Hi, I've installed the latest version of freeradius(1.0.5), and when using it with LDAP i'm having some problems. Some output is being truncated( mainly in cisco-avpairs ): rlm_ldap: performing search in o=radius, with filter (uid=wy09jmru) rlm_ldap: Added password i2dhmljk in check items rlm_ldap: looking for check items in directory... rlm_ldap: Adding ispRadiusLoginLimit as Simultaneous-Use, value 1 & op=21 rlm_ldap: Adding ispRadiusAuthType as Auth-Type, value 1 & op=21 rlm_ldap: Adding ispRadiusPassword as User-Password, value password & op=21 rlm_ldap: Adding ispRadiusUserName as User-Name, value wy09jmru & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: Adding ispRadiusCiscoAVPair as Cisco-AVPair, value lcp:interface-config & op=11 rlm_ldap: Adding ispRadiusCiscoAVPair as Cisco-AVPair, value lcp:interface-config & op=11 rlm_ldap: Adding ispRadiusFramedIPAddress as Framed-IP-Address, value 12.1.1.8 & op=11 rlm_ldap: Adding ispRadiusFramedProtocol as Framed-Protocol, value 1 & op=11 rlm_ldap: Adding ispRadiusServiceType as Service-Type, value 2 & op=11 rlm_ldap: user wy09jmru authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 2 modcall: group authorize returns ok for request 2 rad_check_password: Found Auth-Type 1 auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 2 rlm_ldap: - authenticate rlm_ldap: login attempt by "wy09jmru" with password "password" rlm_ldap: user DN: uid=wy09jmru,ou=People,o=xxx.xxx,o=Radius rlm_ldap: (re)connect to ldap:389, authentication 1 rlm_ldap: bind as uid=wy09jmru,ou=People,o=xxx.xxx,o=Radius/i2dhmljk to ldap:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: user wy09jmru authenticated succesfully modcall[authenticate]: module "ldap" returns ok for request 2 modcall: group Auth-Type returns ok for request 2 Processing the session section of radiusd.conf modcall: entering group session for request 2 radius_xlat: 'wy09jmru@xxx.xxx' rlm_sql (sql): sql_set_user escaped user --> 'wy09jmru@xxx.xxx' radius_xlat: 'SELECT COUNT(*) FROM radacct WHERE UserName='wy09jmru@xxx.xxx' AND AcctStopTime = 0' rlm_sql (sql): Reserving sql socket id: 8 rlm_sql (sql): Released sql socket id: 8 modcall[session]: module "sql" returns ok for request 2 modcall: group session returns ok for request 2 Sending Access-Accept of id 7 to 10.16.2.10:55521 Cisco-AVPair = "lcp:interface-config" Framed-IP-Address = 12.1.1.8 Framed-Protocol = PPP Service-Type = Framed-User Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... Ldapsearch show the following: (...) ispRadiusCiscoAVPair: lcp:interface-config#1=ip vrf forwarding v24:xxx ispRadiusCiscoAVPair: lcp:interface-config#2=ip unnumbered loopback14 (...) Anyone got the same problem? Thanks for the time. Best Regards, Pedro Marcolino
Pedro Marcolino wrote:
Ldapsearch show the following:
(...) ispRadiusCiscoAVPair: lcp:interface-config#1=ip vrf forwarding v24:xxx ispRadiusCiscoAVPair: lcp:interface-config#2=ip unnumbered loopback14 (...)
Anyone got the same problem? Thanks for the time.
It's a known bug in rlm_ldap. You can get the patch here: http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/src/modules/rlm_ldap/rl... -- Nicolas Baradakis
Sorry for the late reply. Thanks for the info, i'll give it a try. Best Regards, Pedro Marcolino On Mon, 07 Nov 2005 14:27:28 +0100 Nicolas Baradakis <nbk@sitadelle.com> wrote:
Pedro Marcolino wrote:
Ldapsearch show the following:
(...) ispRadiusCiscoAVPair: lcp:interface-config#1=ip vrf forwarding v24:xxx ispRadiusCiscoAVPair: lcp:interface-config#2=ip unnumbered loopback14 (...)
Anyone got the same problem? Thanks for the time.
It's a known bug in rlm_ldap. You can get the patch here: http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/src/modules/rlm_ldap/rl...
-- Nicolas Baradakis
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- PEDRO MARCOLINO OPERAÇÕES DE REDE __________________________ AR TELECOM | Grupo SGC Telefone: (+351) 210 301 397 Telemóvel: (+351) 969 572 548 Fax: (+351) 210 301 464 E-mail: pedro.marcolino@artelecom.pt Edifício Diogo Cão, Doca de Alcântara 1350-352 Lisboa www.artelecom.pt __________________________ Esta mensagem (e eventuais ficheiros anexos) destina-se exclusivamente aos destinatários nela indicados e pode conter matéria confidencial e legalmente protegida. Se recebeu esta mensagem por engano, a AR Telecom agradece que informe de imediato o remetente e que elimine a mensagem e os ficheiros sem os reproduzir. This message (and any files attached) is intended only for the named addressees and may contain confidential and privileged information. If you have received this message in error, AR Telecom appreciates you contact the sender and delete the message and any files attached without reproduction.
participants (2)
-
Nicolas Baradakis -
Pedro Marcolino