PEAP + local = OK, same config + LDAP failed

Dustin Doris freeradius at mail.doris.cc
Tue Jun 14 15:41:48 CEST 2005


Never used EAP, but perhaps this will be helpful.

rlm_ldap: - authorize
rlm_ldap: performing user authorization for unrzwlan1
radius_xlat:  '(Userid=unrzwlan1)'
radius_xlat:  'ou=AAAuser,o=Universitaet Erlangen-Nuernberg,c=DE'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=AAAuser,o=Universitaet
Erlangen-Nuernberg,c=DE, with filter (Userid=unrzwlan1)
rlm_ldap: object not found or got ambiguous search result
rlm_ldap: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap" returns notfound for request 6


That looks pretty clear to me that either this user does not exist in your
ldap directory.  Perhaps you have the search filter incorrect?

Or, the user you are binding with does not have access to read that users
entry.

rlm_ldap: bind as cn=florian,ou=allro,ou=AAAdsadm,o=Universitaet
Erlangen-Nuernberg,c=DE/zope148FP to 131.188.3.53:400
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful


What happens if you do an ldapsearch from command line?

# ldapsearch -D "cn=florian,ou=allro,ou=AAAdsadm,o=Universitaet
Erlangen-Nuernberg,c=DE" -w zope148FP -b "ou=AAAuser,o=Universitaet
Erlangen-Nuernberg,c=DE" "(Userid=unrzwlan1)"






More information about the Freeradius-Users mailing list