I've tried as recommended not to set Auth-Type but trying below will works
in 1.1.2 but not on my recently upgraded to 1.1.7
Configs:-
############################
a) radiusd.conf
authorize {
Autz-Type LDAP {
ldap1
}
Autz-Type ADSL {
ldapadsl1
}
}
authenticate {
Auth-Type ldap1 {
ldap1
Auth-Type ldapadsl1 {
ldapadsl1
}
}
b) users
DEFAULT Huntgroup-Name == "adsl", ldapadsl1-Ldap-Group ==
"ADSL", Autz-Type := ADSL
DEFAULT Autz-Type := LDAP
##################################
Results:-
In 1.1.2 - (Auth-Type ldap1 => working!!)
############################################
modcall: leaving group authorize (returns ok) for request 18
Found Autz-Type LDAP
Processing the authorize section of radiusd.conf
modcall: entering group LDAP for request 18
modcall: entering group redundant for request 18
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test
radius_xlat: '(uid=test)'
radius_xlat: 'ou=RADIUS,ou=People,dc=xxx,dc=xx'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=RADIUS,ou=People,dc=xxx,dc=xx, with filter
(uid=test)
rlm_ldap: checking if remote access for test is allowed by dialupAccess
rlm_ldap: Added password {CRYPT}XXXXXXXX in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: Adding radiusFramedCompression as Framed-Compression, value
Van-Jacobson-TCP-IP & op=11
rlm_ldap: Adding radiusFramedMTU as Framed-MTU, value 1500 & op=11
rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11
rlm_ldap: Adding radiusServiceType as Service-Type, value Framed-User &
op=11
rlm_ldap: Setting Auth-Type = ldap1
rlm_ldap: user test authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
modcall[authorize]: module "ldap1" returns ok for request 18
modcall: leaving group redundant (returns ok) for request 18
modcall: leaving group LDAP (returns ok) for request 18
rad_check_password: Found Auth-Type ldap1
auth: type "ldap1"
######################################
In 1.1.7 (Auth-Type = Local => not working!!)
##########################################
modcall: leaving group authorize (returns ok) for request 1
Found Autz-Type LDAP
Processing the authorize section of radiusd.conf
modcall: entering group LDAP for request 1
modcall: entering group redundant for request 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test
radius_xlat: '(uid=test)'
radius_xlat: 'ou=RADIUS,ou=People,dc=xxx,dc=xx'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=RADIUS,ou=People,dc=xxx,dc=xx, with filter
(uid=test)
rlm_ldap: checking if remote access for test is allowed by dialupAccess
rlm_ldap: Added password {CRYPT}XXXXXXXXXXXXX in check items
rlm_ldap: looking for check items in directory...
rlm_ldap: looking for reply items in directory...
rlm_ldap: Adding radiusFramedCompression as Framed-Compression =
Van-Jacobson-TCP-IP
rlm_ldap: Adding radiusFramedMTU as Framed-MTU = 1500
rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol = PPP
rlm_ldap: Adding radiusServiceType as Service-Type = Framed-User
rlm_ldap: user test authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
modcall[authorize]: module "ldap1" returns ok for request 1
modcall: leaving group redundant (returns ok) for request 1
modcall: leaving group LDAP (returns ok) for request 1
auth: type Local
auth: user supplied User-Password does NOT match local User-Password
###################################3
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
