ldap - freeradius

[Ivan Kalik]

http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#It_says_.22Could_not_link_..._file_not_found.22.2C_what_do_I_do.3F

Ivan Kalik
Kalik Informatika ISP


Dana 27/3/2008, "antoine vallée" <antoinevalle at hotmail.com> piše:

>
>Hi, 
>
>I'm trying to to dynamic vlans assignment with freeradius (eap-md5 and chap), a ldap directory, and a HP switch procurve 2650.
>I have added the following attributes in the ldap.attrmap as well as on the ldap users account. 
>And I've a (or more^^) mistake when I start freeradius. I've read a lot of doc, but i don't see what's wrong with my configuration.
>The problem seems to come from the ldap module: maybe because of the password, its in sha in the ldap directory:
>
>the debug:
>
>debian:~# freeradius -s -X
>Starting - reading configuration files ...
>reread_config:  reading radiusd.conf
>Config:   including file: /etc/freeradius/proxy.conf
>Config:   including file: /etc/freeradius/clients.conf
>Config:   including file: /etc/freeradius/snmp.conf
>Config:   including file: /etc/freeradius/eap.conf
>Config:   including file: /etc/freeradius/sql.conf
> main: prefix = "/usr"
> main: localstatedir = "/var"
> main: logdir = "/var/log/freeradius"
> main: libdir = "/usr/lib/freeradius"
> main: radacctdir = "/var/log/freeradius/radacct"
> main: hostname_lookups = no
> main: max_request_time = 30
> main: cleanup_delay = 5
> main: max_requests = 1024
> main: delete_blocked_requests = 0
> main: port = 0
> main: allow_core_dumps = no
> main: log_stripped_names = no
> main: log_file = "/var/log/freeradius/radius.log"
> main: log_auth = no
> main: log_auth_badpass = no
> main: log_auth_goodpass = no
> main: pidfile = "/var/run/freeradius/freeradius.pid"
> main: user = "freerad"
> main: group = "freerad"
> main: usercollide = no
> main: lower_user = "no"
> main: lower_pass = "no"
> main: nospace_user = "no"
> main: nospace_pass = "no"
> main: checkrad = "/usr/sbin/checkrad"
> main: proxy_requests = yes
> proxy: retry_delay = 5
> proxy: retry_count = 3
> proxy: synchronous = no
> proxy: default_fallback = yes
> proxy: dead_time = 120
> proxy: post_proxy_authorize = no
> proxy: wake_all_if_all_dead = no
> security: max_attributes = 200
> security: reject_delay = 1
> security: status_server = no
> main: debug_level = 0
>read_config_files:  reading dictionary
>read_config_files:  reading naslist
>Using deprecated naslist file.  Support for this will go away soon.
>read_config_files:  reading clients
>read_config_files:  reading realms
>radiusd:  entering modules setup
>Module: Library search path is /usr/lib/freeradius
>Module: Loaded exec
> exec: wait = yes
> exec: program = "(null)"
> exec: input_pairs = "request"
> exec: output_pairs = "(null)"
> exec: packet_type = "(null)"
>rlm_exec: Wait=yes but no output defined. Did you mean output=none?
>Module: Instantiated exec (exec)
>Module: Loaded expr
>Module: Instantiated expr (expr)
>Module: Loaded PAP
> pap: encryption_scheme = "crypt"
>Module: Instantiated pap (pap)
>Module: Loaded CHAP
>Module: Instantiated chap (chap)
>Module: Loaded MS-CHAP
> mschap: use_mppe = yes
> mschap: require_encryption = no
> mschap: require_strong = no
> mschap: with_ntdomain_hack = no
> mschap: passwd = "(null)"
> mschap: ntlm_auth = "(null)"
>Module: Instantiated mschap (mschap)
>Module: Loaded eap
> eap: default_eap_type = "md5"
> eap: timer_expire = 60
> eap: ignore_unknown_eap_types = no
> eap: cisco_accounting_username_bug = no
>rlm_eap: Loaded and initialized type md5
>rlm_eap: Loaded and initialized type leap
> gtc: challenge = "Password: "
> gtc: auth_type = "PAP"
>rlm_eap: Loaded and initialized type gtc
> mschapv2: with_ntdomain_hack = no
>rlm_eap: Loaded and initialized type mschapv2
>Module: Instantiated eap (eap)
>Module: Loaded preprocess
> preprocess: huntgroups = "/etc/freeradius/huntgroups"
> preprocess: hints = "/etc/freeradius/hints"
> preprocess: with_ascend_hack = no
> preprocess: ascend_channels_per_line = 23
> preprocess: with_ntdomain_hack = no
> preprocess: with_specialix_jetstream_hack = no
> preprocess: with_cisco_vsa_hack = no
> preprocess: with_alvarion_vsa_hack = no
>Module: Instantiated preprocess (preprocess)
>Module: Loaded realm
> realm: format = "suffix"
> realm: delimiter = "@"
> realm: ignore_default = no
> realm: ignore_null = no
>Module: Instantiated realm (suffix)
>Module: Loaded files
> files: usersfile = "/etc/freeradius/users"
> files: acctusersfile = "/etc/freeradius/acct_users"
> files: preproxy_usersfile = "/etc/freeradius/preproxy_users"
> files: compat = "no"
>Module: Instantiated files (files)
>radiusd.conf[736] Failed to link to module 'rlm_ldap': rlm_ldap.so: cannot open shared object file: No such file or directory
>radiusd.conf[1855] Unknown module "ldap".
>radiusd.conf[1773] Failed to parse authorize section.
>debian:~#
>
>
>
>radiusd.conf:
>
> ldap {
>        server = "ip address" 
>        identity = "cn=******* ******,ou=legris,dc=legris_industries"
>        password = "password"
>        basedn = "dc=uid,ou=legris,dc=legris_industries"
>        # filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" #
>        # base_filter = "(objectclass=radiusprofile)"
>
>                start_tls = no
>
>                access_attr = "dialupAccess"
>
>                dictionary_mapping = ${raddbdir}/ldap.attrmap
>
>                ldap_connections_number = 5
>
>                password_header = "{sha}"
>
>                password_attribute = userPassword
>
>
>        }
>
>and the authorize part:
>
> authorize {
>        preprocess
>        chap
>        suffix
>        eap
>        files
>        ldap
>}
>
>
>Can anybody tell me where the problem comes from?
>Thanks.
>
>Antoine.
>
>
>
>
>_________________________________________________________________
>Découvrez les profils Messenger de vos amis !
>http://home.services.spaces.live.com/
>