Issue with OpenLdap and FreeRadius

Alan DeKok aland at deployingradius.com
Wed Aug 20 17:10:28 CEST 2014


Andrew Niemantsverdriet wrote:
> Anybody have any ideas on this? I'm stuck.

  Read the debug output.  It's simple.

[ldap] looking for check items in directory...
[ldap] looking for reply items in directory...
WARNING: No "known good" password was found in LDAP.  Are you sure that
the user is configured correctly?

  So... that's the problem.

  Don't blame FreeRADIUS if OpenLDAP isn't returning a password for the
user.

  And when it works:

ldap] 	expand: dc=localdomain -> dc=localdomain
  [ldap] ldap_get_conn: Checking Id: 0
  [ldap] ldap_get_conn: Got Id: 0
  [ldap] performing search in dc=localdomain, with filter (uid=stewart.shoe)
[ldap] checking if remote access for stewart.shoe is allowed by uid
[ldap] looking for check items in directory...
  [ldap] sambantpassword -> NT-Password ==
0x4434324535354546393031414334453743383444463546434432304135324235
[ldap] looking for reply items in directory...

  See?  Pretty simple.

  Alan DeKok.


More information about the Freeradius-Users mailing list