Hi!  I was trying to configure radiator to authenticate to Microsoft
LDAP server.  The versions of the software are as follows:

Radiator version 2.16.3
perl-ldap version 0.20
Perl    version 5.005_03

Here is my radius.cfg for the radiator:
---8<--------------------------------------------------------
LogDir          /usr/local/etc/raddb
DbDir           /usr/local/etc/raddb

# You will probably want to change this to suit your site.
<Client DEFAULT>
        Secret  blahsecret
</Client>

<Log FILE>
        Filename %L/logdir/logfile.%Y%m%d
        Trace 4
</Log>

<Realm DEFAULT>
        <AuthBy LDAP2>
                Host            192.1.1.2
                AuthDN          cn=administrator,ou=members,o=blahbase
                AuthPassword    blahblah
                BaseDN          o=blahbase
                Port            1004
                UsernameAttr    cn
                PasswordAttr    userPassword
        </AuthBy>
        # Log accounting to the detail file in LogDir
        AcctLogFileName %L/radacct/detail
</Realm>

-8<--------------------------------------------------------------------

>From the debug, I kept seeing the password as an array instead of the
actual password value.

"Tue Aug 29 09:10:45 2000: DEBUG: LDAP got userPassword: ARRAY(0x869e5c0)"

Looking at the AuthByLDAP2.pm, I see at line 385, the following statement:

my @vals = $ent->get($attr);


However, from the following man page for perl-ldap version 0.20

--8<------------------------------------------------------------------
perldoc Net::LDAP::Entry

       get ( ATTR [, OPTIONS ] )
           Get the values for the attribute ATTR. The result will
           be a reference to an array, if that attribute exists.
           If the attribute does not exist the undef will be
           returned.
--8<-------------------------------------------------------------------

it appears that $ent->get($attr) returns a reference to an array.  I think
the syntax is not correct.  I think it should be changed to:

my @vals = @{ $ent->get($attr) };


After the above modification, my wonderful Radiator can talk to Microsoft
LDAP happily .


Just thought that I should share the finding with the list.

Long live open source.

Cheers!

________________________________
Goh Sek Chye
SingNet Network Operations Centre



===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to