Hi,
I got ur point. But how to use the radiusprofiledn. I was following the
mailing list archives, but i could not figure what should i do in
radius.conf file and users file.
My ldif tree now look like this.
dn: dc=neline,dc=com
objectclass: top
objectclass: domain
dn: ou=group,dc=neline,dc=com
ou: group
objectclass: top
objectclass: organizationalUnit
dn: cn=testgroup,ou=group,dc=neline,dc=com
objectClass: top
objectClass: radiusprofile
cn: testgroup
radiusGroupName: G022
gidNumber: 1000
dn: uid=testing,ou=group,dc=neline,dc=com
cn: testing
uid: testing
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: radiusprofile
ou: group
userPassword: neline
radiusProfileDn: cn=testgroup,ou=group,dc=neline,dc=com
radiusGroupName: testgroup
############RADIUSD.CONF###########################
ldap {
server = "192.9.168.2"
# identity = "cn=admin,o=My Org,c=UA"
# password = mypass
basedn = "dc=neline,dc=com"
filter = "(uid=%u)"
# set this to 'yes' to use TLS encrypted connections
# to the LDAP database.
start_tls = no
default_profile = "cn=testgroup,ou=group,dc=neline,dc=com"
profile_attribute = "radiusProfileDn"
#access_group = "cn=testgroup,ou=group,dc=neline,dc=com"
#access_attr = "dialupAccess"
# Mapping of RADIUS dictionary attributes to LDAP
# directory attributes.
dictionary_mapping = ${raddbdir}/ldap.attrmap
# ldap_cache_timeout = 120
# ldap_cache_size = 0
ldap_connections_number = 5
# password_header = "{clear}"
#password_attribute = userPassword
#groupname_attribute = cn
#groupmembership_filter =
"(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupO
fUniqueNames)(uniquemember=%{Ldap-UserDn})))"
timeout = 4
timelimit = 3
net_timeout = 1
# compare_check_items = yes
# access_attr_used_for_allow = yes
}
PLEASE SHOW ME THE WAY!!!!!!!!!!!!
Atanu Das
System Development
SS NetCom Pvt Ltd.
Dhankheti
Shillong-793003
Ph: 91+361+502355
Visit us at: http://www.neline.com
----- Original Message -----
From: "Kostas Kalevras" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, September 13, 2002 1:03 PM
Subject: Re: LDAP Problem
> On Fri, 13 Sep 2002, Atanu Das wrote:
>
> > Dear ALL,
> > I tried creating a simple LDAP structure the following way!!!!!
> >
> > dn: dc=company,dc=com
> > objectclass: top
> > objectclass: domain
> >
> > dn: ou=people,dc=company,dc=com
> > ou: people
> > objectclass: top
> > objectclass: organisationalUnit
> >
> > dn: uid=group1-dialup,ou=people,dc=company,dc=com
> > objectclass: radiusprofile
> > radiusPortLimit: 1
> >
> > dn: uid=user1,ou=people,dc=company,dc=com
> > objectclass: radiusprofile
> > dialupregularprofile: uid=group1-dialup,ou=people,dc=company,dc=com
> >
> > But i am getting the following error
> > 11:52:00 AM: Failed to add new entry uid=user1, ou=radius,
dc=neline,dc=com
> > Root error: [LDAP: error code 17 - dialupregularprofile: attribute type
undefined]
> >
> >
> > I have included both the LDAP schema that came with freeradius in the
slapd.conf file with schemacheck option off.
> >
> > Where am I wrong!!!
> >
> > Atanu Das
>
> You should use the radiusprofiledn instead of dialupregularprofile.
>
> --
> Kostas Kalevras Network Operations Center
> [EMAIL PROTECTED] National Technical University of Athens, Greece
> Work Phone: +30 10 7721861
> 'Go back to the shadow' Gandalf
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html