Hum really strange that even if you restart radius service the file
still missing the other realms.
Le 2018-03-08 à 23:55, E.P. a écrit :
>
> Easy 😉
>
>
>
> cat /usr/local/pf/raddb/proxy.conf.inc
>
>
>
> realm default {
>
> strip
>
> }
>
>
>
> *From:*Durand fabrice [mailto:fdur...@inverse.ca]
> *Sent:* Thursday, March 08, 2018 6:42 PM
> *To:* E.P. <ype...@gmail.com>; packetfence-users@lists.sourceforge.net
> *Subject:* Re: [PacketFence-users] [Packetfence] AD authentication
> with FreeRadius: "reading winbind reply failed!"
>
>
>
> Can you paste the file proxy.conf.inc from raddb directory ?
>
>
>
> Le 2018-03-08 à 16:54, E.P. a écrit :
>
> I tried it as well, Fabrice.
>
> Doesn’t matter what I use as a username, whether it is
> t...@options.bc.ca <mailto:t...@options.bc.ca> or OPTIONS\test.
>
> I had both realms added before I ended up using the default one.
> They both point to the same AD domain.
>
> Attached is yet another RADIUS debug session with my attempt to
> authenticate with OPTIONS realm
>
> Also, may I know why do I see the username showing initially as
> OPTIONS\\test (two backslashes) ?
>
>
>
> [OPTIONS]
>
> domain=optionsad
>
> options=strip
>
>
>
> [OPTIONS-AD-REALM]
>
> domain=optionsad
>
> options=strip
>
>
>
> Eugene
>
>
>
> *From:*Fabrice Durand [mailto:fdur...@inverse.ca]
> *Sent:* Thursday, March 08, 2018 11:28 AM
> *To:* E.P. <ype...@gmail.com> <mailto:ype...@gmail.com>;
> packetfence-users@lists.sourceforge.net
> <mailto:packetfence-users@lists.sourceforge.net>
> *Subject:* Re: [PacketFence-users] [Packetfence] AD authentication
> with FreeRadius: "reading winbind reply failed!"
>
>
>
> Hello Eugene,
>
> it looks that you need to add a realm OPTIONS because the username
> is like OPTIONS\test.
>
> Regards
>
> Fabrice
>
>
>
>
>
> Le 2018-03-08 à 14:23, E.P. a écrit :
>
> Hi Fabrice,
>
> Since Jimmy and I seem to have the same problem with winbind
> I’m attaching requested RADIUS requests.
>
> There are two files, radius-request shows the session when I
> have only one default realm and the authentication source also
> points to the default realm
>
>
>
> [DEFAULT]
>
> domain=optionsad
>
> options=strip
>
>
>
> And the second file, radius-request2 shows the session when I
> added a named realm, i.e.
>
>
>
> [OPTIONS-AD-REALM]
>
> domain=optionsad
>
> options=strip
>
>
>
> Eugene
>
>
>
> *From:*Fabrice Durand via PacketFence-users
> [mailto:packetfence-users@lists.sourceforge.net]
> *Sent:* Thursday, March 08, 2018 5:29 AM
> *To:* packetfence-users@lists.sourceforge.net
> <mailto:packetfence-users@lists.sourceforge.net>
> *Cc:* Fabrice Durand <fdur...@inverse.ca>
> <mailto:fdur...@inverse.ca>
> *Subject:* Re: [PacketFence-users] [Packetfence] AD
> authentication with FreeRadius: "reading winbind reply failed!"
>
>
>
> cd /usr/local/pf
>
> raddebug -f var/run/radiusd.sock -t 3000
>
>
>
> Le 2018-03-08 à 02:57, Jimmy Claes via PacketFence-users a écrit :
>
> Hello Fabrice
>
>
>
> When I run the command it says that file does not exist,
> neither does the directory ‘/etc/raddb/’:
>
>
>
>
>
> Regards
>
> Jimmy
>
>
>
> *Van:*Fabrice Durand via PacketFence-users
> [mailto:packetfence-users@lists.sourceforge.net]
> *Verzonden:* woensdag 7 maart 2018 23:09
> *Aan:* packetfence-users@lists.sourceforge.net
> <mailto:packetfence-users@lists.sourceforge.net>
> *CC:* Fabrice Durand <fdur...@inverse.ca>
> <mailto:fdur...@inverse.ca>
> *Onderwerp:* Re: [PacketFence-users] [Packetfence] AD
> authentication with FreeRadius: "reading winbind reply
> failed!"
>
>
>
> Ok can you send me a complete radius request ? (raddebug
> -f var/run/radiusd.sock -t 3000)
>
> Regards
>
> Fabrice
>
>
>
>
>
> Le 2018-03-07 à 02:04, Jimmy Claes via PacketFence-users a
> écrit :
>
> Hello Fabrice
>
>
>
> Realms are already created and associated with the AD.
>
>
> imap://fdur...@mail.inverse.ca:143/fetch%3EUID%3E/PacketFence%20Users%20List%3E24241?header=quotebody&part=1.1.3&filename=image002.png
>
>
>
>
>
> Regards
>
> Jimmy
>
>
>
> *Van:*Durand fabrice via PacketFence-users
> [mailto:packetfence-users@lists.sourceforge.net]
> *Verzonden:* woensdag 7 maart 2018 3:26
> *Aan:* packetfence-users@lists.sourceforge.net
> <mailto:packetfence-users@lists.sourceforge.net>
> *CC:* Durand fabrice <fdur...@inverse.ca>
> <mailto:fdur...@inverse.ca>
> *Onderwerp:* Re: [PacketFence-users] [Packetfence] AD
> authentication with FreeRadius: "reading winbind reply
> failed!"
>
>
>
> Hello Jimmy,
>
> create the realms associated to your domain, like you
> have a user like ACME\bob and b...@acme.com
> <mailto:b...@acme.com> then create the 2 realms and
> associate them to your AD.
>
> Regards
>
> Fabrice
>
>
>
>
>
> Le 2018-03-06 à 07:14, Jimmy Claes via
> PacketFence-users a écrit :
>
> I’ve been trying to figure out this problem for
> days, whenever I try to authenticate a user on
> Windows, I get the following error while the login
> is correct:
>
>
>
>
>
> ‘wbinfo –p’ fails aswell:
>
>
>
>
>
> Winbind service is running:
>
>
>
>
>
> Freeradius service is running:
>
>
>
>
>
> The permissions on winbindd_privileged are
> properly set:
>
>
>
>
>
> Result of running ‘freeradius –X’ attached.
>
>
>
>
>
>
>
>
>
> PacketFence (http://packetfence.org)
>
>
>
>
> --
>
> Fabrice Durand
>
> fdur...@inverse.ca <mailto:fdur...@inverse.ca> :: +1.514.447.4918 (x135)
> :: www.inverse.ca <http://www.inverse.ca>
>
> Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
> (http://packetfence.org)
>
>
>
--
Fabrice Durand
fdur...@inverse.ca :: +1.514.447.4918 (x135) :: www.inverse.ca
Inverse inc. :: Leaders behind SOGo (http://www.sogo.nu) and PacketFence
(http://packetfence.org)
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
