Re: Re: LDAP auth success / User reject

2010-11-19 Thread Michael Arndt
Hello *, Problem solved thx to Alans help -Find out what part of the configuration is setting Auth-Type := Reject -Look in the files configuration, and in the data in LDAP. The reject was the last default statement in the users file My problem was, that the patterns for both entries before

Re: LDAP auth success / User reject

2010-11-18 Thread Alan DeKok
Michael Arndt wrote: below debug output hu Nov 18 11:20:52 2010 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Use -X. You've added an additional -x, which makes the output harder to read. Thu Nov 18 11:20:52 2010 : Debug: rad_check_password: Found

Re: Re: LDAP auth success / User reject

2010-11-18 Thread Michael Arndt
Alan, Use -X. You've added an additional -x, which makes the output harder to read. ok, understood, attached below Thu Nov 18 11:20:52 2010 : Debug: rad_check_password: Found Auth-Type Reject Thu Nov 18 11:20:52 2010 : Debug: rad_check_password: Auth-Type = Reject, rejecting user

Re: LDAP auth success / User reject

2010-11-18 Thread Alan DeKok
Michael Arndt wrote: any hints, how to proceed to debug from where the Reject for rad_check_passwd is caused ? Find out what part of the configuration is setting Auth-Type := Reject. I checked ldap atributes and verified correctness of user passwd for simple bind with ldapsearch So i at