We are trying to setup the following system:
 
1)Wireless users ask Wireless gateway for authentication
 
2)Gateway (BlueSocket) asks Suse(SLES 9.0) freeRadius server
for authentication.
 
3)freeRadius uses LDAP module to talk to LDAP running on Novell Server with eDirectory (NDS)
to get user info
 
4)eDirectory (Novell server) talks back to LDAP module, which talks to freeRADIUS
 
5)freeRADIUS send info to BlueSocket (Wireless Gateway) and user logs in.
 
 
We are having problem with point (4) and password I think.
Below is capture from debug screen:
Nothing to do.  Sleeping until we see a request.
rad_recv: Access-Request packet from host 1.128.6.61:32778, id=75, length=141
        User-Name = "tor_sysop_2"
        User-Password = "testpassword"
        NAS-IP-Address = 1.128.6.61
        Service-Type = Login-User
        Framed-IP-Address = 1.251.47.58
        Called-Station-Id = "00:90:0B:03:5D:DE"
        Calling-Station-Id = ""
        NAS-Identifier = "elsbluesocket"
        Acct-Session-Id = "00:90:0B:03:5D:DE:1096465368"
        NAS-Port-Type = Wireless-802.11
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 4
  modcall[authorize]: module "preprocess" returns ok for request 4
  modcall[authorize]: module "chap" returns noop for request 4
  modcall[authorize]: module "mschap" returns noop for request 4
    rlm_realm: No '@' in User-Name = "tor_sysop_2", looking up realm NULL
    rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for request 4
  rlm_eap: No EAP-Message, not doing EAP
  modcall[authorize]: module "eap" returns noop for request 4
    users: Matched DEFAULT at 160
  modcall[authorize]: module "files" returns ok for request 4
rlm_ldap: - authorize
rlm_ldap: performing user authorization for tor_sysop_2
radius_xlat:  '(uid=tor_sysop_2)'
radius_xlat:  'o=cbcsrc'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in o=cbcsrc, with filter (uid=tor_sysop_2)
rlm_ldap: no dialupAccess attribute - access denied by default
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap" returns userlock for request 4
modcall: group authorize returns userlock for request 4
Invalid user (rlm_ldap: Access Attribute denies access): [tor_sysop_2/testpassword] (from client bluesocket port 0 cli )
Delaying request 4 for 1 seconds
Finished request 4
Going to the next request
=========================
 
Any ideas what I need to modify to get this up and running?
 
Thank for you time to look through this.
Andrew.
 
 

Reply via email to