Multiple OUs in AD

[Peter Bushnell]

Hello All,

 

Have a working FreeRADIUS server up and running, this is used for
authenticating student users on to a wireless network against a M$ 2003
server with Active Directory using LDAP.

 

Problem is I only seem to be able to authenticate users against one OU, if I
set the basedn simply to the domain the server just sits there and never
returns an accept or reject.

 

So how can I set my FR box to authenticate against all users in AD?

 

Here is my LDAP cfg from radiusd.conf.

 

        ldap {

                server = "brassbullet.bnc.ox.ac.uk"

                identity =
"cn=administrator,cn=users,dc=bnc,dc=ox,dc=ac,dc=uk"

                password = password

                basedn = "ou=students,dc=bnc,dc=ox,dc=ac,dc=uk"

                filter
="(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})"

                start_tls = no

                ldap_connections_number = 5

                password_attribute = userPassword

                timeout = 4

                timelimit = 3

                net_timeout = 1

                compare_check_items = yes

            }

 

Any help appreciated,

 

Peter Bushnell
IT Officer
Brasenose College
Email:  <mailto:peter.bushnell at bnc.ox.ac.uk> peter.bushnell at bnc.ox.ac.uk
Tel: +44 1865 277513

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20060405/b872d144/attachment.html>