Re: Quick HOWTO : Ch31 : Centralized Logins Using LDAP and RADIUS - Fails on Fedora 6 + debug info

2007-04-17 Thread Alan DeKok
Jacob Jarick wrote:
 ldapadd -d9 -x -D cn=Manager,dc=tfxschool,dc=internal -W -f
 /etc/openldap/tfxschool.internal.ldif - http://pastebin.ca/445899
...
 It seems to be similar if not the same problem I am having with FR
 refusing to auth via ldap to our ADS server. I am stuck though I have
 no idea how to resolve this error and unfortunately the howto assumes
 it just works.
 
 Google suggests that it may be the result of my domain string
 dc=tfxschool,dc=interternal,  which looks correct to me. Our test
 domain is tfxschool.internal . any help / suggestions/ insight would
 be greatly appreciated.

  This is really an LDAP question.  If you can't use LDAP tools to login
to the LDAP server, you won't be able to use the same configuration in
FreeRADIUS.

  Unfortunately, I don't use LDAP, so I can't help you here.  The few
times I have used it, I follow the O'Reilly LDAP book, and it works for me.

  Alan DeKok.
--
  http://deployingradius.com   - The web site of the book
  http://deployingradius.com/blog/ - The blog
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Quick HOWTO : Ch31 : Centralized Logins Using LDAP and RADIUS - Fails on Fedora 6 + debug info

2007-04-17 Thread Jacob Jarick
Might buy that book, thanks for the reply Alan.

I have also posted the same q to the the openldap mailing list so I
hope to get some info from those people.

Its just quite frustrating, the govt has said we can only do it this 1
way (but they themselves have never done it) and I cant find any good
docs/ howtos that cover what I need in detail. All the howtos assume
ldap communication works flawlessly 1st got but unfortunately its
definitely not the situation.

Thanks again Alan, going to make a call about the ldap book.

On 4/18/07, Alan DeKok [EMAIL PROTECTED] wrote:
 Jacob Jarick wrote:
  ldapadd -d9 -x -D cn=Manager,dc=tfxschool,dc=internal -W -f
  /etc/openldap/tfxschool.internal.ldif - http://pastebin.ca/445899
 ...
  It seems to be similar if not the same problem I am having with FR
  refusing to auth via ldap to our ADS server. I am stuck though I have
  no idea how to resolve this error and unfortunately the howto assumes
  it just works.
 
  Google suggests that it may be the result of my domain string
  dc=tfxschool,dc=interternal,  which looks correct to me. Our test
  domain is tfxschool.internal . any help / suggestions/ insight would
  be greatly appreciated.

   This is really an LDAP question.  If you can't use LDAP tools to login
 to the LDAP server, you won't be able to use the same configuration in
 FreeRADIUS.

   Unfortunately, I don't use LDAP, so I can't help you here.  The few
 times I have used it, I follow the O'Reilly LDAP book, and it works for me.

   Alan DeKok.
 --
   http://deployingradius.com   - The web site of the book
   http://deployingradius.com/blog/ - The blog
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html