[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freeradius-users
Subject:    RE: Authenticate users from freeradius to a Windows 2000 AD
From:       "Vitor Paiva da Silva" <vsilva () REGRA ! pt>
Date:       2005-03-30 11:37:37
Message-ID: 942491D58D4D6C44882CDCE7D584159B0A8AB4 () isis ! regra ! pt
[Download RAW message or body]


Hi,
Sorry about the late reply. I tried your suggestion, but without success. I don't \
know if I am using the right parameters in the users, the eap.conf and the \
radiusd.conf files. Have you any sample config? Or any suggested docs?

Many thanks
Vitor
-----Original Message-----
From: freeradius-users-admin@lists.freeradius.org \
                [mailto:freeradius-users-admin@lists.freeradius.org] On Behalf Of \
                Sandworm
Sent: segunda-feira, 21 de Março de 2005 2:16
To: freeradius-users@lists.freeradius.org
Subject: RE: Authenticate users from freeradius to a Windows 2000 AD 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


> -----Original Message-----
> From: freeradius-users-admin@lists.freeradius.org
> [mailto:freeradius-users-admin@lists.freeradius.org] On
> Behalf Of Vitor Paiva da Silva
> Sent: Saturday, 19 March 2005 2:58 AM
> To: freeradius-users@lists.freeradius.org
> Subject: Authenticate users from freeradius to a Windows 2000 AD
> 

> rlm_ldap: ldap_search() failed: Operations error
> 
> rlm_ldap: search failed
> 
> rlm_ldap: ldap_release_conn: Release Id: 0
> 
> modcall[authorize]: module "ldap" returns fail for request 0
> 
> modcall: group authorize returns fail for request 0
> 

This typically happens when AD referrals fail. In your LDAP
configuration you need to turn off dereferencing and referrals.
This is usually done by adding the following lines to
/etc/openldap/ldap.conf on the FreeRadius box (which is the AD LDAP
client in this case):

deref never
referrals no

Regards
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkI+LlYACgkQmw4BJyaatJ3fagCfbSRQwv8i98MUNtwdF7xpGuoXezUA
oKwTzeO131L0BZJ/9sf4oig7rVJ4
=oh86
-----END PGP SIGNATURE-----



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


[prev in list] [next in list] [prev in thread] [next in thread]