Hello John -
I will need to see a copy of your configuration file (no secrets) together with a complete trace 4 debug showing the entire sequence of processing including all the packet dumps.
regards
Hugh
On Friday, Apr 4, 2003, at 02:02 Australia/Melbourne, John McFadden wrote:
I'm having a small problem getting PEAP to work with OpenLDAP.
It appears my userid credentials get accepted but the anonymous user gets rejected.
Thu Apr 3 11:00:12 2003: DEBUG: Handling request with Handler 'TunnelledByPEAP=1'
Thu Apr 3 11:00:12 2003: DEBUG: Deleting session for , 129.100.1.145, 29
Thu Apr 3 11:00:12 2003: DEBUG: Handling with Radius::AuthLDAP2:
Thu Apr 3 11:00:12 2003: DEBUG: Handling with EAP: code 2, 70, 61
Thu Apr 3 11:00:12 2003: DEBUG: Response type 26
Thu Apr 3 11:00:12 2003: INFO: Connecting to 129.100.3.19, port 389
Thu Apr 3 11:00:12 2003: INFO: Attempting to bind with , (server 129.100.3.19:389)
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got result for uid=dasjlm,ou=People,dc=its,dc=uwo,dc=ca
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got uid: dasjlm
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got cn: John McFadden
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got objectClass: account posixAccount top shadowAccount
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got shadowMax: 99999
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got shadowWarning: 7
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got loginShell: /bin/bash
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got uidNumber: 14257
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got gidNumber: 134
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got homeDirectory: /home/dasjlm
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got gecos: John McFadden
Thu Apr 3 11:00:12 2003: DEBUG: LDAP got userPassword: {MD5}1Jbzp9vuY3lJ/SrbMnoaDQ==
Thu Apr 3 11:00:12 2003: DEBUG: Radius::AuthLDAP2 looks for match with dasjlm
Thu Apr 3 11:00:12 2003: DEBUG: Radius::AuthLDAP2 ACCEPT:
Thu Apr 3 11:00:12 2003: INFO: Access rejected for anonymous: EAP MSCHAP-V2 Authentication failure
Does this mean I need to add an anonymous userid to OpenLDAP?
If so I assume it has to be an id with no password?
Any other methods to do this?
Thanks in advance. John McFadden
=== Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
NB: have you included a copy of your configuration file (no secrets), together with a trace 4 debug showing what is happening?
-- Radiator: the most portable, flexible and configurable RADIUS server anywhere. Available on *NIX, *BSD, Windows 95/98/2000, NT, MacOS X. - Nets: internetwork inventory and management - graphical, extensible, flexible with hardware, software, platform and database independence.
=== Archive at http://www.open.com.au/archives/radiator/ Announcements on [EMAIL PROTECTED] To unsubscribe, email '[EMAIL PROTECTED]' with 'unsubscribe radiator' in the body of the message.
