redundant LDAP server with free-radius

Alexei Monastyrnyi alexeim at orcsoftware.com
Thu Feb 1 13:13:39 CET 2007


Folks,
sorry for bringing this up again.

I am running FreeRADIUS 1.1.4 and OpenLDAP 2.3.32 on two Solaris10/x86 
hosts.

Non-redundant config works fine with FreeRADIUS and OpenLDAP on a single 
host.

modules {
    ldap {
    ....
    }
}

authorize {
...
        ldap
}


authenticate {
...
        Auth-Type LDAP {
                ldap
        }
}

When I use a redundant config as per instruction in docs, I have the 
"auth: No authenticate method (Auth-Type) configuration found for the 
request: Rejecting the user" in debugs and user is rejected. Please see 
config and debug output below. I guess I am mussing some fine detail 
here. Your help would be highly appreciated.

modules {
    ldap ds-01 {
    ....
    }
    ldap ds-02 {
    ....
    }
}

authorize {
...
        redundant {
                ds-02
                ds-01
        }
}


authenticate {
...
        Auth-Type LDAP {
                redundant {
                        ds-02
                        ds-01
                }
        }
}


Debug output

rad_recv: Access-Request packet from host 1.1.1.1:3283, id=29, length=47
        User-Name = "qwer"
        User-Password = "qwer"
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
  modcall[authorize]: module "mschap" returns noop for request 0
    rlm_realm: No '@' in User-Name = "qwer", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 0
modcall: entering group redundant  for request 0
rlm_ldap: - authorize
rlm_ldap: performing user authorization for qwer
radius_xlat:  '(&(objectClass=posixAccount)(l=*)(uid=qwer))'
radius_xlat:  'dc=my,dc=com'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to localhost:389, authentication 0
rlm_ldap: bind as / to localhost:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in dc=my,dc=com, with filter 
(&(objectClass=posixAccount)(l=*)(uid=qwer))
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: user alexeim authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ds-02" returns ok for request 0
modcall: leaving group redundant  (returns ok) for request 0
modcall: leaving group authorize (returns ok) for request 0
auth: No authenticate method (Auth-Type) configuration found for the 
request: Rejecting the user
auth: Failed to validate the user.
Delaying request 0 for 1 seconds
Finished request 0



TIA
A.



More information about the Freeradius-Users mailing list