Same config 1.1.2 but not work on 1.1.7 - not set Auth-Type

Rohaizam Abu Bakar haizam at myjaring.net
Tue Sep 11 11:09:07 CEST 2007


I've tried as recommended not to set Auth-Type but trying below will works 
in 1.1.2 but not on my recently upgraded to 1.1.7

Configs:-

############################
a) radiusd.conf

authorize {
        Autz-Type LDAP {
                        ldap1
        }

        Autz-Type ADSL {
                        ldapadsl1
        }

}
authenticate {

        Auth-Type ldap1 {
                ldap1
        Auth-Type ldapadsl1 {
                ldapadsl1
        }
}

b) users

DEFAULT                Huntgroup-Name == "adsl", ldapadsl1-Ldap-Group == 
"ADSL", Autz-Type := ADSL
DEFAULT         Autz-Type := LDAP
##################################



Results:-


In 1.1.2 - (Auth-Type ldap1 => working!!)

############################################

modcall: leaving group authorize (returns ok) for request 18
  Found Autz-Type LDAP
  Processing the authorize section of radiusd.conf
modcall: entering group LDAP for request 18
modcall: entering group redundant  for request 18
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test
radius_xlat:  '(uid=test)'
radius_xlat:  'ou=RADIUS,ou=People,dc=xxx,dc=xx'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=RADIUS,ou=People,dc=xxx,dc=xx, with filter 
(uid=test)
rlm_ldap: checking if remote access for test is allowed by dialupAccess
rlm_ldap: Added password {CRYPT}XXXXXXXX in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: Adding radiusFramedCompression as Framed-Compression, value 
Van-Jacobson-TCP-IP & op=11
rlm_ldap: Adding radiusFramedMTU as Framed-MTU, value 1500 & op=11
rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11
rlm_ldap: Adding radiusServiceType as Service-Type, value Framed-User & 
op=11
rlm_ldap: Setting Auth-Type = ldap1
rlm_ldap: user test authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 18
modcall: leaving group redundant  (returns ok) for request 18
modcall: leaving group LDAP (returns ok) for request 18
  rad_check_password:  Found Auth-Type ldap1
auth: type "ldap1"

######################################



In 1.1.7 (Auth-Type = Local => not working!!)

##########################################
modcall: leaving group authorize (returns ok) for request 1
  Found Autz-Type LDAP
  Processing the authorize section of radiusd.conf
modcall: entering group LDAP for request 1
modcall: entering group redundant  for request 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test
radius_xlat:  '(uid=test)'
radius_xlat:  'ou=RADIUS,ou=People,dc=xxx,dc=xx'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=RADIUS,ou=People,dc=xxx,dc=xx, with filter 
(uid=test)
rlm_ldap: checking if remote access for test is allowed by dialupAccess
rlm_ldap: Added password {CRYPT}XXXXXXXXXXXXX in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: Adding radiusFramedCompression as Framed-Compression = 
Van-Jacobson-TCP-IP
rlm_ldap: Adding radiusFramedMTU as Framed-MTU = 1500
rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol = PPP
rlm_ldap: Adding radiusServiceType as Service-Type = Framed-User
rlm_ldap: user test authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap1" returns ok for request 1
modcall: leaving group redundant  (returns ok) for request 1
modcall: leaving group LDAP (returns ok) for request 1
auth: type Local
auth: user supplied User-Password does NOT match local User-Password

###################################3





More information about the Freeradius-Users mailing list