RE: Slow Ldap Authorization

2013-01-15 Thread Tyler Brady
On 01/15/2013 07:45 AM, Phil Mayers wrote: Sorry, I've just realised another thing you can try - disable referral chasing. This is an option on the ldap module - try this: ldap { ... chase_referrals = no } This solved my problem. Thank you! - List info/subscribe/unsubscribe? See

RE: Slow Ldap Authorization

2013-01-14 Thread Tyler Brady
Can someone help point me in the right direction? LDAP is taking too long to authorize due to something in my configuration. Keep in mind that I am about as newb as you can get when it comes to this stuff. I apologize for my ignorance. Any help would be greatly appreciated. [ldap] Bind was

Re: Slow Ldap Authorization

2013-01-14 Thread Arran Cudbard-Bell
On 14 Jan 2013, at 23:35, Tyler Brady tbr...@stc-comm.com wrote: Can someone help point me in the right direction? LDAP is taking too long to authorize due to something in my configuration. Keep in mind that I am about as newb as you can get when it comes to this stuff. I apologize for my

RE: Slow Ldap Authorization

2013-01-14 Thread Tyler Brady
Look. This is absolutely not a RADIUS issue, you need to buy a book on LDAP and read up on referals, and escaping special characters. Anyone involved in AAA needs to know about these fundimental protocols, spoonfeeding you information will not help your understanding of them. -Arran

Re: Slow Ldap Authorization

2013-01-14 Thread Phil Mayers
On 01/11/2013 10:15 PM, Tyler Brady wrote: basedn = DC=company,DC=com Try setting a more specific (longer) base DN. As Arran has pointed out, you're getting LDAP referrals. Active Directory likes to do this if you query the LDAP tree from a point above 1 database, even though

Re: Slow Ldap Authorization

2013-01-14 Thread Phil Mayers
On 01/15/2013 07:45 AM, Phil Mayers wrote: On 01/11/2013 10:15 PM, Tyler Brady wrote: basedn = DC=company,DC=com Try setting a more specific (longer) base DN. As Arran has pointed out, you're getting LDAP referrals. Active Directory likes to do this if you query the LDAP tree from a

Slow Ldap Authorization

2013-01-11 Thread Tyler Brady
Version 2.1.10 Since adding LDAP authorization, my login time has slowed down quite a bit. It takes 4 or 5 seconds longer for freeRadius to get through all of the [ldap] fields and send an Access-Accept. Is this a normal amount of time, or is there something in my configuration that is causing

Re: Slow Ldap Authorization

2013-01-11 Thread Arran Cudbard-Bell
On 11 Jan 2013, at 22:15, Tyler Brady tbr...@stc-comm.com wrote: Version 2.1.10 Since adding LDAP authorization, my login time has slowed down quite a bit. It takes 4 or 5 seconds longer for freeRadius to get through all of the [ldap] fields and send an Access-Accept. Is this a normal