I found that this works now but ONLY for root, does this get us any closer?


ldap {
                server = "127.0.0.1"
                basedn = "ou=People,dc=istraresearch,dc=com"
                filter = "(uid=%{Stripped-User-Name:-%{User-Name}})"
                identity = "cn=root,dc=istraresearch,dc=com"
                password = xxxxxx

                start_tls = no
                set_auth_type = yes
                auto_header = yes
                password_header = "{crypt}"
                password_attribute = userPassword



[EMAIL PROTECTED] wrote:

Hi,

lovely. HTML email. please dont


looks like your problem is here:

  
rlm_ldap: login attempt by "laurence" with password "xxxx"<br>
rlm_ldap: user DN: cn=Laurence Mayer,ou=people,dc=istraresearch,dc=com<br>
rlm_ldap: (re)connect to 172.16.16.5:389, authentication 1<br>
rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow<br>
rlm_ldap: bind as cn=Laurence
Mayer,ou=people,dc=istraresearch,dc=com/xxxx to 172.16.16.5:389<br>
rlm_ldap: waiting for bind result ...<br>
rlm_ldap: Bind failed with invalid credentials<br>
    

this is in the authenticate section rather than authorize. 
the FR box was unable to bind to your LDAP with the credentials
supplied - is the user 'laurence' able to do such connections
and lookups? 

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
  

-- 
--------------------------
Laurence Mayer
Director of Operations & IT
Istra Research Ltd.
Tel: +972545233107
Fax: +972722765124

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to