Help PLease

A.L.M.Buxey at lboro.ac.uk A.L.M.Buxey at lboro.ac.uk
Mon Mar 30 21:23:17 CEST 2015


Hi,

> I get its failing but I do not know what else to set it to, It is the

read the error. deduce the issue

> [ldap] expand: (&(SAMAccountName=%{%{Stripped-User-Name}:-%{User-Name}}) ->
> (&(SAMAccountName=radius)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^

thats wehat came out of the expansion of your current config

>   [ldap] performing search in dc=corp,dc=clearedgeit,dc=com, with filter
> (&(SAMAccountName=radius)
> 
>   [ldap] ldap_search() failed: Bad search filter: (&(SAMAccountName=radius)

and thats the result

> [ldap] search failed

which means that happens


the binding and the searching are 2 different things.  you had 'working' but
failing search with uid - you've now just got a broken search

I'd just hazard a guess that you should be using eg  (&(sAMAccountName=%{Stripped-User-Name:-%{User-Name})

note how upper and lower case have been chosen.

alan


More information about the Freeradius-Users mailing list