On 27/03/2023 19:03, Grosjean Cyril wrote:
1/ Can you confirm that the “Unknown error” is from the LDAP response and not Freeradius ? Can we have more information about status code of the response ? I’m seeing here two occurences of “Unknown error” in the ldap module (ldap.c) but I can’t get more information, and it is hard for me to activate debug that show Radius attribute in stdout (as some of them are sensitive).
That error is coming from libldap - that is it's expansion of the error code passed to ldap_err2string().
2/ Can I activate more debug on thoses errors to get the bottom of it ? Do you have any insight to help me get more information ?
Try enabling libldap debug options by setting the ldap_debug option in src/mod-enabled/ldap - you should refer to OpenLDAP documentation to see the meaning for the values you can set there. The output is not easy to read, but tells you what libldap is doing as opposed to what FreeRADIUS is doing. Nick