radius+ldap+peap
Arjuna Scagnetto
arjuna at ts.infn.it
Thu May 17 16:43:32 CEST 2007
can someone tell me a good tutorial about making work freeradius with
ldap and peap on a 802.1x architecture ?
For the moment my freeradius server dies with a Segmentation Fault, i
think it's caused by a misunderstanding between peap and ldap but i'm
not sure.
radius.conf{
ldap {
server = "127.0.0.1"
#identity = "cn=manager"
#password = prova
basedn = "dc=example,dc=com"
filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
base_filter = "(objectClass=radiusprofile)"
password_attribute = userPassword
}
}
user in ldap database {
dn: uid=wclient,ou=dot1x,dc=example,dc=com
objectClass: top
objectClass: radiusprofile
objectClass: inetOrgPerson
cn: wclient
sn: wclient
uid: wclient
description: 802.1x user
userPassword: {SSHA}xxxxxxxxxxxxxxxxxxx
}
Now when i try to authenticate the wireless station freeradius die with
a Segmentation Fault:
...
_realm: No '@' in User-Name = "wclient", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 5
rlm_eap: EAP packet type response id 6 length 80
rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
modcall[authorize]: module "eap" returns updated for request 5
rlm_ldap: - authorize
rlm_ldap: performing user authorization for wclient
radius_xlat: '(uid=wclient)'
radius_xlat: 'dc=example,dc=com'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in dc=example,dc=com, with filter (uid=wclient)
rlm_ldap: Added password {SSHA}tymOzgljNoVkhZT+K1+jUIW7HKkX3Epe in check
items
rlm_ldap: looking for check items in directory...
rlm_ldap: Adding userPassword as User-Password, value
{SSHA}tymOzgljNoVkhZT+K1+jUIW7HKkX3Epe & op=21
rlm_ldap: looking for reply items in directory...
rlm_ldap: user wclient authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
modcall[authorize]: module "ldap" returns ok for request 5
Segmentation fault
thanks for helping
Arjuna
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the Freeradius-Users
mailing list