Re: group search filter openLDAP

2012-03-25 Thread dhanushka ranasinghe
Hi.. As you mention i able to get that ldap group work , i add two additional entrys in /etc/freeradius/user file to filter the users , these are , DEFAULT Ldap-Group == cn=people,ou=users,dc=home,dc=com, Auth-Type := Accept Reply-Message = You are Accepted DEFAULT Auth-Type := Reject

Re: group search filter openLDAP

2012-03-25 Thread Fajar A. Nugraha
On Sun, Mar 25, 2012 at 1:35 PM, dhanushka ranasinghe parakrama1...@gmail.com wrote: DEFAULT Ldap-Group == cn=people,ou=users,dc=home,dc=com, Auth-Type := Accept  Reply-Message = You are Accepted then i face the much bigger issue,  then freeradius start to ignore the ldap userpassword. even

Re: group search filter openLDAP

2012-03-25 Thread dhanushka ranasinghe
Hi.. how can i make it to read password and then accept it..for that ldap group Thank You Dhanushka On 25 March 2012 12:12, Fajar A. Nugraha l...@fajar.net wrote: On Sun, Mar 25, 2012 at 1:35 PM, dhanushka ranasinghe parakrama1...@gmail.com wrote: DEFAULT Ldap-Group ==

Re: group search filter openLDAP

2012-03-25 Thread dhanushka ranasinghe
Hi.. we changed Auth-Type := Accept to Auth-Type := PAP , then it starts to work Thank for the help Thank You dhanushka On 25 March 2012 12:17, dhanushka ranasinghe parakrama1...@gmail.com wrote: Hi.. how can i make it to read  password and then accept it..for that ldap group Thank You

Re: group search filter openLDAP

2012-03-25 Thread Fajar A. Nugraha
On Sun, Mar 25, 2012 at 4:47 PM, dhanushka ranasinghe parakrama1...@gmail.com wrote: Hi.. we changed Auth-Type := Accept  to Auth-Type := PAP , then it starts to work You shouldn't need to do that. A cleaner way would be to read http://freeradius.org/radiusd/man/users.html , and probably just

Re: group search filter openLDAP

2012-03-25 Thread Phil Mayers
On 03/25/2012 12:09 PM, Fajar A. Nugraha wrote: On Sun, Mar 25, 2012 at 4:47 PM, dhanushka ranasinghe parakrama1...@gmail.com wrote: Hi.. we changed Auth-Type := Accept to Auth-Type := PAP , then it starts to work You shouldn't need to do that. A cleaner way would be to read

Re: group search filter openLDAP

2012-03-24 Thread Phil Mayers
On 03/24/2012 05:51 AM, dhanushka ranasinghe wrote: Hi guys, im using freeradius with LDAP , and its authentication works fine when i use following configuration. server = ldap.home.com identity = cn=admin,dc=home,dc=com password = home basedn =

group search filter openLDAP

2012-03-23 Thread dhanushka ranasinghe
Hi guys, im using freeradius with LDAP , and its authentication works fine when i use following configuration. server = ldap.home.com identity = cn=admin,dc=home,dc=com password = home basedn = ou=users,dc=home,dc=com filter =