On Monday 02 January 2006 05:46, rwakim@mind-techno.fr wrote:
Here is my problem:
When I start the radtest binary:
radtest "test" "supersecret" localhost 2 testing123
rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=45, length=20
You have set your server to do EAP. radtest does not do EAP use radeapclient for testing.
Here is the log on the radius server (Started with radiusd -X):
rlm_ldap: looking for reply items in directory... rlm_ldap: Adding radiusFilterId as Filter-Id, value Enterasys:version=1:policy=Enterprise User & op=11 rlm_ldap: user test authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 3 modcall: group authorize returns ok for request 3
LDAP seems to be working.
The RADIUS users file:
DEFAULT Auth-Type := EAP Fall-Through = 1 # Reply-Message = "LDAP"
Don't set Auth-Type in the users file. Let the server figure it out.
I would be grateful if you had a how-to or tutorial on how to build a easy and working 802.x authentication with a Radius/LDAP system.
Documentation and how-tos are available in your source doc directory, www.freeradius.org and wiki.freeradius.org. Zoltan Ori