OpenLdap + Freeradius on centos 6.5 Not working

Vishesh kumar linuxtovishesh at gmail.com
Fri May 15 13:35:21 CEST 2015


I am  still struggling with below errors ,

WARNING: No "known good" password was found in LDAP.
...............................
....................................................
ERROR: No authenticate method (Auth-Type) found for the request: Rejecting
the u
                 ser
Failed to authenticate the user.
Using Post-Auth-Type Reject
  WARNING: Unknown value specified for Post-Auth-Type.  Cannot perform
requested
                      action.


Below is my Default configuration Now
+++++++++++++++++++++
authorize {
        preprocess
        ldap
        mschap
}
authenticate {
Auth-Type LDAP{
     ldap
 }
 mschap
 eap
 }
++++++++++++++++++++++++++++++++++++++++++

Below is my inner-tunnel configuration,
++++++++++++++++++++++++++++++
server inner-tunnel {
listen {
       ipaddr = 127.0.0.1
       port = 18120
       type = auth
}
authorize {
        chap
        mschap
        suffix
        update control {
               Proxy-To-Realm := LOCAL
        }
        files
        ldap
        expiration
        logintime
        pap
}
authenticate {
        Auth-Type PAP {
                ldap
        }
        Auth-Type CHAP {
                chap
        }
        Auth-Type MS-CHAP {
                mschap
        }
        unix
        Auth-Type LDAP {
                ldap
        }
        eap
}
session {
        radutmp
}
post-auth {
        Post-Auth-Type REJECT {
                attr_filter.access_reject
        }
}
+++++++++++++++++++++++++++++++++++++++++++++++++

I don't know what mistake I am doing here.

Thanks
Vishesh Kumar

On Fri, May 15, 2015 at 2:20 PM, Vishesh kumar <linuxtovishesh at gmail.com>
wrote:

> Thanks Alan,
>
> Let me configure EAP then,
>
> Thanks
> Vishesh Kumar
>
> On Thu, May 14, 2015 at 6:34 PM, <A.L.M.Buxey at lboro.ac.uk> wrote:
>
>> Hi,
>>
>> > below are the logs I am getting in case of failure,
>>
>> this is an EAP packet..... therefore you need to be in the inner-tunnel
>> before you have any visibility of the password..... so you cannot
>> check/auth
>> in the outer-tunnel - this is one of those cases where you will likely
>> need
>> to set the Auth-Type to LDAP manually (in users file or via unlang) to
>> ensure
>> that the process continues and the server carries on into the
>> inner-tunnel.
>>
>> alan
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
>
>
>
> --
> Regards,
> Vishesh Kumar
> http://linuxmantra.com
>



-- 
Regards,
Vishesh Kumar
http://linuxmantra.com


More information about the Freeradius-Users mailing list