Hello to all,
I am evaluating Radiator and I am trying to authenticate since a Linux Box to
LDAP in a Windows Server 2008.
I could connect to LDAP with AuthDN and AuthPassword, but I couldn't
authenticate users.
This is the configuration part:
<AuthBy LDAP2>
Host XXX
AuthDN XXXX
AuthPassword XXXX
BaseDN cn=Users,dc=XXX,dc=XXX
SearchFilter cn=Grupo,cn=SubGrupo (--- I tried within and
without this line)
ServerChecksPassword
UsernameAttr sAMAccountName
Version 3
NoDefault
</AuthBy>
Testing ...
[user@server ~]$ /usr/bin/radpwtst -user USER -password PASS --noacct
-auth_port 1812
sending Access-Request...
Rejected: Request Denied
[user@server ~]$
And finally the log:
[user@server ~]# Tue Jul 12 19:43:06 2011: DEBUG: Packet dump:
*** Received from 127.0.0.1 port 35641 ....
Code: Access-Request
Identifier: 111
Authentic: xxx
Attributes:
User-Name = "USER"
Service-Type = Framed-User
NAS-IP-Address = 203.63.154.1
NAS-Identifier = "203.63.154.1"
NAS-Port = 1234
Called-Station-Id = "123456789"
Calling-Station-Id = "987654321"
NAS-Port-Type = Async
User-Password = xxxx
Tue Jul 12 19:43:06 2011: DEBUG: Handling request with Handler 'Realm=DEFAULT',
Identifier ''
Tue Jul 12 19:43:06 2011: DEBUG: Deleting session for USER, 203.63.154.1, 1234
Tue Jul 12 19:43:06 2011: DEBUG: Handling with Radius::AuthGROUP:
Tue Jul 12 19:43:06 2011: DEBUG: Handling with Radius::AuthLDAP2:
Tue Jul 12 19:43:06 2011: INFO: Connecting to ldap:389
Tue Jul 12 19:43:06 2011: INFO: Attempting to bind to LDAP server ldap:389
Tue Jul 12 19:43:06 2011: DEBUG: No entries for dvalencia found in LDAP database
Tue Jul 12 19:43:06 2011: DEBUG: Radius::AuthLDAP2 looks for match with USER
[USER]
Tue Jul 12 19:43:06 2011: DEBUG: Radius::AuthLDAP2 REJECT: No such user: USER
[USER]
Tue Jul 12 19:43:06 2011: DEBUG: Radius::AuthGROUP: result: REJECT, No such
user
Tue Jul 12 19:43:06 2011: DEBUG: AuthBy GROUP result: REJECT, No such user
Tue Jul 12 19:43:06 2011: INFO: Access rejected for USER: No such user
Tue Jul 12 19:43:06 2011: DEBUG: Packet dump:
*** Sending to 127.0.0.1 port 35641 ....
Code: Access-Reject
Identifier: 111
Attributes:
Reply-Message = "Request Denied"
Please somebody tellme what I am doing wrong or what I am missing in order to
connect from radiator in linux to ldap in ms-windows server 2008
Rgds,
-- js
_______________________________________________
radiator mailing list
[email protected]
http://www.open.com.au/mailman/listinfo/radiator
