Alan, Thank you so much for your quick reply. I guess I'm still not understanding something. All the documentation I have been able to find indicates that I do not need to add an Aut-Type for ldap. I would like to authenticate against LDAP. Can you give me the settings that would work for this method of authenticating? I am really thankful for your pointers, they have helped me to understand what is going on, however I still don't know what the solution is. Thank you again for your help. Kent On 9/9/07 3:17 AM, "Alan DeKok" <aland@deployingradius.com> wrote:
Kent Thomas wrote:
I'm new to FreeRadius, and have struggled for a couple of days now on how to get LDAP authentication to work.
LDAP is a database, NOT an authentication server.
It would appear that the LDAP is actually authenticating, but then something goes wrong following that. I'm sure it is just something set wrong in the users file, but I do need some help. Forgive me if this has already been covered. ... Sat Sep 8 23:33:22 2007 : Debug: rlm_ldap: - authorize Sat Sep 8 23:33:22 2007 : Debug: rlm_ldap: performing user authorization for kent
Authorization is NOT authentication.
Sat Sep 8 23:33:22 2007 : Debug: rlm_ldap: looking for check items in directory... Sat Sep 8 23:33:22 2007 : Debug: rlm_ldap: looking for reply items in directory...
You do NOT have a "known good" password configured for the user.
Sat Sep 8 23:33:22 2007 : Debug: rad_check_password: Found Auth-Type System Sat Sep 8 23:33:22 2007 : Debug: auth: type "System" Sat Sep 8 23:33:22 2007 : Debug: ERROR: Unknown value specified for Auth-Type. Cannot perform requested action.
-----------------radiusd.conf---------------------------------------------
PLEASE don't include the configuration files in your email. They're not necessary. There's a REASON the FAQ, etc. say to post the debug log, and DOES NOT say to post all of the configuration files.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html