> Fri Mar 13 09:57:22 2009 : Info: No authenticate method (Auth-Type)
> configuration found for the request: Rejecting the user

Ok. Change the "update" block to:

update control {
Response-Packet-Type = Do-Not-Respond

Auth-Type := Accept
}

I think that will finally work.

But if the client re-transmits... the server will respond with a
packet of code 0. I've fixed that in git. (Give me a bit to push the
change publicly). So you'll still need to update in order to have this
perfect.

Alan DeKok.

We're close, I can really feel it, but that packet is still hitting the wire.

Fri Mar 13 13:26:01 2009 : Error: rlm_ldap: (re)connection attempt failed
Fri Mar 13 13:26:01 2009 : Info: [ldap] search failed
Fri Mar 13 13:26:01 2009 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0
Fri Mar 13 13:26:01 2009 : Info: +++[ldap] returns fail
Fri Mar 13 13:26:01 2009 : Info: +++- entering group {...}
Fri Mar 13 13:26:01 2009 : Info: ++++[control] returns fail
Fri Mar 13 13:26:01 2009 : Info: ++++[ok] returns ok
Fri Mar 13 13:26:01 2009 : Info: +++- group returns ok
Fri Mar 13 13:26:01 2009 : Info: ++- policy redundant returns ok
Fri Mar 13 13:26:01 2009 : Info: Found Auth-Type = Accept
Fri Mar 13 13:26:01 2009 : Info: Auth-Type = Accept, accepting the user
Fri Mar 13 13:26:01 2009 : Auth: Login OK: [fbloggs] (from client my-switch port 0 cli 10.10.10.10)
Fri Mar 13 13:26:01 2009 : Info: +- entering group post-auth {...}
Fri Mar 13 13:26:01 2009 : Info: ++[exec] returns noop
Sending Access-Accept of id 242 to 10.20.30.40 port 32771

authorize {
       preprocess
       auth_log
       chap
       mschap
       files
       redundant {
               ldap
               group {
                        update control {
                                Response-Packet-Type := Do-Not-Respond
                                Auth-Type := Accept
                        }
                        ok
                }
        }
}

Thanks

Chris