Found Auth-Type = LDAP WARNING: Unknown value specified for Auth-Type.

[Neal Vadekar]

i am using freeradius 2.1.7 on centos 5.5, i have configured openldap
and wish to have authentication/authorization against this datasource.

i have configured my radius.conf as follows:

authorize {
   preprocess
   files
   ldap
}
#
authenticate {
   Auth-Type LDAP {
       ldap
   }
}

i have configured my users file as follows:

test55    Cleartext-Password := "test55"
DEFAULT Auth-Type = System
   Fall-Through = 1
DEFAULT Auth-Type := LDAP
   Fall-Through = 1

i have configured my modules/ldap file as follows:

ldap {
   server = "localhost"
   identity = "cn=Manager,dc=example,dc=com"
   password = secret
   basedn = "ou=users,dc=example,dc=com"
   filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
   ldap_connections_number = 5
   timeout = 4
   timelimit = 3
   net_timeout = 1
   tls {
       start_tls = no
   }
   dictionary_mapping = ${raddbdir}/ldap.attrmap
   password_attribute = userPassword
}

i have setup openldap with a user in users.example.com called testldap
with a cleartext password of testldap

when i run “radtest testldap testldap localhost 10 testing123” the out
put is as follows:

rad_recv: Access-Request packet from host 127.0.0.1 port 40626,
id=223, length=60
       User-Name = "testldap"
       User-Password = "testldap"
       NAS-IP-Address = 172.16.159.11
       NAS-Port = 10
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
[suffix] No '@' in User-Name = "testldap", looking up realm NULL
[suffix] No such realm "NULL"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
++[unix] returns notfound
[files] users: Matched entry DEFAULT at line 212
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.
Authentication may fail because of this.
++[pap] returns noop
Found Auth-Type = LDAP
 WARNING: Unknown value specified for Auth-Type.  Cannot perform
requested action.
Failed to authenticate the user.
Using Post-Auth-Type Reject
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> testldap
attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 223 to 127.0.0.1 port 40626
Waking up in 4.9 seconds.
Cleaning up request 0 ID 223 with timestamp +4
Ready to process requests.

line 212 is my “DEFAULT Auth-Type := LDAP” line in the users file

no connection attempt is made against my openldap server.

I do not understand why i get the following error:

Found Auth-Type = LDAP
 WARNING: Unknown value specified for Auth-Type.  Cannot perform
requested action.

i can tell you when i use radtest with the test55 user directly
defined in the users file, it works, also, when I use a unix user in
the passwd/shadow files it also works.  there also appears to be no
entry in the dictonary file about ldap, but i don’t yet know enough to
know if that is relevant.

please assist, i wish to understand why this radtest does not work
when all the documentation I can find as I currently understand them
suggest it should work.

Neal