[External Mail] Issue with authentication for certain users

[Alan DeKok]

On Apr 3, 2025, at 11:37 AM, Wayne Sprouse via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> The user is unable to bind to LDAP using that DN. The user can
> authenticate using the actual email address though. Testing with a
> user from the primary domain, I was able to bind to LDAP using the DN
> format. i.e. "uid=joseph.test,ou=Central
> Management,ou=Users,dc=madeupdomain,dc=com".

  Run the test with the ldapsearch command-line utility.  if that fails, it's definitely not FreeRADIUS.

> I keep telling Google that the issue appears to be on their end, but
> they say it is a FreeRADIUS issue. I cannot see how that could be the
> case since the user cannot bind using the full DN.

  Yeah.  "We're big and smart, and you're a stupid Open Source project".

  Unfortunately the opposite is usually true.

  Alan DeKok.