Hi I am new using freeradius. I am trying to configure freeradius to authenticate with LDAP and it is working well. Also I want to use a local user in the users file to use from network manager server but this user must be authenticated in local and don´t go to the LDAP. This is my configuration: /etc/raddb/sites-available/default authorize { preprocess chap mschap digest files ldap } /etc/raddb/users admin Cleartext-Password := ¨setup¨ DEFAULT LDAP-GROUP == ¨Network-monitor” DEFAULT Auth-Type = Local Fall-Through = yes With this configuration always is working LDAP, if you do a debug using the local user I can see: - [ files ] returns ok - Now start again LDAP ?? …. WARNING: Auth-Type already set. Not setting to PAP Failed to authenticate the user I don’t know why it trying using LDAP. Please, would you mind the simplest way to have a local user and LDAP working. If it is the local user don´t use LDAP or if LDAP not found the user user local file. Regards Manuel Izquierdo Calvo Senior Technical Specialist Mail: mizq14@gmail.com <mailto:mizq14@gmail.com> Mob: + 61 431 452 049
Hi,
This is my configuration:
no, its just a small small bit of your configuration in users file
DEFAULT Auth-Type = Local
you dont need this line
- [ files ] returns ok - Now start again LDAP ?? .... WARNING: Auth-Type already set. Not setting to PAP Failed to authenticate the user
try this in your bit of config that you did provide change files to files { ok = return } alan
Hi I put this configuration and now the local user is fine but LDAP is not working. Error: [ldap] User found in group RS-Network-customer [files] users. Matched entry DEFAULT at line 233 <— DEFAULT LDAD-GROUP IS OK ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user. There is a problem with the Auth-Type ?? Manuel
On 5 Jan 2015, at 11:14 pm, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
This is my configuration:
no, its just a small small bit of your configuration
in users file
DEFAULT Auth-Type = Local
you dont need this line
- [ files ] returns ok - Now start again LDAP ?? .... WARNING: Auth-Type already set. Not setting to PAP Failed to authenticate the user
try this in your bit of config that you did provide
change
files
to
files { ok = return }
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Jan 5, 2015, at 7:38 AM, Manuel Izquierdo <mizq14@gmail.com> wrote:
Hi
I put this configuration and now the local user is fine but LDAP is not working. Error:
[ldap] User found in group RS-Network-customer [files] users. Matched entry DEFAULT at line 233 <— DEFAULT LDAD-GROUP IS OK ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user.
There is a problem with the Auth-Type ??
You need to run the “pap” module. The simplest way to do this is the following: authorize { … files if (noop) { … all of the OTHER things in “authorize” ... } pap } Alan DeKok.
That´s right, WORKING Thanks a lot Manuel
On 5 Jan 2015, at 11:45 pm, Alan DeKok <aland@deployingradius.com> wrote:
On Jan 5, 2015, at 7:38 AM, Manuel Izquierdo <mizq14@gmail.com> wrote:
Hi
I put this configuration and now the local user is fine but LDAP is not working. Error:
[ldap] User found in group RS-Network-customer [files] users. Matched entry DEFAULT at line 233 <— DEFAULT LDAD-GROUP IS OK ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user Failed to authenticate the user.
There is a problem with the Auth-Type ??
You need to run the “pap” module. The simplest way to do this is the following:
authorize { … files if (noop) { … all of the OTHER things in “authorize” ... }
pap }
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Manuel Izquierdo