The LDAP Thing again...

[Alan DeKok]

Kent Thomas wrote:
> I'm new to FreeRadius, and have struggled for a couple of days now on how to
> get LDAP authentication to work.

  LDAP is a database, NOT an authentication server.

>  It would appear that the LDAP is actually
> authenticating, but then something goes wrong following that.  I'm sure it
> is just something set wrong in the users file, but I do need some help.
> Forgive me if this has already been covered.
...
> Sat Sep  8 23:33:22 2007 : Debug: rlm_ldap: - authorize
> Sat Sep  8 23:33:22 2007 : Debug: rlm_ldap: performing user authorization
> for kent

  Authorization is NOT authentication.

> Sat Sep  8 23:33:22 2007 : Debug: rlm_ldap: looking for check items in
> directory...
> Sat Sep  8 23:33:22 2007 : Debug: rlm_ldap: looking for reply items in
> directory...

  You do NOT have a "known good" password configured for the user.

> Sat Sep  8 23:33:22 2007 : Debug:   rad_check_password:  Found Auth-Type
> System
> Sat Sep  8 23:33:22 2007 : Debug: auth: type "System"
> Sat Sep  8 23:33:22 2007 : Debug:   ERROR: Unknown value specified for
> Auth-Type.  Cannot perform requested action.

> -----------------radiusd.conf---------------------------------------------

  PLEASE don't include the configuration files in your email.  They're
not necessary.  There's a REASON the FAQ, etc. say to post the debug
log, and DOES NOT say to post all of the configuration files.

  Alan DeKok.