What struck me was that you need more attributes, but maybe I missed them: -cacertfile -certfile -keyfile -Josiah Sebastian Heil wrote:
Sebastian Heil wrote: ...
i added the following lines to the ldap-section:
...
rlm_ldap: could not start TLS Can't contact LDAP server
Maybe you need to check that there is an LDAP server listening on that port?
Alan DeKok.
thanks for your fast answer, alan. but i am afraid, this is not the solution... the ldap-server is listening and even responding to my ldap-request. i captured the communication between the freeradius and the edirectory with etherreal:
Someone any idea about the "Encrypted Alert" in no. 14?? Thanks.
--------------------- No. Time Source Destination Protocol Info 1 0.000000 radtestclient freeradius RADIUS Access-Request(1) (id=74, l=58)
3 0.000749 freeradius edirectory TCP 56302 > ldaps [SYN] Seq=0 Len=0 MSS=1460 TSV=445748676 TSER=0 WS=2
5 0.012986 edirectory freeradius TCP ldaps > 56302 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 WS=0 TSV=3386151196 TSER=445748676
6 0.013057 freeradius edirectory TCP 56302 > ldaps [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=445748679 TSER=3386151196
7 0.013639 freeradius edirectory SSLv2 Client Hello
8 0.021887 edirectory freeradius TLSv1 Server Hello,
9 0.022035 freeradius edirectory TCP 56302 > ldaps [ACK] Seq=143 Ack=1449 Win=8736 Len=0 TSV=445748682 TSER=3386151206
10 0.030390 edirectory freeradius TLSv1 Certificate
11 0.030550 freeradius edirectory TCP 56302 > ldaps [ACK] Seq=143 Ack=1946 Win=11632 Len=0 TSV=445748684 TSER=3386151215
12 0.032263 freeradius edirectory TLSv1 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
13 0.048990 edirectory freeradius TLSv1 Change Cipher Spec, Encrypted Handshake Message
14 0.049652 freeradius edirectory TLSv1 Encrypted Alert
15 0.049923 freeradius edirectory TCP 56302 > ldaps [FIN, ACK] Seq=506 Ack=2005 Win=11632 Len=0 TSV=445748689 TSER=3386151237
17 0.057441 edirectory freeradius TCP ldaps > 56302 [ACK] Seq=2005 Ack=507 Win=4885 Len=0 TSV=3386151247 TSER=445748689
18 0.057774 edirectory freeradius TLSv1 Encrypted Alert
19 0.057807 freeradius edirectory TCP 56302 > ldaps [RST] Seq=507 Len=0
20 0.057880 edirectory freeradius TCP ldaps > 56302 [FIN, ACK] Seq=2042 Ack=507 Win=4885 Len=0 TSV=3386151247 TSER=445748689
21 0.057903 freeradius edirectory TCP 56302 > ldaps [RST] Seq=507 Len=0
-- Wm. Josiah Erikson Computing Support School of Cognitive Science Hampshire College Amherst, MA 01002 (413) 559-6091