Resent... --haizam ----- Original Message ----- From: "Rohaizam Abu Bakar" <haizam@myjaring.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, September 11, 2007 5:09 PM Subject: Same config 1.1.2 but not work on 1.1.7 - not set Auth-Type
I've tried as recommended not to set Auth-Type but trying below will works in 1.1.2 but not on my recently upgraded to 1.1.7
Configs:-
############################ a) radiusd.conf
authorize { Autz-Type LDAP { ldap1 }
Autz-Type ADSL { ldapadsl1 }
} authenticate {
Auth-Type ldap1 { ldap1 Auth-Type ldapadsl1 { ldapadsl1 } }
b) users
DEFAULT Huntgroup-Name == "adsl", ldapadsl1-Ldap-Group == "ADSL", Autz-Type := ADSL DEFAULT Autz-Type := LDAP ##################################
Results:-
In 1.1.2 - (Auth-Type ldap1 => working!!)
############################################
modcall: leaving group authorize (returns ok) for request 18 Found Autz-Type LDAP Processing the authorize section of radiusd.conf modcall: entering group LDAP for request 18 modcall: entering group redundant for request 18 rlm_ldap: - authorize rlm_ldap: performing user authorization for test radius_xlat: '(uid=test)' radius_xlat: 'ou=RADIUS,ou=People,dc=xxx,dc=xx' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=RADIUS,ou=People,dc=xxx,dc=xx, with filter (uid=test) rlm_ldap: checking if remote access for test is allowed by dialupAccess rlm_ldap: Added password {CRYPT}XXXXXXXX in check items rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Adding radiusFramedCompression as Framed-Compression, value Van-Jacobson-TCP-IP & op=11 rlm_ldap: Adding radiusFramedMTU as Framed-MTU, value 1500 & op=11 rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11 rlm_ldap: Adding radiusServiceType as Service-Type, value Framed-User & op=11 rlm_ldap: Setting Auth-Type = ldap1 rlm_ldap: user test authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap1" returns ok for request 18 modcall: leaving group redundant (returns ok) for request 18 modcall: leaving group LDAP (returns ok) for request 18 rad_check_password: Found Auth-Type ldap1 auth: type "ldap1"
######################################
In 1.1.7 (Auth-Type = Local => not working!!)
########################################## modcall: leaving group authorize (returns ok) for request 1 Found Autz-Type LDAP Processing the authorize section of radiusd.conf modcall: entering group LDAP for request 1 modcall: entering group redundant for request 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for test radius_xlat: '(uid=test)' radius_xlat: 'ou=RADIUS,ou=People,dc=xxx,dc=xx' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=RADIUS,ou=People,dc=xxx,dc=xx, with filter (uid=test) rlm_ldap: checking if remote access for test is allowed by dialupAccess rlm_ldap: Added password {CRYPT}XXXXXXXXXXXXX in check items rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Adding radiusFramedCompression as Framed-Compression = Van-Jacobson-TCP-IP rlm_ldap: Adding radiusFramedMTU as Framed-MTU = 1500 rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol = PPP rlm_ldap: Adding radiusServiceType as Service-Type = Framed-User rlm_ldap: user test authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap1" returns ok for request 1 modcall: leaving group redundant (returns ok) for request 1 modcall: leaving group LDAP (returns ok) for request 1 auth: type Local auth: user supplied User-Password does NOT match local User-Password
###################################3