Thanks frank,
Regarding searching base dn from parent node (correct term I hope) I
did try on the weekend but to no success but retrying today worked
fine :) (quite possibly me doing more that one change at a time
again).
I also added the filter as per your suggestion.
I appreciate the feedback as this has made things alot easier.
On 4/30/07, Ranner, Frank MR [EMAIL PROTECTED] wrote:
-Original Message-
From:
[EMAIL PROTECTED]
eradius.org [mailto:freeradius-users-
[EMAIL PROTECTED] On
Behalf Of Jacob Jarick
Sent: Sunday, 29 April 2007 20:48
To: FreeRadius users mailing list
Subject: Re: Freeradius Auth via LDAP against Active
Directory Server 2003
OK tried with 1.1.4 and yerp works great.
radiusd -X output: http://pastebin.ca/464153
radiusd.conf: http://pastebin.ca/464156
I also realised a mistake I have been making, see I want to
search the whole active directory, hence I kept setting my
basedn without an ou.
After seeing your excellent example and auth'ing had failed I
stuck in an OU and tried a user from the OU and worked fine.
So my questions is this, to auth people from multiple OU's do
I create a new ldap module for each OU or is their a simpler way.
You should be able to set the base DN at the parent node, because the
search is a subtree search. In my setup (openldap, not AD) I also
use the base_filter directive in radiusd.conf to restrict the type of
records to be searched. I use base_filter =
(objectclass=radiusprofile)
You should use base_filter = (objectclass=user) This goes into the
ldap
Section somewhere near the basedn line.
Regards,
Frank Ranner
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
