Empty user attributes in proxied request
Attou eric
gouroueric at yahoo.fr
Thu Jan 5 21:06:55 CET 2012
Hi Every body!
I'm setting up an Eduroam infrastructure authenticating through
a LDAP directory.
I conveniently configure realms for local request and remote request
as well.
But, i'm dealing with empty user attribute issue while attempting
to authenticate with the eduroam user. It seems that although the
request is proxied, my server tries to locally check the authorized
attributes of the user against my local ldap server. And since no
such user exists ldap returns : object not found
Thu Jan 5 20:19:26 2012 : Debug: rlm_ldap: object not found
Thu Jan 5 20:19:26 2012 : Debug: search failed
Thu Jan 5 20:19:26 2012 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0
Thu Jan 5 20:19:26 2012 : Debug: modsingle[authorize]: returned from ldap (rlm_ldap) for request 0
Thu Jan 5 20:19:26 2012 : Debug: ++[ldap] returns notfound
Next, my server proxies an other request with empty attributes
certainly resulting from the previous object found result :
Sending Access-Request of id 144 to 193.190.198.59 port 1812
User-Name := ""
User-Password := ""
Service-Type := Authenticate-Only
Message-Authenticator := 0x00000000000000000000000000000000
NAS-Identifier := "Status Check. Are you alive?"
Thu Jan 5 20:19:47 2012 : Debug: No response to status check 3 from home server 193.190.198.59 port 1812
What may have been misconfigured ?
Note : The home server is alive since i test it through radtest command
Please see here in attachment the log of user authentication attempt
Thanks for your help.
Eric ATTOU
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120105/f2e0af16/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: radlog
Type: application/octet-stream
Size: 4043 bytes
Desc: not available
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120105/f2e0af16/attachment.obj>
More information about the Freeradius-Users
mailing list