Mr. DeKok, On this new install of freeradius I used the ldap config suggested by this page: http://wiki.freeradius.org/modules/rlm_ldap Note that on this page, as in my prior config, the listed entry for filter is *filter = "(uid=%{%{Stripped-User-Name}:**-%{User-Name}})"* I erased that an made a copy of mods-available/ldap and no longer have the issue with the incorrect filter in radiusd -X output. There seem to be some problems with this page, and some general gaps in documentation for enabling modules.. for example this search returns no results. http://wiki.freeradius.org/search?q=enable+module On Tue, Feb 9, 2016 at 2:09 PM, Alan DeKok <aland@deployingradius.com> wrote:
On Feb 9, 2016, at 1:40 PM, Walter Moore <moorewr@eckerd.edu> wrote:
I've been searching for an answer this issue on a new install of freeradius on CentOS 7, installed from RPMs. As far as I can see, what I enter for the ldap filter is not being used by the server, but I'm hopeful I've missed some detail in the configuration.
It's not a new install. You have configuration left over from an old version of FreeRADIUS.
Or, you edited the configuration and broke it.
Here' the key error in the output from radiusd -X.
*(0) ERROR: ldap : (uid=%u)* *(0) ERROR: ldap : ^ Invalid variable expansion* *(0) ERROR: ldap : Unable to create filter*
That's old syntax. For v3, the default in mods-available/ldap is:
filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})"
Please use the default configuration files.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- +-----------------------------------------------------------------+ Walter R. Moore -- Sr. Systems Administrator, Eckerd College moorewr@eckerd.edu -- http://home.eckerd.edu/~moorewr "It was glorious to see -- if your heart were iron, And you could keep from grieving at all the pain" - The Iliad (13.355) I'm on twitter: http://twitter.com/moorewreckerd ***Reminder! ITS will never ask you to e-mail your password!***