Auth-Type LDAP and "WARNING: Unknown value specified for Auth-Type. Cannot perform requested action"
José Ignacio Siles Rueda
jisiles at ingenia.es
Thu Sep 3 12:21:10 CEST 2015
Hello,
My actions so far:
- I've updated /usr/local/etc/raddb/dictionary as requested, checking also for typos:
"
...
#ATTRIBUTE My-Local-String 3000 string
#ATTRIBUTE My-Local-IPAddr 3001 ipaddr
#ATTRIBUTE My-Local-Integer 3002 integer
VALUE Auth-Type LDAP_estudiantes 16
"
- I've checked dictionary loading in debug mode:
.....
including configuration file /usr/local/etc/raddb/modules/wimax
including configuration file /usr/local/etc/raddb/modules/LDAP_estudiantes
....
main {
allow_core_dumps = no
}
including dictionary file /usr/local/etc/raddb/dictionary
main {
name = "radiusd"
....
- I've checked module instantiation with no errors:
....
rlm_ldap: Registering ldap_groupcmp for Ldap-Group
rlm_ldap: Creating new attribute LDAP_estudiantes-Ldap-Group
rlm_ldap: Registering ldap_groupcmp for LDAP_estudiantes-Ldap-Group
rlm_ldap: Registering ldap_xlat with xlat_name LDAP_estudiantes
....
Module: Instantiating module "LDAP_estudiantes" from file /usr/local/etc/raddb/modules/LDAP_estudiantes
ldap LDAP_estudiantes {
server = "ldap.upo.es"
port = 389
password = ""
- I've upgraded to 2.2.8
But I'm still getting same error:
++++[LDAP_estudiantes] = ok
+++} # case alumno.upo.es = ok
++} # switch %{Realm} = ok
+} # group authorize = ok
Found Auth-Type = LDAP_estudiantes
WARNING: Unknown value specified for Auth-Type. Cannot perform requested action.
Failed to authenticate the user.
Using Post-Auth-Type Reject
Is migrating to v3 my only remaining option?
Should I check anything else?
Regards,
Ignacio Siles.
-----Mensaje original-----
De: Freeradius-Users [mailto:freeradius-users-bounces+jisiles=ingenia.es at lists.freeradius.org] En nombre de Alan DeKok
Enviado el: miércoles, 5 de agosto de 2015 18:21
Para: FreeRadius users mailing list
Asunto: Re: Auth-Type LDAP and "WARNING: Unknown value specified for Auth-Type. Cannot perform requested action"
On Aug 5, 2015, at 11:36 AM, José Ignacio Siles Rueda <jisiles at ingenia.es> wrote:
> I've tried those two recommendations, with no luck.
If you update the dictionaries, it will work. The only reason it won't work is if you're editing a different dictionary file than the server is reading, OR if you have typos in the names.
In v3, the automatic creation of values for Auth-Type works better.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
More information about the Freeradius-Users
mailing list