Have you tried using ldapsearch using these parameters?  This is the
easiest and fastest way to find out if your LDAP parameters are correct and
your server is replying.  Typically once you find the correct syntax in
ldapsearch, the modification of the radiusd.conf LDAP parameters becomes
trivial.

Mark Capelle

- - - - - - - - - - - - - - -

Robert Canary wrote:

You have ldap configured in the radius.  You have ldap configured to be
a default fall-through.  I understand your ldap server is working fine.=20
I'm saying the radius server isn't talking to the ldap server, _maybe_
because the basedn is set wrong.

Federico Edelman wrote:
>=20
> My LDAP server works fine. I'm using the LDAP server for other services.
>=20
> > -----Mensaje original-----
> > De: Robert Canary [mailto:[EMAIL PROTECTED]
> > Enviado el: lunes, 24 de febrero de 2003 15:35
> > Para: [EMAIL PROTECTED]
> > Asunto: Re: RV: freeradius-ldap is not running
> >
> > I think you should look at your ldap server logs.  Your "basedn" dose=
n't
> > look right to me.  I think it should be something like,
> > "cn=3Duser-that-can-read-passwords,dc=3Dexample,dc=3Dcom"
> >
> > Federico Edelman wrote:
> > >
> > > I can't get a response.
> > > Somebody know about this trouble?
> > >
> > > -----Mensaje original-----
> > > De: Federico Edelman
> > > Enviado el: jueves, 20 de febrero de 2003 10:29
> > > Para: [EMAIL PROTECTED]
> > > Asunto: RE: freeradius-ldap is not running
> > >
> > > Robert:
> > >         This is the complete log file.
> > >
> > > > -----Mensaje original-----
> > > > De: Robert Canary [mailto:[EMAIL PROTECTED]
> > > > Enviado el: mi=E9rcoles, 19 de febrero de 2003 17:54
> > > > Para: [EMAIL PROTECTED]
> > > > Asunto: Re: freeradius-ldap is not running
> > > >
> > > > Why did you snip-it?  We need the rest of the lof file.
> > > >
> > > > Do this radiusd -X >/var/log/radiusd_dbg_con.log
> > > >
> > > > It is esasier to capture the error messages that way.
> > > >
> > > > Also what shows up in your freeradius logs during this time?
> > > >
> > > > Federico Edelman wrote:
> > > > >
> > > > > Hi guys,
> > > > >         I'm newbie with freeradius. I'm running freeradius-0.8.=
1 on
> > > > > Linux Debian 3.1. The LDAP server/client is openldap-2.1.12.
> > > > >
> > > > > I've compiled the freeradius with:
> > > > >
> > > > > # LD_LIBRARY_PATH=3D"/usr/local/openldap/lib:/usr/local/lib"
> > > > > # LDFLAGS=3D"-L/usr/local/openldap/lib -L/usr/local/lib"
> > > > > # CFLAGS=3D"-O -g -I/usr/local/openldap/include -I/usr/local/in=
clude"
> > > > > # CC=3D"gcc"
> > > > > # export LD_LIBRARY_PATH LDFLAGS CFLAGS CC
> > > > > # ./configure --prefix=3D/usr/local/freeradius --with-
> > > > > openldap=3D/usr/local/openldap
> > > > > # make
> > > > > # make install
> > > > >
> > > > > All's ok.
> > > > >
> > > > > I've run:
> > > > > # /usr/local/freeradius/sbin/radiusd -X
> > > > > And...
> > > > > # /usr/local/freeradius/bin/radtest
> > > > >
> > > > > All's ok. The radtest connect with radiusd successfully.
> > > > >
> > > > > But, When I setting up the radius with LDAP support the radiusd=
 exit
> > and
> > > > > not running.
> > > > >
> > > > > The radius ldap configuration:
> > > > >
> > > > > My /usr/local/freeradius/etc/raddb/radiusd.conf:
> > > > > ---- snip snip ----
> > > > >         ldap {
> > > > >                 server =3D "myldapserver"
> > > > >                 basedn =3D "ou=3Dpeople,dc=3Drootldap"
> > > > >                 filter =3D "((posixAccount)(uid=3D%u))"
> > > > >                 start_tls =3D no
> > > > >                 tls_mode =3D no
> > > > >                 dictionary_mapping =3D ${raddbdir}/ldap.attrmap
> > > > >                 ldap_connections_number =3D 5
> > > > >                 timeout =3D 4
> > > > >                 timelimit =3D 3
> > > > >                 net_timeout =3D 1
> > > > >         }
> > > > >         authenticate {
> > > > >                 authtype LDAP {
> > > > >                         ldap
> > > > >                 }
> > > > >         }
> > > > > ---- snip snip ----



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to