eap-ttls proxy and ldap
basile
bmathieu at siris.sorbonne.fr
Wed Feb 28 17:07:23 CET 2007
hi
i try to proxy eap-ttls request from a freeradius server to another
i use outer identity anonymous at domainename and username login at domainename
first server proxy to the second a request with anonymous as username
so it don t work
if i use outer identity anonymous at anoterdomain ( anoterdomain is local
to the first server )
all works fine , the proxy request is with login as username
i use freeradius 1.1.3 on debian on this server
here are my logs
i have other proxy that works well
thanks
rad_recv: Access-Request packet from host xxx:1814, id=36, length=162
User-Name = "anonymous"
Framed-MTU = 1400
Called-Station-Id = "000d.eddf.7aa6"
Calling-Station-Id = "0002.2d70.02a2"
Service-Type = Login-User
Message-Authenticator = 0xdd3f8213af874ac3b02b2ad676fa70cc
EAP-Message =
0x0202001e01616e6f6e796d6f757340656e632e736f72626f6e6e652e6672
NAS-Port-Type = Wireless-802.11
NAS-Port = 165300
NAS-IP-Address = xxx
NAS-Identifier = "xxx"
Proxy-State = 0x3336
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 2
modcall[authorize]: module "preprocess" returns ok for request 2
rlm_eap: EAP packet type response id 2 length 30
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
modcall[authorize]: module "eap" returns updated for request 2
users: Matched entry DEFAULT at line 14
modcall[authorize]: module "files" returns ok for request 2
modcall: leaving group authorize (returns updated) for request 2
Found Autz-Type enc
Processing the authorize section of radiusd.conf
modcall: entering group enc for request 2
rlm_ldap: - authorize
rlm_ldap: performing user authorization for anonymous
radius_xlat: '(uid=anonymous)'
radius_xlat: 'dc=enc,dc=sorbonne,dc=fr'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in dc=enc,dc=sorbonne,dc=fr, with filter
(uid=anonymous)
rlm_ldap: object not found or got ambiguous search result
rlm_ldap: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
modcall[authorize]: module "enc" returns notfound for request 2
modcall: leaving group enc (returns notfound) for request 2
rad_check_password: Found Auth-Type pap
auth: type "PAP"
Processing the authenticate section of radiusd.conf
modcall: entering group PAP for request 2
rlm_pap: Attribute "Password" is required for authentication.
modcall[authenticate]: module "pap" returns invalid for request 2
modcall: leaving group PAP (returns invalid) for request 2
auth: Failed to validate the user.
Delaying request 2 for 1 seconds
Finished request 2
Going to the next request
Waking up in 3 seconds...
More information about the Freeradius-Users
mailing list