AD Integration -No Auth Type
Hi, Trying to integrate AD with FR I have successfully joined the domain and also ntlm_auth status as per attached file is OK But when I telnet to my cisco switch I get the subjected error. The relevant files are attached. Im using FR 2.1.0 for 2.1.0 version what elso do i need to do except enabling and editing ntlm_auth line in the mschap module as per Alan's deploying radius tutorial. KIndly go through attached files and help me in this regard Regards, Raheel
Raheel Itrat wrote:
Trying to integrate AD with FR I have successfully joined the domain and also ntlm_auth status as per attached file is OK
But when I telnet to my cisco switch I get the subjected error. The relevant files are attached. Im using FR 2.1.0
Don't attach the configuration files. Nothing in the documentation says that this is a good idea.
for 2.1.0 version what elso do i need to do except enabling and editing ntlm_auth line in the mschap module as per Alan's deploying radius tutorial.
My tutorial is complete. Following it *will* work. If it doesn't work, it's because you didn't follow the documentation.
KIndly go through attached files and help me in this regard
No. If they're not important enough for you to read, they're not important enough for us to read, either. Alan DeKok.
Hello. I am using Freeradius 2 with openldap 2.3.43 on my CentOS 5. My OPenldap works grate without freeradius, and freeradius works without ldap. But i cant connect ldap and freeradius. my ldapsearch output: ldapsearch -x # extended LDIF # # LDAPv3 # base <dc=my-domain,dc=com> (default) with scope subtree # filter: (objectclass=*) # requesting: ALL # # my-domain.com dn: dc=my-domain,dc=com objectClass: organization objectClass: dcObject dc: my-domain o: my-domain # People, my-domain.com dn: ou=People,dc=my-domain,dc=com objectClass: organizationalUnit ou: People # group, my-domain.com dn: ou=group,dc=my-domain,dc=com objectClass: organizationalUnit ou: group # machines, my-domain.com dn: ou=machines,dc=my-domain,dc=com objectClass: organizationalUnit ou: machines # office, group, my-domain.com dn: cn=office,ou=group,dc=my-domain,dc=com objectClass: posixGroup description: office group gidNumber: 10000 cn: office # gchkhetiani, People, my-domain.com dn: uid=gchkhetiani,ou=People,dc=my-domain,dc=com objectClass: posixAccount objectClass: inetOrgPerson objectClass: organizationalPerson objectClass: person homeDirectory: /home/gchkhetiani loginShell: /bin/bash uid: gchkhetiani cn:: 4YOS4YOY4YOd4YOg4YOS4YOYIOGDqeGDruGDlOGDouGDmOGDkOGDnOGDmA== uidNumber: 10000 gidNumber: 10000 sn:: 4YOp4YOu4YOU4YOi4YOY4YOQ4YOc4YOY givenName:: 4YOS4YOY4YOd4YOg4YOS4YOY # search result search: 2 result: 0 Success # numResponses: 7 # numEntries: 6 my /etc/raddb/modules/ldap: ldap { # # Note that this needs to match the name in the LDAP # server certificate, if you're using ldaps. server = "server2.******.ge" identity = "cn=Manager,dc=my-domain,dc=com" password = ****** basedn = "dn=my-domain,dn=com" filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})" radtest command: radtest gchkhetiani **** localhost 2 testing123 radiusd -X output: [ldap] performing user authorization for gchkhetiani [ldap] expand: %{Stripped-User-Name} -> [ldap] expand: %{User-Name} -> gchkhetiani [ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=gchkhetiani) [ldap] expand: dn=my-domain,dn=com -> dn=my-domain,dn=com rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to server2.******.ge:389, authentication 0 rlm_ldap: bind as cn=Manager,dc=my-domain,dc=com/****** to server2.******.ge:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in dn=my-domain,dn=com, with filter (uid=gchkhetiani) rlm_ldap: ldap_search() failed: Invalid DN syntax [ldap] search failed rlm_ldap: ldap_release_conn: Release Id: 0 ++[ldap] returns fail Invalid user: [gchkhetiani/svani] (from client localhost port 2) Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> gchkhetiani attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 218 to 127.0.0.1 port 35291 There is rlm_ldap: ldap_search() failed: Invalid DN syntax error. How can I fix it?
On 02/04/2011 18:29, ziko wrote:
Hello. I am using Freeradius 2 with openldap 2.3.43 on my CentOS 5.
My OPenldap works grate without freeradius, and freeradius works without ldap.
But i cant connect ldap and freeradius.
my ldapsearch output:
ldapsearch -x # extended LDIF # # LDAPv3 # base <dc=my-domain,dc=com> (default) with scope subtree ..........^^...........^^
my /etc/raddb/modules/ldap:
ldap { # # Note that this needs to match the name in the LDAP # server certificate, if you're using ldaps. server = "server2.******.ge" identity = "cn=Manager,dc=my-domain,dc=com" password = ****** basedn = "dn=my-domain,dn=com" ............^^...........^^ radiusd -X output:
.............
rlm_ldap: performing search in dn=my-domain,dn=com, with filter (uid=gchkhetiani) rlm_ldap: ldap_search() failed: Invalid DN syntax
There is rlm_ldap: ldap_search() failed: Invalid DN syntax error. How can I fix it?
...configure the basedn correctly!! wrong: basedn = "dn=my-domain,dn=com" correct: basedn = "dc=my-domain,dc=com" -James
Thank you very much! I am new to ldap :( thank you it works now! ________________________________ From: James J J Hooper <jjj.hooper@bristol.ac.uk> To: freeradius-users@lists.freeradius.org Sent: Sat, April 2, 2011 9:54:26 PM Subject: Re: freeradius+ldap: Invalid DN syntax On 02/04/2011 18:29, ziko wrote:
Hello. I am using Freeradius 2 with openldap 2.3.43 on my CentOS 5.
My OPenldap works grate without freeradius, and freeradius works without ldap.
But i cant connect ldap and freeradius.
my ldapsearch output:
ldapsearch -x # extended LDIF # # LDAPv3 # base <dc=my-domain,dc=com> (default) with scope subtree ..........^^...........^^
my /etc/raddb/modules/ldap:
ldap { # # Note that this needs to match the name in the LDAP # server certificate, if you're using ldaps. server = "server2.******.ge" identity = "cn=Manager,dc=my-domain,dc=com" password = ****** basedn = "dn=my-domain,dn=com" ............^^...........^^ radiusd -X output:
.............
rlm_ldap: performing search in dn=my-domain,dn=com, with filter (uid=gchkhetiani) rlm_ldap: ldap_search() failed: Invalid DN syntax
There is rlm_ldap: ldap_search() failed: Invalid DN syntax error. How can I fix it?
...configure the basedn correctly!! wrong: basedn = "dn=my-domain,dn=com" correct: basedn = "dc=my-domain,dc=com" -James - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
Alan DeKok -
James J J Hooper -
Raheel Itrat -
ziko