS-IP-Address = 64.241.16.2 NAS-Port = 0 .. rlm_ldap: performing search in o=nwf,c=us, with filter (&(CN=icore)(objectClass=person)) rlm_ldap: No default NMAS login sequence rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Setting Auth-Type = ldap rlm_ldap: user icore authorized to use remote access .. Login OK: [icore] (from client Sonicwall port 0) Sending Access-Accept of id 106 to 172.16.8.7 port 1543 .. rad_recv: Access-Request packet from host 172.16.8.7:1543, id=107, length=57 User-Name = "icore" User-Password = "" NAS-IP-Address = 64.241.16.2 NAS-Port = 0 .. rlm_ldap: performing search in o=nwf,c=us, with filter (&(CN=icore)(objectClass=person)) rlm_ldap: No default NMAS login sequence rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Setting Auth-Type = ldap rlm_ldap: user icore authorized to use remote access .. Login OK: [icore] (from client Sonicwall port 0) Sending Access-Accept of id 107 to 172.16.8.7 port 1543 .. rad_recv: Access-Request packet from host 172.16.8.7:1543, id=108, length=57 User-Name = "icore" User-Password = "" NAS-IP-Address = 64.241.16.2 NAS-Port = 0 .. rlm_ldap: performing search in o=nwf,c=us, with filter (&(CN=icore)(objectClass=person)) rlm_ldap: No default NMAS login sequence rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Setting Auth-Type = ldap rlm_ldap: user icore authorized to use remote access .. Login OK: [icore] (from client Sonicwall port 0) Sending Access-Accept of id 108 to 172.16.8.7 port 1543 .. rad_recv: Access-Request packet from host 172.16.8.7:1543, id=109, length=57 User-Name = "icore" User-Password = "" NAS-IP-Address = 64.241.16.2 NAS-Port = 0 .. rlm_ldap: performing search in o=nwf,c=us, with filter (&(CN=icore)(objectClass=person)) rlm_ldap: object not found or got ambiguous search result rlm_ldap: search failed .. Sending Access-Reject of id 109 to 172.16.8.7 port 1543
So, nothing to do with freeradius. As long as your ldap works it accepts the user. When ldap fails ... Debug ldap and see why did it fail. Ivan Kalik Kalik Informatika ISP