29 Nov
2013
29 Nov
'13
11:07 a.m.
On 29 Nov 2013, at 15:57, Alan DeKok <aland@deployingradius.com> wrote:
Dominique Fournier wrote:
In the logs, when there is a reject, I can see : [ldap-inner-tunnel] performing user authorization for XXXXX [ldap-inner-tunnel] expand: (mail=%{User-Name}) -> (mail=XXXXX.fr) [ldap-inner-tunnel] expand: -> [ldap-inner-tunnel] unable to create basedn.
Try creating the basedn which contains only a space. That might work.
The LDAP module is generally intended to search within a particular base DN. It can be a security risk to allow searching of the entire tree.
Only if you're incompetent and setup the ACLs incorrectly. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team