On Sep 22, 2023, at 9:56 AM, Uwe Faber <uf@zkm.de> wrote:st/users.html
Hi alan, i changed the code in the inner tunnel as described in the Link you gave the result is :
/etc/freeradius/3.0/sites-enabled/inner-khs[12]: Unknown or invalid value "ldap" for attribute Auth-Type /etc/freeradius/3.0/sites-enabled/inner-khs[11]: Failed to parse "update" subsection. /etc/freeradius/3.0/sites-enabled/inner-khs[2]: Errors parsing authorize section.
You've had success in editing the configuration files to simplify it and use "ldap_khs" instead of just "ldap". What is less successful is expecting that the "Auth-Type LDAP" example will work when the "authenticate" section you post doesn't have the "ldap" configuration from the example. And, if you're going to use "ldap_khs" as the ldap module, you probably want to use that name instead of just bare "ldap". It takes care and effort to create a working configuration. And paying attention to details. Following half of the documentation is not likely to work. Alan DeKok.