groupcmp fails during tunneled request

[Matthieu Lazaro]

Ivan Kalik a écrit :
>> Content of my huntgroup file.
>> WIFI            NAS-Identifier == "accessPoint-Manager"
>>                 Ldap-Group  == wireless,
>>                 Ldap-Group  == wireless2,
>> REM             NAS-IP-Address == 10.44.12.2
>>                 Ldap-Group == REM
>>
>>     
>
> OK.
>
>   
>> Content of my user file:
>> DEFAULT Framed-Protocol == PPP
>>         Framed-Protocol = PPP,
>>         Framed-Compression = Van-Jacobson-TCP-IP
>> DEFAULT Hint == "CSLIP"
>>         Framed-Protocol = SLIP,
>>         Framed-Compression = Van-Jacobson-TCP-IP
>> DEFAULT Hint == "SLIP"
>>         Framed-Protocol = SLIP
>> DEFAULT Ldap-Group == BANNED , Auth-Type := Reject
>>         Reply-Message = "Account disabled.  Please call the helpdesk."
>> DEFAULT Huntgroup-Name == WIFI, Auth-Type = eap
>>         Fall-Through = no,
>>     
>
> That should match (remove that Auth-Type from this and REM entry). But ...
>
>   
>> DEFAULT Huntgroup-Name == REM, Auth-Type = ldap
>>         Fall-Through = no,
>> DEFAULT Auth-Type := Reject
>>         Reply-Message = "Please call the helpdesk."
>>
>>     
> ...
>   
>> server inner-tunnel {
>> +- entering group authorize {...}
>> ++[mschap] returns noop
>> [suffix] No '@' in User-Name = "alicebob", looking up realm NULL
>> [suffix] No such realm "NULL"
>> ++[suffix] returns noop
>> [eap] EAP packet type response id 7 length 11
>> [eap] No EAP Start, assuming it's an on-going EAP conversation
>> ++[eap] returns updated
>> rlm_ldap: Entering ldap_groupcmp()
>> [files]         expand: dc=companyname,dc=com -> dc=companyname,dc=com
>>     
>
> ... you haven't enabled preprocess in inner-tunnel server. Huntgroups are
> processed in preprocess.
>
> Ivan Kalik
> Kalik Informatika ISP
>
>   
Hello Again,

I am having an issue with the groups again.....

WIFI            NAS-Identifier == "accessPoint-Manager"
                Ldap-Group  == wireless,
                Ldap-Group  == wireless2,

When I have the attribute wireless it works without a flaw, if I have both, it's ok, if I have *ONLY* wireless2 it says "no huntgroup " and I'm rejected.

Any ideas?

Best Regards,

Matthew