Hello Larry -
This is fixed in Radiator 2.18.1.
>From the history file:
Fixed a problem in AuthBy ADSI where new AD users with a default logon times
setup would not be able to login and get the message Outside allowed login
hours.
regards
Hugh
On Friday 04 May 2001 06:08, Larry Prikockis wrote:
> Hi all...
> we're evalutating Radiator and so far, I've been having a devil of a time
> getting it to talk to our Active Directory server.
> Here's the (very very basic) config file I'm using:
> ------------
> # adsi.cfg
>
> Foreground
> LogStdout
> LogDir .
> DbDir .
> # User a lower trace level in production systems:
> Trace 4
>
> # You will probably want to change this to suit your site.
> <Client DEFAULT>
> Secret mysecret
> DupInterval 0
> </Client>
>
> <Realm DEFAULT>
>
> <AuthBy ADSI>
> BindString
> LDAP://mangrove.abi.org/cn=%n,cn=Recipients,ou=Virginia,o=ABI
> DefaultReply Service-Type=Framed-User,Framed-Protocol=PPP
> </AuthBy>
> </Realm>
> -------------------
> For some reason, the result I'm getting with the testpw program includes
> the following:
>
>
> Thu May 3 15:59:07 2001: DEBUG: Handling request with Handler
> 'Realm=DEFAULT'
> Thu May 3 15:59:07 2001: DEBUG: Deleting session for larry_prikockis,
> 203.63.1
> 54.1, 1234
> Thu May 3 15:59:07 2001: DEBUG: Handling with ASDI
> Thu May 3 15:59:07 2001: DEBUG: BindString converted to
> LDAP://mangrove.abi.org
> /cn=larry_prikockis,cn=Recipients,ou=Virginia,o=ABI
> Thu May 3 15:59:07 2001: INFO: Access rejected for larry_prikockis:
> Outside all
> owed login hours
> Thu May 3 15:59:07 2001: DEBUG: Packet dump:
> *** Sending to 172.16.5.3 port 1036 ....
> Code: Access-Reject
> Identifier: 242
> Authentic: 1234567890123456
> Attributes:
> Reply-Message = "Request Denied"
>
> ---------------------------------------
>
> However, there are no login hours-based restrictions on my account, so I'm
> not sure what's going on.
> I'm sure there's some simple answer... any clues would be much appreciated.
> thanks!
>
> +
> Larry J. Prikockis
> Web Applications Specialist
> Association for Biodiversity Information
> 703-908-1833 / [EMAIL PROTECTED] / www.abi.org
> +
> All parts should go together without forcing. You must remember that the
> parts you are reassembling were disassembled by you. Therefore, if you
> can't get them together again, there must be a reason. By all means, do
> not use a hammer.
> -- IBM maintenance manual, 1925
>
> ===
> Archive at http://www.starport.net/~radiator/
> Announcements on [EMAIL PROTECTED]
> To unsubscribe, email '[EMAIL PROTECTED]' with
> 'unsubscribe radiator' in the body of the message.
--
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
===
Archive at http://www.starport.net/~radiator/
Announcements on [EMAIL PROTECTED]
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.
