Not an option for me right now, but is something I will look to do On Mar 29, 2014 4:29 PM, "Arran Cudbard-Bell" <a.cudbardb@freeradius.org> wrote: On 29 Mar 2014, at 19:53, Brendan Kearney <bpk678@gmail.com> wrote:

resending. rejected because of size. previously attached screenshot moved to imgur. http://imgur.com/MvEuJXb

On Sat, 2014-03-29 at 11:07 -0400, Brendan Kearney wrote:

...

Reran this test, with a packet capture running to validate the returned data from my directory.

As expected, the authN works but the authZ fails. the uid is being populated with the username and not the DN. The problem is that the directory is replying with a successful lookup, and is giving back the DN of my id. See attached screenshot of the packet capture. the blue highlighted lines indicate the reply from the directory with the DN.

where do i continue looking for the reason why the DN is not being populated as the value to the variable "control:Ldap-UserDn"?

Honestly, just move to 3.0.2. The LDAP code in v2.x.x looked like an incontinent Chihuahua or other small kickable type dog, had dragged it's way across a source file. It got rewritten twice, once by Alan to get the code into something understandable by humans, and then once again by me to get rid of all the weird legacy crap like the attrmap file. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html