Help PLease

[Adam Schappell]

I get its failing but I do not know what else to set it to, It is the
correct path, I have tested it on different programs and systems to make
sure. Some thing is not right. If it is binding successfully with the same
user route and password then why the heck cant it find it????? Sorry just
annoying, I have been trying to get this done for sometime now.

rad_recv: Access-Request packet from host 127.0.0.1 port 33787, id=167,
length=76

User-Name = "radius"

User-Password = "ceadmin"

NAS-IP-Address = 10.0.1.104

NAS-Port = 0

Message-Authenticator = 0xf09aaa8f36336f802d04927ccae3c245

# Executing section authorize from file /etc/raddb/sites-enabled/default

+- entering group authorize {...}

++[preprocess] returns ok

++[chap] returns noop

++[mschap] returns noop

++[digest] returns noop

[suffix] No '@' in User-Name = "radius", looking up realm NULL

[suffix] No such realm "NULL"

++[suffix] returns noop

[eap] No EAP-Message, not doing EAP

++[eap] returns noop

[files] users: Matched entry DEFAULT at line 1

++[files] returns ok

[sql] expand: %{User-Name} -> radius

[sql] sql_set_user escaped user --> 'radius'

rlm_sql (sql): Reserving sql socket id: 4

[sql] expand: SELECT id, username, attribute, value, op           FROM
radcheck           WHERE username = '%{SQL-User-Name}'           ORDER BY
id -> SELECT id, username, attribute, value, op           FROM radcheck
      WHERE username = 'radius'           ORDER BY id

[sql] expand: SELECT groupname           FROM radusergroup           WHERE
username = '%{SQL-User-Name}'           ORDER BY priority -> SELECT
groupname           FROM radusergroup           WHERE username = 'radius'
        ORDER BY priority

rlm_sql (sql): Released sql socket id: 4

[sql] User radius not found

++[sql] returns notfound

[ldap] performing user authorization for radius

[ldap] expand: %{Stripped-User-Name} ->

[ldap] ... expanding second conditional

[ldap] expand: %{User-Name} -> radius

[ldap] expand: (&(SAMAccountName=%{%{Stripped-User-Name}:-%{User-Name}}) ->
(&(SAMAccountName=radius)

[ldap] expand: dc=corp,dc=clearedgeit,dc=com ->
dc=corp,dc=clearedgeit,dc=com

  [ldap] ldap_get_conn: Checking Id: 0

  [ldap] ldap_get_conn: Got Id: 0

  [ldap] attempting LDAP reconnection

  [ldap] (re)connect to dc1.corp.clearedgeit.com:389, authentication 0

  [ldap] bind as
cn=radius,ou=Users,ou=Jessup,ou=ClearEdge,dc=corp,dc=clearedgeit,dc=com/ceadmin
to dc1.corp.clearedgeit.com:389

  [ldap] waiting for bind result ...

  [ldap] Bind was successful

  [ldap] performing search in dc=corp,dc=clearedgeit,dc=com, with filter
(&(SAMAccountName=radius)

  [ldap] ldap_search() failed: Bad search filter: (&(SAMAccountName=radius)

[ldap] search failed

  [ldap] ldap_release_conn: Release Id: 0

++[ldap] returns fail

Using Post-Auth-Type Reject

# Executing group from file /etc/raddb/sites-enabled/default

+- entering group REJECT {...}

[attr_filter.access_reject] expand: %{User-Name} -> radius

attr_filter: Matched entry DEFAULT at line 11

++[attr_filter.access_reject] returns updated

Delaying reject of request 0 for 1 seconds

Going to the next request

Waking up in 0.9 seconds.

Sending delayed reject for request 0

Sending Access-Reject of id 167 to 127.0.0.1 port 33787

Waking up in 4.9 seconds.

Cleaning up request 0 ID 167 with timestamp +50

Ready to process requests.

Adam Schappell
System Administrator II
Clearedge IT Solutions, LLC
10620 Guilford Road
Jessup, MD 20794
Office:443-212-4712
Fax:443-212-4809
www.ClearEdgeIT.com <http://www.clearedgeit.com/>


On Mon, Mar 30, 2015 at 1:29 PM, <A.L.M.Buxey at lboro.ac.uk> wrote:

> Hi,
>
> > [ldap] expand: %{User-Name} -> radius
> >
> > [ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) ->
> (uid=radius)
> >
> > [ldap] expand: dc=corp,dc=clearedgeit,dc=com ->
> > dc=corp,dc=clearedgeit,dc=com
>
> okay...thats your search query
>
> >   [ldap] ldap_get_conn: Checking Id: 0
> >
> >   [ldap] ldap_get_conn: Got Id: 0
> >
> >   [ldap] performing search in dc=corp,dc=clearedgeit,dc=com, with filter
> > (uid=radius)
> >
> >   [ldap] ldap_search() failed: LDAP connection lost.
>
> and its failing.
>
> >   [ldap] performing search in dc=corp,dc=clearedgeit,dc=com, with filter
> > (uid=radius)
> >
> >   [ldap] object not found
> >
> > [ldap] search failed
>
> and again
>
> edit the ldap config file for your FreeRADIUS so you are using the correct
> LDAP path and looking for the correct object.....
>
> alan
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>