radiusprofile entry don't work

[Dusty Doris]

> hi all,
>
> excuse me for my bad english, I'm italian.
> i would to create a structure wich control the user's access on a WLAN
> by an auth-ldap.
> I have create a ldap directory witch basedn dc=unime,dc=it.
> now, like is write on the ldap_tutorial in the doc/ directory, i try to
> import this ldif file (modified for my interst). the authentication to
> be with the EAP-TLS protocol (it work fine) therefore I've deleted the
> sections of the passwords and for authentication.
>
> dn: dc=unime,dc=it
> objectClass: dcObject
> objectClass: organizationUnit
> ou: Unime.it Radius
> dc: unime
>
> dn: ou=radius,dc=unime,dc=it
> objectclass: organizationalunit
> ou: radius
>
> dn: ou=profiles,ou=radius,dc=unime,dc=it
> objectclass: organizationalunit
> ou: profiles
>
> dn: ou=users,ou=radius,dc=unime,dc=it
> objectclass: organizationalunit
> ou: users
>
> dn: uid=WLAN,ou=profiles,ou=radius,dc=unime,dc=it
> objectclass: radiusprofile
> uid: WLAN
> radiusServiceType: Framed-User
> radiusFramedProtocol: PPP
> radiusFramedIPNetmask: 255.255.255.0
> radiusFramedRouting: None
>
> dn: uid=Felice,ou=users,ou=radius,dc=mydomain,dc=com
> objectclass: radiusProfile
> uid: Felice
> radiusGroupName: WLAN
>
> the entry with uid  =WLAN don't work, this is the message returned is
> invalid syntax #0 approximately... I don't have my pc here.
>
> Anyone can help me?
>

Check the RADIUS-LDAPv3.schema file that you used.  That howto doc was
using an old one that used uid, the new one uses cn.  Go down to the
objectclass of radiusprofile and look what it says in MUST.  If it says
cn, then you will need to use cn or change that to uid.

example:

dn: cn=WLAN,ou=profiles,ou=radius,dc=unime,dc=it
objectclass: radiusprofile
cn: WLAN
radiusServiceType: ....

OR change that file.

objectclass
   ( 1.3.6.1.4.1.3317.4.3.2.1
      NAME 'radiusprofile'
      SUP top AUXILIARY
      DESC ''
      MUST cn

to

objectclass
   ( 1.3.6.1.4.1.3317.4.3.2.1
      NAME 'radiusprofile'
      SUP top AUXILIARY
      DESC ''
      MUST uid


I'd recommend just using cn, so you don't have to remember to modify it
everytime you install freeradius on a machine.

-Dusty Doris