1.1.6 xlat :- broken

Mike Sturdee sturdee at pathwaynet.com
Wed May 16 15:43:03 CEST 2007


I have a freeradius box (version 1.1.0) with the following (working) group
lookup.. On updating to 1.1.6 it appears the
%{Stripped-User-Name:-%{User-Name}} part is broken.. I see in cvs     there is
an update to head, "radiusd/src/main/xlat.c (1.115):  make ':-' work again".. I
have not had luck trying to merge relevant changes to the 1.1 branch.. Could
this be fixed in stable?


-- radiusd.conf:

ldap {
   ...

   gid = %{ldap:ldap:///dc=domain,dc=com?gidNumber?sub?(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectClass=%{Realm}))}

   groupname_attribute = cn
   groupmembership_filter = "(&(objectClass=posixGroup)(|(gidNumber=${gid})(memberUid=%{Stripped-User-Name:-%{User-Name}})))"
   do_xlat = yes

   ...
}


Debugging output:

rlm_ldap: Entering ldap_groupcmp()
radius_xlat:  'dc=domain,dc=com'
radius_xlat: Running registered xlat function of module ldap for string 'ldap:///dc=domain,dc=com?gidNumber?sub?(&(uid=%{Stripped-User-Name'
rlm_ldap: - ldap_xlat
radius_xlat:  'ldap:///dc=domain,dc=com?gidNumber?sub?(&(uid='
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in dc=domain,dc=com, with filter (&(uid=
rlm_ldap: ldap_search() failed: Bad search filter: (&(uid=
rlm_ldap: Search returned error
rlm_ldap: ldap_release_conn: Release Id: 0
radius_xlat:  '(&(objectClass=posixGroup)(|(gidNumber=mike)(objectClass=dialdomain)))(memberUid=mike)))'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in dc=domain,dc=com, with filter (&(cn=dial1)(&(objectClass=posixGroup)(|(gidNumber=mike)(objectClass=dialdomain)))(memberUid=mike))))
rlm_ldap: ldap_search() failed: Bad search filter: (&(cn=dial1)(&(objectClass=posixGroup)(|(gidNumber=mike)(objectClass=dialdomain)))(memberUid=mike))))
rlm_ldap: ldap_release_conn: Release Id: 0
rlm_ldap::ldap_groupcmp: Search returned error


Thanks,

-Mike



More information about the Freeradius-Users mailing list