On Mar 14, 2017, at 2:56 AM, Jörn Volkhausen <volkhausen.joern@gmx.de> wrote:
Can anyone explain me why freeradius use two different userdn's for the same ldap configuration [ldap-kap-staging]? If you read the debug output, you will see that the LDAP server is returning a redirect. FreeRADIUS is just following that. Sorry for my misunderstanding. Can you please call me the line in output, where the redirect is referenced? I dont find it. That he is authorizing the user is good, but why is freeradius using the wrong dn at the authenticate stage for the same ldapconfig? Because your LDAP server is telling FreeRADIUS to use that DN.
If you want FreeRADIUS to use the right DN, fix your LDAP server so that it doesn't return a redirect.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Jörn Volkhausen