Hi all...
we're evalutating Radiator and so far, I've been having a devil of a time
getting it to talk to our Active Directory server.
Here's the (very very basic) config file I'm using:
------------
# adsi.cfg
Foreground
LogStdout
LogDir .
DbDir .
# User a lower trace level in production systems:
Trace 4
# You will probably want to change this to suit your site.
<Client DEFAULT>
Secret mysecret
DupInterval 0
</Client>
<Realm DEFAULT>
<AuthBy ADSI>
BindString
LDAP://mangrove.abi.org/cn=%n,cn=Recipients,ou=Virginia,o=ABI
DefaultReply Service-Type=Framed-User,Framed-Protocol=PPP
</AuthBy>
</Realm>
-------------------
For some reason, the result I'm getting with the testpw program includes the
following:
Thu May 3 15:59:07 2001: DEBUG: Handling request with Handler
'Realm=DEFAULT'
Thu May 3 15:59:07 2001: DEBUG: Deleting session for larry_prikockis,
203.63.1
54.1, 1234
Thu May 3 15:59:07 2001: DEBUG: Handling with ASDI
Thu May 3 15:59:07 2001: DEBUG: BindString converted to
LDAP://mangrove.abi.org
/cn=larry_prikockis,cn=Recipients,ou=Virginia,o=ABI
Thu May 3 15:59:07 2001: INFO: Access rejected for larry_prikockis: Outside
all
owed login hours
Thu May 3 15:59:07 2001: DEBUG: Packet dump:
*** Sending to 172.16.5.3 port 1036 ....
Code: Access-Reject
Identifier: 242
Authentic: 1234567890123456
Attributes:
Reply-Message = "Request Denied"
---------------------------------------
However, there are no login hours-based restrictions on my account, so I'm
not sure what's going on.
I'm sure there's some simple answer... any clues would be much appreciated.
thanks!
+
Larry J. Prikockis
Web Applications Specialist
Association for Biodiversity Information
703-908-1833 / [EMAIL PROTECTED] / www.abi.org
+
All parts should go together without forcing. You must remember that the
parts you are reassembling were disassembled by you. Therefore, if you
can't get them together again, there must be a reason. By all means, do not
use a hammer.
-- IBM maintenance manual, 1925
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
