RE: Slow Ldap Authorization

2013-01-15 Thread Tyler Brady
On 01/15/2013 07:45 AM, Phil Mayers wrote: Sorry, I've just realised another thing you can try - disable referral chasing. This is an option on the ldap module - try this: ldap { ... chase_referrals = no } This solved my problem. Thank you! - List info/subscribe/unsubscribe? See

RE: Slow Ldap Authorization

2013-01-14 Thread Tyler Brady
Can someone help point me in the right direction? LDAP is taking too long to authorize due to something in my configuration. Keep in mind that I am about as newb as you can get when it comes to this stuff. I apologize for my ignorance. Any help would be greatly appreciated. [ldap] Bind was

RE: Slow Ldap Authorization

2013-01-14 Thread Tyler Brady
Look. This is absolutely not a RADIUS issue, you need to buy a book on LDAP and read up on referals, and escaping special characters. Anyone involved in AAA needs to know about these fundimental protocols, spoonfeeding you information will not help your understanding of them. -Arran

LDAP Reply Attributes

2013-01-11 Thread Tyler Brady
I'm sure this is an easy issue to solve, but my simple brain can't seem to put the pieces together. Any help would be greatly appreciated. I'm trying to authorize a login into a Cisco switch with admin privileges. Users: DEFAULT = LDAP-Group == Radius-Users

RE: LDAP Reply Attributes

2013-01-11 Thread Tyler Brady
Switch config issue? Ensure your switch is configured to authorize over RADIUS as well as to authenticate over RADIUS. (sounds like its doing the latter but not the former) You were absolutely correct. I’m dumb and forgot that I removed the authorization statement from my switch awhile back.

Slow Ldap Authorization

2013-01-11 Thread Tyler Brady
Version 2.1.10 Since adding LDAP authorization, my login time has slowed down quite a bit. It takes 4 or 5 seconds longer for freeRadius to get through all of the [ldap] fields and send an Access-Accept. Is this a normal amount of time, or is there something in my configuration that is causing

RE: AD Authentication Permissions

2013-01-10 Thread Tyler Brady
On Wed 1/9/2013 4:31 PM, John Dennis wrote: I think my bind is working fine now, but my basedn = o=My Org,c=UA field is still wrong. I'm still not sure of the syntax. Any suggestions? I don't see a basedn of o=My Org,c=UA anywhere, however I do see a basedn of

RE: AD Authentication Permissions

2013-01-09 Thread Tyler Brady
Can someone give more details on setting up LDAP groups? So far I have attempted to modify the users file and the ldap module. I can't seem to get the ldap module configured properly, but I'm sure that's just one of many issues. ldap { # # Note that this needs to match the name

RE: AD Authentication Permissions

2013-01-09 Thread Tyler Brady
I think my bind is working fine now, but my basedn = o=My Org,c=UA field is still wrong. I'm still not sure of the syntax. Any suggestions? [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] (re)connect to

AD Authentication Permissions

2013-01-04 Thread Tyler Brady
Hello, I apologize if these questions have already been answered. I have scoured the internet for help, but have been unable to find what I'm looking for. Keep in mind this was the first time I have ever used linux so at the beginning of this project I was beyond newb. I am setting up a