(RADIATOR) Lotus Notes 7.0.2 LDAP
Sergei Keler
skeler at gdc.ru
Wed Aug 29 04:16:04 CDT 2007
Hi!
Wed Aug 29 13:12:36 2007: DEBUG: Packet dump:
*** Received from 192.168.0.254 port 1645 ....
Packet length = 155
01 72 00 9b d4 e9 f0 f6 d3 5d 56 98 00 00 00 00
00 00 00 00 07 06 00 00 00 01 01 0e 73 6b 69 6c
6c 65 72 40 77 69 66 69 1a 10 00 00 01 37 0b 0a
d4 e9 f0 f6 d3 5d 56 98 1a 3a 00 00 01 37 01 34
01 01 ee 94 61 55 d6 eb 95 c5 53 90 45 4c d2 11
f7 c2 48 d1 de 01 07 bf a4 07 0e ab 89 ce a1 3a
12 c4 d6 74 56 46 a8 2e e1 6f ba f3 af 61 bb 0a
db 21 3d 06 00 00 00 05 05 06 00 00 01 81 57 11
55 6e 69 71 2d 53 65 73 73 2d 49 44 33 38 35 06
06 00 00 00 02 04 06 c0 a8 00 fe
Code: Access-Request
Identifier: 114
Authentic: <212><233><240><246><211>]V<152><0><0><0><0><0><0><0><0>
Attributes:
Framed-Protocol = PPP
User-Name = "skiller at wifi"
MS-CHAP-Challenge = <212><233><240><246><211>]V<152>
MS-CHAP-Response =
<1><1><238><148>aU<214><235><149><197>S<144>EL<210><17><247><194>H<209><222><1><7><191><164><7><14><171><137><206><161>:<18><196><214>tVF<168>.<225>o<186><243><175>a<187><10><219>!
NAS-Port-Type = Virtual
NAS-Port = 385
NAS-Port-Id = "Uniq-Sess-ID385"
Service-Type = Framed-User
NAS-IP-Address = 192.168.0.254
Wed Aug 29 13:12:36 2007: DEBUG: Rewrote user name to skiller at wifi
Wed Aug 29 13:12:36 2007: DEBUG: Rewrote user name to skiller at wifi
Wed Aug 29 13:12:36 2007: DEBUG: Handling request with Handler
'Realm=wifi'
Wed Aug 29 13:12:36 2007: DEBUG: Rewrote user name to skiller
Wed Aug 29 13:12:36 2007: DEBUG: Deleting session for skiller at wifi,
192.168.0.254, 385
Wed Aug 29 13:12:36 2007: DEBUG: Handling with Radius::AuthLDAP2:
Wed Aug 29 13:12:36 2007: INFO: Connecting to notes.office.gdc.ru:10389
Wed Aug 29 13:12:36 2007: DEBUG: !!! my level=15.
Wed Aug 29 13:12:36 2007: INFO: Attempting to bind to LDAP server
notes.office.gdc.ru:10389
Net::LDAP=HASH(0x8be8e68) sending:
30 1D 02 01 05 60 18 02 01 02 04 08 64 69 61 6C 0....`......dial
61 70 65 72 80 0xxxxxxxxxxxxxxxxxxxxxxxxxx
0000 29: SEQUENCE {
0002 1: INTEGER = 5
0005 24: [APPLICATION 0] {
0007 1: INTEGER = 2
000A 8: STRING = 'dialaper'
0014 9: [CONTEXT 0]
0016 : 7xxxxxxxxx
001F : }
001F : }
Net::LDAP=HASH(0x8be8e68) received:
30 0C 02 01 05 61 07 0A 01 00 04 00 04 00 __ __ 0....a........
0000 12: SEQUENCE {
0002 1: INTEGER = 5
0005 7: [APPLICATION 1] {
0007 1: ENUM = 0
000A 0: STRING = ''
000C 0: STRING = ''
000E : }
000E : }
Net::LDAP=HASH(0x8be8e68) sending:
30 5C 02 01 06 63 57 04 03 67 64 63 0A 01 02 0A 0\...cW..gdc....
01 02 02 01 00 02 01 00 01 01 00 A0 31 A3 1F 04 ............1...
0B 63 6F 6D 70 61 6E 79 6E 61 6D 65 04 10 47 65 .companyname..Ge
6E 65 72 61 6C 20 44 61 74 61 43 6F 6D 6D A3 0E neral DataComm..
04 03 75 69 64 04 07 73 6B 69 6C 6C 65 72 30 0E ..uid..skiller0.
04 0C 77 69 66 69 70 61 73 73 77 6F 72 64 __ __ ..wifipassword
0000 92: SEQUENCE {
0002 1: INTEGER = 6
0005 87: [APPLICATION 3] {
0007 3: STRING = 'gdc'
000C 1: ENUM = 2
000F 1: ENUM = 2
0012 1: INTEGER = 0
0015 1: INTEGER = 0
0018 1: BOOLEAN = FALSE
001B 49: [CONTEXT 0] {
001D 31: [CONTEXT 3] {
001F 11: STRING = 'companyname'
002C 16: STRING = 'General DataComm'
003E : }
003E 14: [CONTEXT 3] {
0040 3: STRING = 'uid'
0045 7: STRING = 'skiller'
004E : }
004E : }
004E 14: SEQUENCE {
0050 12: STRING = 'wifipassword'
005E : }
005E : }
005E : }
Net::LDAP=HASH(0x8be8e68) received:
30 0C 02 01 06 65 07 0A 01 22 04 00 04 00 __ __ 0....e..."....
0000 12: SEQUENCE {
0002 1: INTEGER = 6
0005 7: [APPLICATION 5] {
0007 1: ENUM = 34
000A 0: STRING = ''
000C 0: STRING = ''
000E : }
000E : }
Wed Aug 29 13:12:36 2007: ERR: ldap search for (&(companyname=General
DataComm)(uid=skiller)) failed with error LDAP_INVALID_DN_SYNTAX.
Wed Aug 29 13:12:36 2007: ERR: Disconnecting from LDAP server (server
notes.office.gdc.ru:10389).
Wed Aug 29 13:12:36 2007: DEBUG: AuthBy LDAP2 result: IGNORE, User
database access error
Sergei N Keler
IT-Manager
General DataComm
[skeler at gdc.ru] [www.gdc.ru] [tel. +7(812)325-1085 (ext. 7123)] [fax
+7(812)325-1086]
Mike McCauley <mikem at open.com.au>
Sent by: owner-radiator at open.com.au
29.08.2007 04:16
To
"Sergei Keler" <skeler at gdc.ru>
cc
radiator at open.com.au, "Hugh Irvine" <hugh at open.com.au>
Subject
Re: (RADIATOR) Lotus Notes 7.0.2 LDAP
Hello Sergei,
thanks for this report.
We cant see any cases in Radiator Ldap where a DN would contain spaces
(unless
it was configured that way in the config file).
Perhaps the next step will be for you rerun your tests with the Debug flag
enabled in your AuthBy LDAP clause. This will cause the LDAP side of the
conversation to be printed on stdout.
Are you able to get any tracing or logging from your LDAP server to see
what
it thinks the problem is?
Cheers.
On Tuesday 28 August 2007 22:55, Sergei Keler wrote:
> Hi!
>
> Lotus made some changes in their LDAP server:
>
> ---
> In 7.02 some changes were made to interpret LDAP DNs more precisely. It
> looks like we got a little over zealous with a base of " " (one or more
> spaces). Rather than returning Invalid DN Syntax we should probably just
> normalize it to a base of root "" (no space). We'll look into this. In
the
> mean time change the root on your search requests to "".
> ---
>
> Hah! Radiator's LDAP auth module said 'Invalid Syntax' in realms where
it
> worked.
>
> Where to dig or what to change in radiator config?
>
> <AuthBy LDAP2>
> Host qqq
> Port xxx
> UsernameAttr uid
> PasswordAttr aaa
> AuthDN bbb
> AuthPassword ccc
> BaseDN gdc
> SearchFilter (uid=%1)
>
> Sergei N Keler
> IT-Manager
> General DataComm
> [skeler at gdc.ru] [www.gdc.ru] [tel. +7(812)325-1085 (ext. 7123)] [fax
> +7(812)325-1086]
--
Mike McCauley mikem at open.com.au
Open System Consultants Pty. Ltd Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia
http://www.open.com.au
Phone +61 7 5598-7474 Fax +61 7 5598-7070
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
TTLS, PEAP etc on Unix, Windows, MacOS, NetWare etc.
--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.open.com.au/pipermail/radiator/attachments/20070829/f47c0f30/attachment.html>
More information about the radiator
mailing list