On Mar 8, 2017, at 2:28 AM, Konstantin Knaab-Hinrichs via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Here's the "freeradius -X" (somehow it isn't radiusd -X on my side)
Debian and Redhat rename the binary. This is documented in the FAQ. And the reason we tell you to run it in debug mode is so that you will READ THE OUTPUT. Specifically:
[ldap] Bind was successful [ldap] performing search in dc=$DOMAIN,dc=local, with filter (uid=$USER) WARNING: Please set 'chase_referrals=yes' and 'rebind=yes' WARNING: See the ldap module configuration for details
If only the server produced a USEFUL MESSAGE WHICH TOLD YOU HOW TO FIX THE PROBLEM.
As I read the log part
[ldap] ldap_search() failed: Operations error [ldap] search failed [ldap] ldap_release_conn: Release Id: 0 ++[ldap] = fail +} # group authorize = fail Invalid user: [$USER] (from client localhost port 0)
You read that, and ignored the HUGE WARNING MESSAGE. The message that told you how to fix the problem. Alan DeKok.