Matej, This was recently a topic on this list and I posted this: http://freeradius.1045715.n5.nabble.com/LDAP-bind-user-authentication-tp5729... According to the original poster, that did the trick for him and he could use bind-as-user. There was no messing with the 'users' file (or odd default User-Dn stuff), just setting up the LDAP server details, tweaking the ldap query to retrieve your user, and the few lines in both the 'authorize' and 'authenticate' sections to be able to use PAP. Granted, you're using FR 2.1.12, so mileage will vary, but if you use the FreeRADIUS repository, you can switch to v3.0.4 and enjoy the gloriousness of the rewritten LDAP module that makes things so easy :-) Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet Janet, the UK's research and education network. Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 ________________________________________ From: freeradius-users-bounces+stefan.paetow=ja.net@lists.freeradius.org [freeradius-users-bounces+stefan.paetow=ja.net@lists.freeradius.org] on behalf of Alan DeKok [aland@deployingradius.com] Sent: 16 October 2014 21:46 To: FreeRadius users mailing list Subject: Re: LDAP - bind as user - howto? Matej Žerovnik wrote:
If I use users file, then %{User-Name} is not substituted with the user-name provided in the accept-request. I hope it's obvious I want to use different usernames as different users will use radius to login to the service.
You said other things didn't work when you used the "hints" file. Just write all of the policies in "unlang".
I found out I read about hints file on this url: http://www.opensource.apple.com/source/freeradius/freeradius-11/freeradius/d...
Later I realized that this file is about radius 1.X version, so it's probably obsolete.
And it's just a copy of the FreeRADIUS documentation. Which is included with FreeRADIUS. And which is available on wiki.freeradius.org. I don't see why people go to third-party sites, when the same (and better) documentation is available directly from us. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Janet(UK) is a trading name of Jisc Collections and Janet Limited, a not-for-profit company which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238