Re: rlm_pap: WARNING! No known good password found for the user.

2008-07-11 Thread Sambuddho Chakravarty
Hello I think I had a very similar problem couple of days back. I think your authorization is working but authentication is failing right ? Thanks Sambuddho On Fri, 2008-07-11 at 21:21 +0200, Maciej Drobniuch wrote: I've cleaned the mess up like you've said, but i've got new errors for you

Re: freeradius with multiple ldap servers

2008-07-07 Thread Sambuddho Chakravarty
Hello Ivan The ldap database has passwords have the '{crypt}' header. What I meant by cleartext passwords is that I am typing in the password in clear text in the radtest program. Thanks Sambuddho On Mon, 2008-07-07 at 10:08 +0100, Ivan Kalik wrote: Does that mean that I cannot authenticate

Re: freeradius with multiple ldap servers

2008-07-07 Thread Sambuddho Chakravarty
Hello Ivan and Alan Thanks a lot for tolerating my pestering. It has worked. The problem was with the PAP module. The auto header detection was turned off. It works perfectly now. Thanks Sambuddho On Mon, 2008-07-07 at 10:08 +0100, Ivan Kalik wrote: Does that mean that I cannot authenticate

Re: freeradius with multiple ldap servers

2008-07-06 Thread Sambuddho Chakravarty
, however fails with the following output. rlm_ldap: waiting for bind result ... rlm_ldap: Bind failed with invalid credentials Please advice. Thanks Sambuddho On Sun, 2008-07-06 at 08:06 +0200, Alan DeKok wrote: Sambuddho Chakravarty wrote: Does that mean that I cannot authenticate against

Re: freeradius with multiple ldap servers

2008-07-06 Thread Sambuddho Chakravarty
down the find the freeradius configuration. But I am still now clear how to exactly tailor it for my needs. Is there an example / url I can use as reference ? Am I looking at the wrong place ? Thanks Sambuddho On Sun, 2008-07-06 at 19:15 +0200, Alan DeKok wrote: Sambuddho Chakravarty wrote

Re: freeradius with multiple ldap servers

2008-07-05 Thread Sambuddho Chakravarty
Hello Ivan Does that mean that I cannot authenticate against a LDAP server from a freeradius server using cleartext passwords. So the freeradius client needs to send the password in encrypted format. But other programs which using LDAP server to authenticate (eg. the pam_ldap ) takes as input the

Re: freeradius with multiple ldap servers

2008-07-05 Thread Sambuddho Chakravarty
Interestingly the bind as the root DN works with password supplied in clear-text through the ldap {} module... Thanks Sambuddho On Sat, 2008-07-05 at 18:03 -0400, Sambuddho Chakravarty wrote: Hello Ivan Does that mean that I cannot authenticate against a LDAP server from a freeradius server

Re: freeradius with multiple ldap servers

2008-07-03 Thread Sambuddho Chakravarty
Dana 3/7/2008, Sambuddho Chakravarty [EMAIL PROTECTED] piše: Hello I set the password_header to = {crypt} and password_attribute to userPassword (Thats the name of the field in the database). Now this is what the logs show, rlm_ldap: performing search in ou=People,dc=example,dc=com

Re: Freeradius-Users Digest, Vol 39, Issue 18 topic 5: freeradius with multiple ldap servers

2008-07-03 Thread Sambuddho Chakravarty
doesn?t (Ivan Kalik) 4. Re: sqlippool (Ivan Kalik) 5. Re: freeradius with multiple ldap servers (Sambuddho Chakravarty) 6. Re:=?UTF-8?Q?freeradius-proxy_+_PAP_works,_PEAP_and_the_rest_doesn=C2=B4t?= ([EMAIL PROTECTED

Re: Freeradius-Users Digest, Vol 39, Issue 18 topic 5: freeradius with multiple ldap servers

2008-07-03 Thread Sambuddho Chakravarty
to invalid credentials rlm_ldap: waiting for bind result ... rlm_ldap: Bind failed with invalid credentials The username and password supplied are nevertheless correct. Any hints would be gratefully appreciated Thanks Sambuddho On Thu, 2008-07-03 at 15:54 -0400, Sambuddho Chakravarty wrote: Hi Andy

Re: Freeradius-Users Digest, Vol 39, Issue 18 topic 5: freeradiuswith multiple ldap servers

2008-07-03 Thread Sambuddho Chakravarty
Hello Ivan Problem still the same I changed :- On Thu, 2008-07-03 at 22:20 +0100, Ivan Kalik wrote: Added to ldap.attrmap --- checkItem Crypt-Password userPassword Removed this from ldap.attrmap Don't do that. userPassword is already

Re: freeradius with multiple ldap servers

2008-07-03 Thread Sambuddho Chakravarty
/index.php/Rlm_ldap See use of password_header and password_attribute. Ivan Kalik Kalik Informatika ISP Dana 2/7/2008, Sambuddho Chakravarty [EMAIL PROTECTED] piše: Hello I think I know what the problem is. The radius server is looking up using cleartext password , while the LDAP data base

Re: freeradius with multiple ldap servers

2008-07-02 Thread Sambuddho Chakravarty
it logs in fine. LDAP client login against the LDAP server is otherwise working fine. I know I have been bothering using trivial question. But any help would be appreciated :-) Thanks in advance. Sambuddho On Tue, 2008-07-01 at 22:33 +0200, Alan DeKok wrote: Sambuddho Chakravarty wrote

Re: freeradius with multiple ldap servers

2008-07-02 Thread Sambuddho Chakravarty
Sambuddho On Wed, 2008-07-02 at 17:09 -0400, Sambuddho Chakravarty wrote: Hello Alan I made sure this time that rlm_ldap was compiled. Now the following is the configuration --/etc/raddb/modules/ldap--- ldap ldap1 { server = a.b.c.d ... } ldap ldap2

Re: freeradius with multiple ldap servers

2008-07-02 Thread Sambuddho Chakravarty
of password_header and password_attribute. Ivan Kalik Kalik Informatika ISP Dana 2/7/2008, Sambuddho Chakravarty [EMAIL PROTECTED] piše: Hello I think I know what the problem is. The radius server is looking up using cleartext password , while the LDAP data base stores the hashed

Re: freeradius with multiple ldap servers

2008-07-02 Thread Sambuddho Chakravarty
On Wed, 2008-07-02 at 23:45 +0100, Ivan Kalik wrote: http://wiki.freeradius.org/index.php/Rlm_ldap See use of password_header and password_attribute. Ivan Kalik Kalik Informatika ISP Dana 2/7/2008, Sambuddho Chakravarty [EMAIL PROTECTED] piše: Hello I think I know what the problem

Re: freeradius with multiple ldap servers

2008-07-01 Thread Sambuddho Chakravarty
think it should be showing rlm_ldap . Why is this so. But authentication worked fine and the client received a ACCESS-ACCEPT message as reply. Thanks Sambuddho On Thu, 2008-06-19 at 13:50 -0400, Sambuddho Chakravarty wrote: Do you mean something like this authorize { redundant

Re: freeradius with multiple ldap servers

2008-07-01 Thread Sambuddho Chakravarty
} } authenticate { ldap1 ldap2 } Rest of radius.conf is untouched. When trying with a single server ,it matches the radius request against rlm_pap and not rlm_ldap. I am confused. Thanks Sambuddho On Tue, 2008-07-01 at 09:26 +0200, Alan DeKok wrote: Sambuddho Chakravarty wrote: Hello

Re: freeradius with multiple ldap servers

2008-06-19 Thread Sambuddho Chakravarty
Informatika ISP Dana 15/6/2008, Sambuddho Chakravarty [EMAIL PROTECTED] piše: Hello All Will creating multiple instances of the /etc/raddb/modules/ldap1 and /etc/raddb/modules/ldap2 each with different LDAP server addresses and database information work for having a user authenticate

Re: freeradius with multiple ldap servers

2008-06-19 Thread Sambuddho Chakravarty
information is in the two files modules/ldap1 and modules/ldap2. Does this look valid ? Thanks Sambuddho On Thu, 2008-06-19 at 09:35 +0200, Alan DeKok wrote: Sambuddho Chakravarty wrote: Yes , but on a freeradius-2.05 , when I create a separate authenticate {} and authorize {} subsection

Re: Hi

2008-06-16 Thread Sambuddho Chakravarty
Hello For ldap you need to configure the module/ldap file and not active directory (which I think uses EAP). Thanks Sambuddho On Mon, 2008-06-16 at 20:21 +0200, [EMAIL PROTECTED] wrote: Is this this HOW_TO (http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO) up to

Re: problem configuring freeradius with ldap user database

2008-06-15 Thread Sambuddho Chakravarty
Hello Ivan The solution previously suggested by Alan worked. Thanks Sambuddho On Sat, 2008-06-14 at 18:15 +0100, Ivan Kalik wrote: rlm_ldap: Added password {crypt}$1$2Pl0Lm5O$ot8mrXYBaAg12RoBogNDK. in check items Are you sure that's crypt? It looks like MD5 to me. Ivan Kalik Kalik

freeradius with multiple ldap servers

2008-06-15 Thread Sambuddho Chakravarty
Hello All Will creating multiple instances of the /etc/raddb/modules/ldap1 and /etc/raddb/modules/ldap2 each with different LDAP server addresses and database information work for having a user authenticate against either of the two LDAP servers. By that I mean that say our user 'try' tries to

problem configuring freeradius with ldap user database

2008-06-14 Thread Sambuddho Chakravarty
Hello All I am experiencing a problem while trying to authenticate the username/password in LDAP through a freeradius server. While a regular telnet/ssh to the edge running a openLdap client / PAM module works fine (It is able to authenticate) but the problem arises when trying to authenticate

Re: problem configuring freeradius with ldap user database

2008-06-14 Thread Sambuddho Chakravarty
Hello Alan Thanks a lot! Ill check this out. Sambuddho On Sat, 2008-06-14 at 09:22 +0200, Alan DeKok wrote: Sambuddho Chakravarty wrote: I am experiencing a problem while trying to authenticate the username/password in LDAP through a freeradius server. While a regular telnet/ssh