problem with freeradius and ldaps (Active Directory)
Hi, I'm trying to configure freeradius (1.0.1) to use an ldaps server (without start_tls, it's an Active Directory). But I'm not able to obtain any response. In fact, the freeradius crashes with just a: rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:1074, id=88, length=29 Discarding duplicate request from client localhost:1074 - ID: 88 (client is localhost because I was using radclient, but remote attempts show the same behaviour). Normal ldap against the same server is correct. For the ldaps configuration I've added just: port = 636 tls_require_cert = "never" though even with the server certificate: tls_certfile = ./certs/xxxx_cacert.pem the result is the same. I don't know which is the problem exactly... Has anyone sucessfully configured freeradius against an Active Directory with LDAPS? Any ideas are apreciated. thanks.
"Roberto S. G." <roberto.santos@unileon.es> wrote:
But I'm not able to obtain any response. In fact, the freeradius crashes with just a:
rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:1074, id=88, length=29 Discarding duplicate request from client localhost:1074 - ID: 88
It's not a crash. It's telling you that it's still processing the previous request.
Has anyone sucessfully configured freeradius against an Active Directory with LDAPS?
Yes. Run the server in debugging mode to see where it hangs. Alan DeKok.
I'm using freeradius 1.0.2 with ldaps. I had the same problem (freeradius crash) due, I think, to a bug in openldap or openssl libraries. Now I have it working with stunnel to add the ssl layer. Jose T. Roberto S. G. wrote:
Hi,
I'm trying to configure freeradius (1.0.1) to use an ldaps server (without start_tls, it's an Active Directory). But I'm not able to obtain any response. In fact, the freeradius crashes with just a:
rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:1074, id=88, length=29 Discarding duplicate request from client localhost:1074 - ID: 88
(client is localhost because I was using radclient, but remote attempts show the same behaviour).
Normal ldap against the same server is correct. For the ldaps configuration I've added just: port = 636 tls_require_cert = "never"
though even with the server certificate: tls_certfile = ./certs/xxxx_cacert.pem
the result is the same. I don't know which is the problem exactly...
Has anyone sucessfully configured freeradius against an Active Directory with LDAPS? Any ideas are apreciated.
thanks.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
Alan DeKok -
Jose Tomas Ochayta -
Roberto S. G.