Are you sure your filter is correct?  You have ((posixAccount)(uid=toor)),
coming accross as the filter.

Try changing the filter to something like

(&(objectclass=posixaccount)(uid=%{Stripped-User-Name:-%{User-Name}}))


On Wed, 24 Nov 2004, Terry Inzauro wrote:

> Hey folks. I'm trying to get freeradius to utilize openldap for a
> db/auth backend.  I wish to use the information in the
> ou=people,dc=domain,dc=com schema  that already houses the info for host
> logins and such.
>
> My question is:
>
>
> What value(s) should I change in radiusd.conf that searches that schema
> instead of the default radius schma?
>
>
> perhaps the filter value?
>
> ...debug output
>
>    rlm_ldap: ldap_get_conn: Checking Id: 0
> rlm_ldap: ldap_get_conn: Got Id: 0
> rlm_ldap: attempting LDAP reconnection
> rlm_ldap: (re)connect to ldap.server.net:389, authentication 0
> rlm_ldap: bind as cn=manager,dc=domain,dc=net/test to
> ldap.server.net:389
> rlm_ldap: waiting for bind result ...
> rlm_ldap: Bind was successful
> rlm_ldap: performing search in dc=example,dc=net, with filter
> ((posixAccount)(uid=toor))
> rlm_ldap: ldap_search() failed: Bad search filter:
> ((posixAccount)(uid=toor))
> rlm_ldap: search failed
> rlm_ldap: ldap_release_conn: Release Id: 0
>    modcall[authorize]: module "ldap" returns fail for request 0
> modcall: group authorize returns fail for request 0
> There was no response configured: rejecting request 0
>
> ..end debug output
>
>
>
> Regards....
>
> Terry Inzauro
>
>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to