Hello again,
Sebastian Heil wrote:
Is there a way to deactivate the ldap.attrmap file?
Edit the source code & re-compile.
Maybe i will try it... never done before... :-) thanks anyway. i have got another problem. since the authentication via ldap works now quite ok, i would like to try ldaps together with edirectory. what do i have to configure? i already imported the root certificate and configured the tls-section of the ldap-section like this: tls { start_tls = yes cacertfile = /etc/raddb/certs/tc_class2.pem require_cert = "demand" } but i doesn't work like this... i added the following lines to the ldap-section: port = 636 tls_mode = yes tls_require_cert = demand and i doesn't work either... part of the debug: rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ************:636, authentication 0 rlm_ldap: setting TLS mode to 1 rlm_ldap: setting TLS CACert File to /etc/raddb/certs/tc_class2.pem rlm_ldap: setting TLS Require Cert to demand rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 Any ideas? Thanks. Sebastian -- GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail