Hello,
I don't touch my Radius server since 2 weeks, and know when I try do
some radtest, it show me Acces-Reject and in log:
Mon Dec 11 14:51:47 2006 : Debug: Processing the authorize section
of radiusd.conf
Mon Dec 11 14:51:47 2006 : Debug: modcall: entering group authorize
for request 2
Mon Dec 11 14:51:47 2006 : Debug: modsingle[authorize]: calling
ldap (rlm_ldap) for request 2
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: - authorize
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: performing user
authorization for rka
Mon Dec 11 14:51:47 2006 : Debug: radius_xlat: '(uid=rka)'
Mon Dec 11 14:51:47 2006 : Debug: radius_xlat: 'ou=users,dc=firm'
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: ldap_get_conn: Checking
Id: 0
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: performing search in
ou=users,dc=firm, with filter (uid=rka)
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: looking for check items
in directory...
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: looking for reply items
in directory...
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: Setting Auth-Type = ldap
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: user rka authorized to
use remote access
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: ldap_release_conn:
Release Id: 0
Mon Dec 11 14:51:47 2006 : Debug: modsingle[authorize]: returned
from ldap (rlm_ldap) for request 2
Mon Dec 11 14:51:47 2006 : Debug: modcall[authorize]: module "ldap"
returns ok for request 2
Mon Dec 11 14:51:47 2006 : Debug: modcall: leaving group authorize
(returns ok) for request 2
Mon Dec 11 14:51:47 2006 : Debug: rad_check_password: Found Auth-
Type ldap
Mon Dec 11 14:51:47 2006 : Debug: auth: type "LDAP"
Mon Dec 11 14:51:47 2006 : Debug: Processing the authenticate
section of radiusd.conf
Mon Dec 11 14:51:47 2006 : Debug: modcall: entering group LDAP for
request 2
Mon Dec 11 14:51:47 2006 : Debug: modsingle[authenticate]: calling
ldap (rlm_ldap) for request 2
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: - authenticate
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: login attempt by "rka"
with password "?Pđ ,??č?ń/9?Â??"
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: user DN:
uid=rka,ou=Users,dc=firm
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: (re)connect to ldap:636,
authentication 1
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: setting TLS mode to 1
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: setting TLS CACert File
to /etc/freeradius/cert/ca.pem
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: setting TLS Cert File to /
etc/freeradius/cert/radius.crt
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: setting TLS Key File to /
etc/freeradius/cert/radius.key
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: bind as
uid=rka,ou=Users,dc=firm/?Pđ ,??č?ń/9?Â?? to ldap:636
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: waiting for bind result ...
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap: Bind failed with invalid
credentials
Mon Dec 11 14:51:47 2006 : Debug: rlm_ldap:
Mon Dec 11 14:51:47 2006 : Debug: modsingle[authenticate]: returned
from ldap (rlm_ldap) for request 2
Mon Dec 11 14:51:47 2006 : Debug: modcall[authenticate]: module
"ldap" returns reject for request 2
Mon Dec 11 14:51:47 2006 : Debug: modcall: leaving group LDAP
(returns reject) for request 2
Mon Dec 11 14:51:47 2006 : Debug: auth: Failed to validate the user.
Mon Dec 11 14:51:47 2006 : Debug: WARNING: Unprintable characters
in the password. ? Double-check the shared secret on the server and
the NAS!
Mon Dec 11 14:51:47 2006 : Debug: Delaying request 2 for 1 seconds
Mon Dec 11 14:51:47 2006 : Debug: Finished request 2
Mon Dec 11 14:51:47 2006 : Debug: Going to the next request
Mon Dec 11 14:51:47 2006 : Debug: --- Walking the entire request list
---
Mon Dec 11 14:51:47 2006 : Debug: Waking up in 1 seconds...
Mon Dec 11 14:51:48 2006 : Debug: --- Walking the entire request list
---
Mon Dec 11 14:51:48 2006 : Debug: Waking up in 1 seconds...
Mon Dec 11 14:51:49 2006 : Debug: --- Walking the entire request list
---
Last when i run that servers all was oki :( And know :( not :( Why ?
I'm sure that my secret is good.
Can you help me?
BR Kamyk
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
