I'm having a small problem getting PEAP to work with OpenLDAP.

It appears my userid credentials get accepted but the anonymous user gets rejected.


Thu Apr 3 11:00:12 2003: DEBUG: Handling request with Handler 'TunnelledByPEAP=1'
Thu Apr 3 11:00:12 2003: DEBUG: Deleting session for , 129.100.1.145, 29
Thu Apr 3 11:00:12 2003: DEBUG: Handling with Radius::AuthLDAP2:
Thu Apr 3 11:00:12 2003: DEBUG: Handling with EAP: code 2, 70, 61
Thu Apr 3 11:00:12 2003: DEBUG: Response type 26
Thu Apr 3 11:00:12 2003: INFO: Connecting to 129.100.3.19, port 389
Thu Apr 3 11:00:12 2003: INFO: Attempting to bind with , (server 129.100.3.19:389)
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got result for uid=dasjlm,ou=People,dc=its,dc=uwo,dc=ca
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got uid: dasjlm
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got cn: John McFadden
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got objectClass: account posixAccount top shadowAccount
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got shadowMax: 99999
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got shadowWarning: 7
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got loginShell: /bin/bash
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got uidNumber: 14257
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got gidNumber: 134
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got homeDirectory: /home/dasjlm
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got gecos: John McFadden
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got userPassword: {MD5}1Jbzp9vuY3lJ/SrbMnoaDQ==
Thu Apr 3 11:00:12 2003: DEBUG: Radius::AuthLDAP2 looks for match with dasjlm
Thu Apr 3 11:00:12 2003: DEBUG: Radius::AuthLDAP2 ACCEPT:
Thu Apr 3 11:00:12 2003: INFO: Access rejected for anonymous: EAP MSCHAP-V2 Authentication failure



Does this mean I need to add an anonymous userid to OpenLDAP?


If so I assume it has to be an id with no password?

Any other methods to do this?

Thanks in advance.
John McFadden


=== Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.

Reply via email to