Problem with ldap module invalid variable expansion

Orion Timbale timbaledorion at hotmail.com
Mon Dec 28 20:53:44 CET 2015


Here is what i get in my ldap conf files
no %u but something that is more complex and like %{User-Name}

but ldap module seems to see only %u


ldap {
        server = "127.0.0.1"
        identity = "cn=Manager, dc=pipoiohxui"
        password = "********"
        basedn = "ou=Users,dc=pipoiohxui"
        filter = "(uid=%{%{Stripped-User-Name}:-%{User-Name}})"
        base_filter = "(objectclass=radiusprofile)"
        ldap_connections_number = 5
        timeout = 4
        timelimit = 3
        net_timeout = 1
        tls {
                start_tls = no
        }
        dictionary_mapping = ${confdir}/ldap.attrmap
        edir_account_policy_check = no
}




Le 28/12/2015 20:47, Arran Cudbard-Bell a écrit :
>> On 28 Dec 2015, at 14:36, Orion Timbale <timbaledorion at hotmail.com> wrote:
>>
>> When i try to authenticate through EAP/PEAP/MSCHAPV2 i got the following
>> error
>>
>> Mon Dec 28 20:25:20 2015 : Debug: rlm_ldap (ldap): Reserved connection (4)
>> Mon Dec 28 20:25:20 2015 : ERROR: (1) ldap : (uid=%u)
>> Mon Dec 28 20:25:20 2015 : ERROR: (1) ldap :       ^ Invalid variable
>> expansion
>> Mon Dec 28 20:25:20 2015 : ERROR: (1) ldap : Unable to create filter
>> Mon Dec 28 20:25:20 2015 : Debug: rlm_ldap (ldap): Released connection (4)
>>
>>
>> Does anybody knows where its come from? I have had to use my own built
>> that may explain many but i don't know where to seek for solutions
>> Thanks for your help!!!!
> I don't understand what your question is.  %u is an invalid one letter expansion.
>
> If you wanted User-Name use %{User-Name}
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS development team
>
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



More information about the Freeradius-Users mailing list