Thank you for answer, but I started messing with default configuration because this did not return any search results either.

This is what my original configuration looked like

<------># Group membership checking. Disabled by default.

<------>#

<------># groupname_attribute = cn

<------># groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))"

I used original conf to generate a debug log for this.

And YES, the adding "control:" helped. So basically it's a package bug. I will inform Suse freeradius package maintainer.

Thank you, again.

Andres

2013/11/1 Phil Mayers <p.mayers@imperial.ac.uk>

On 01/11/13 13:11, Andres Septer wrote:

Logs
LDAP search fail, because LDAP-UserDN empty

This is:

a. Not a debug with "radiusd -X", and
b. Not a complete debug.

...but never mind. I can see your problem:

(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))

...you have edited the default config and broken it. Go back to the default config and look carefully at what it says - you'll note it's:

control:Ldap-UserDn

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html