Thanks again Lionel ;) !!!!!!!!!!!
 
 
 
José Luis Solano
SGI - Soluciones Globales Internet S.A.
Delegación Regional Sur
[EMAIL PROTECTED]
(+34) 954.088.060
----- Original Message -----
Sent: Monday, February 16, 2004 7:38 PM
Subject: RE: Problem with remote LDAP

Hi,
 
Remove the "access_attr = "dialupAccess"" parameter in LDAP config (put in comment). And retest.
 
 
Lionel Gavage.
 

-----Message d'origine-----
De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de José Luis Solano
Envoyé : lundi 16 février 2004 19:32
Ŕ : [EMAIL PROTECTED]
Objet : Problem with remote LDAP

 
 
 

Dear all !!!!!!
 
My old configuration was (2 different PC's):
IP Client: XXX.XXX.XXX.205
IP Freeradius and LDAP: XXX.XXX.XXX.222
 
With this configuration, my system runs ok!!
 
 
My currently configuration is (3 different PC's):
IP Client: XXX.XXX.XXX.205
IP Freeradius: XXX.XXX.XXX.206
IP LDAP: XXX.XXX.XXX.222
 
When I change the freeradius I can't access to my LDAP. (I have changed the server freeradiud IP in my access point too!!!)
 
 
freeradius logs
-----------------------------------------
S-IP-Address = 192.168.49.252
        NAS-Port = 0
        Called-Station-Id = "00-80-C8-01-01-55"
        Calling-Station-Id = "00-0B-46-26-1B-E2"
        NAS-Identifier = "DWL-1000AP+"
        Framed-MTU = 1380
        NAS-Port-Type = Wireless-802.11
        EAP-Message = 0x0201001101303031313232333334343535
        Message-Authenticator = 0x3ff37aad8c3b000bbb078cef515b3a4a
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok for request 0
rlm_ldap: - authorize
rlm_ldap: performing user authorization for 001122334455
radius_xlat:  '(uid=001122334455)'
radius_xlat:  'ou=Wireless,dc=sgi,dc=es'
ldap_get_conn: Got Id: 0  <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<============================
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to XXX.XXX.XXX.222:389, authentication 0  <<<<<<<<<<<<<<<========================
rlm_ldap: bind as cn=Manager,dc=sgi,dc=es/izadisan to 192.168.49.222:389
rlm_ldap: waiting for bind result ...
rlm_ldap: performing search in ou=Wireless,dc=sgi,dc=es, with filter (uid=001122334455)
rlm_ldap: no dialupAccess attribute - access denied by default <<<<<<<<<<<<<<<<<<<<<<<<==========================
ldap_release_conn: Release Id: 0
  modcall[authorize]: module "ldap" returns userlock for request 0
modcall: group authorize returns userlock for request 0
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...

 
 
my radiusd.conf
------------------------------------
....
 
ldap {
  server = XXX.XXX.XXX.222 
  identity = "cn=Manager,dc=sgi,dc=es"
  password = izadisan
  basedn = "ou=Wireless,dc=sgi,dc=es"
  filter = "(uid=%u)"
  start_tls = no
  tls_mode = no
  access_attr = "dialupAccess"
  dictionary_mapping = ${raddbdir}/ldap.attrmap
  ldap_connections_number = 5
  timeout = 4
  timelimit = 3
  net_timeout = 1
 }
 
....
 
 
any idea??????
 
 
Thanks in advance!!!!!!!!!
 

 
 
 
 
 
 
 
 
 
 
José Luis Solano
SGI - Soluciones Globales Internet S.A.
Delegación Regional Sur
[EMAIL PROTECTED]
(+34) 954.088.060

Reply via email to