Thanks for the reply. This is exactly what I ended up doing before I got
the message, but now at least everyone knows that it worked and might help
somebody else. Thanks
-Adam
----- Original Message -----
From: "Matthew S. Crocker" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 24, 2001 6:48 AM
Subject: Re: Hints file not processed
> On Mon, 23 Jul 2001, Adam Baldwin wrote:
>
> Edit the radiusd.conf and change the filter line in the ldap section.
> My filter line is (|(uid=%u)(uid=%U))
>
> %u = username, not stripped
> %U = username, stripped
>
> There is a bug in the radius_xlat function which returns '_' for %u when
> there isn't a suffix attached. The filter above will check for either uid
> setup.
>
> -Matt
>
> > Here is what I get in debug when I try to authenticate. It appears that
the
> > hints file is acutally being read, but it isn't performing like I would
like
> > it to. Thanks
> >
> > ----------------------------------------Start
> > log------------------------------
> > Waking up in 31 seconds...
> > User-Name = "aaronm.ppp"
> > Password =
"\322\370\334\377xL\233R\032\251\373\230\017\360\305o"
> > NAS-IP-Address = 208.8.131.163
> > NAS-Identifier = "208.8.131.163"
> > NAS-Port = 14081
> > Acct-Session-Id = "aaronm.ppp1"
> > USR-Interface-Index = 0
> > USR-Supports-Tags = 0
> > Service-Type = Login-User
> > USR-Chassis-Call-Slot = 56
> > USR-Chassis-Call-Span = 1
> > USR-Chassis-Call-Channel = 1
> > USR-Connect-Speed = NONE
> > NAS-Port-Type = Virtual
> > modcall: entering group authorize
> > hints: Matched DEFAULT at 47
> > modcall[authorize]: module "preprocess" returns ok
> > modcall[authorize]: module "suffix" returns ok
> > rlm_ldap: - authorize
> > rlm_ldap: performing user authorization for aaronm
> > radius_xlat: '(uid=aaronm.ppp)'
> > rlm_ldap: attempting LDAP reconnection
> > rlm_ldap: (re)connect to ldap.amerion.net:389, authentication 0
> > rlm_ldap: bind as cn=root,dc=amerion.net/nxn908c
> > rad_recv: Access-Request packet from host 208.8.131.163:1645, id=50,
> > length=186
> > Dropping duplicate authentication packet from client
208.8.131.163:1645 -
> > ID: 50
> > --- Walking the entire request list ---
> > Waking up in 25 seconds...
> > rlm_ldap: waiting for bind result ...
> > rlm_ldap: performing search in o=radius,dc=amerion.net, with filter
> > (uid=aaronm.ppp)
> > rlm_ldap: ldap_first_entry() failed
> > modcall[authorize]: module "ldap" returns fail
> > modcall: group authorize returns fail
> > Finished request 0
> > Going to the next request
> > rad_recv: Access-Request packet from host 208.8.131.163:1645, id=50,
> > length=186
> > Dropping duplicate authentication packet from client
208.8.131.163:1645 -
> > ID: 50
> > --- Walking the entire request list ---
> > Cleaning up request 0 ID 50 with timestamp 3b5c8ecb
> > Nothing to do. Sleeping until we see a request.
> > rad_recv: Access-Request packet from host 208.8.131.163:1645, id=50,
> > length=186
> > --- Walking the entire request list ---
> > Waking up in 31 seconds...
> > User-Name = "aaronm.ppp"
> > Password =
"\322\370\334\377xL\233R\032\251\373\230\017\360\305o"
> > NAS-IP-Address = 208.8.131.163
> > NAS-Identifier = "208.8.131.163"
> > NAS-Port = 14081
> > Acct-Session-Id = "aaronm.ppp1"
> > USR-Interface-Index = 0
> > USR-Supports-Tags = 0
> > Service-Type = Login-User
> > USR-Chassis-Call-Slot = 56
> > USR-Chassis-Call-Span = 1
> > USR-Chassis-Call-Channel = 1
> > USR-Connect-Speed = NONE
> > NAS-Port-Type = Virtual
> > modcall: entering group authorize
> > hints: Matched DEFAULT at 47
> > modcall[authorize]: module "preprocess" returns ok
> > modcall[authorize]: module "suffix" returns ok
> > rlm_ldap: - authorize
> > rlm_ldap: performing user authorization for aaronm
> > radius_xlat: '(uid=aaronm.ppp)'
> > rlm_ldap: performing search in o=radius,dc=amerion.net, with filter
> > (uid=aaronm.ppp)
> > rlm_ldap: ldap_first_entry() failed
> > modcall[authorize]: module "ldap" returns fail
> > modcall: group authorize returns fail
> > Finished request 3
> > Going to the next request
> > rad_recv: Access-Request packet from host 208.8.131.163:1645, id=50,
> > length=186
> > Dropping duplicate authentication packet from client
208.8.131.163:1645 -
> > ID: 50
> > --- Walking the entire request list ---
> > Waking up in 1 seconds...
> > --- Walking the entire request list ---
> > Cleaning up request 3 ID 50 with timestamp 3b5c8ede
> > Nothing to do. Sleeping until we see a request.
> > MASTER: exit on signal (2)
> > ---------------------------------------------end
> > log--------------------------------------------
> >
> > ----- Original Message -----
> > From: <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Monday, July 23, 2001 3:21 PM
> > Subject: Re: Hints file not processed
> >
> >
> > > "Adam Baldwin" <[EMAIL PROTECTED]> wrote:
> > > > I'm running the current CVS version of freeradius. I am trying to
log
> > in
> > > > with the .ppp at the end of my username and it will not authenticate
me.
> > I
> > > > have not been able to find any documentation on why this would be
> > occurring.
> > > > I belive I have everything setup correctly. Is there anything that
I
> > might
> > > > be missing that I should check?
> > >
> > > Run it in debugging mode, so you can see exactly why / when it's
> > > doing something.
> > >
> > > Alan DeKok.
> > >
> > > -
> > > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> > >
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> >
>
> --
> ----------------------------------------------------------------------
> Matthew S. Crocker
> Vice President / Internet Division Email: [EMAIL PROTECTED]
> Crocker Communications Phone: (413) 587-3350
> PO BOX 710 Fax: (413) 587-3352
> Greenfield, MA 01302-0710 http://www.crocker.com
> ----------------------------------------------------------------------
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
