[RADIATOR] LDAP is not authenticating when the username cotains DOT or password cotains #

Hugh Irvine hugh at open.com.au
Tue Feb 24 16:26:32 CST 2009


Hello Aboo Vattem Kandathil -

Could you please add "Debug 255" to your AuthBy LDAP2 clause, then run  
radiusd like this in a terminal window so we can see what is happening:

	cd /your/Radiator/source/distribution

	perl radiusd -foreground -log_stdout -trace 4 -config_file /your/ 
Radiator/configuration/file

	.....

You will need to use your local pathnames in the above of course.

Can you also please tell me what hardware/software platform you are  
running on, and what versions of Radiator and Perl?

regards

Hugh


On 24 Feb 2009, at 20:27, Aboo Vattem. Kandathil wrote:

> Hello,
>
> Can anyone please help me to configure the LDAP authentication in a  
> generic way.
>
> The below is the configuration which I am using currently to do the  
> authentication.
>
> <AuthBy LDAP2>
>                 Host                       jed-adr.sps.net.sa
>  		AuthDN                                
> cn=testun,ou=headoffice,ou=Employees,dc=mydomain,dc=com
> 		AuthPassword Ab00123456
> 		BaseDN                                %0=%1,  
> ou=headoffice,ou=Employees,dc=mydomain,dc=com
> 		UsernameAttr   cn
> 		ServerChecksPassword
> 		PasswordAttr    userPassword
> 		HoldServerConnection
> 		AddToReply Framed-Protocol = PPP,\
>                                 Framed-IP-Netmask = 255.255.255.255,\
>                                 Framed-Routing = None,\
>                                 Framed-MTU = 1500,\
>                                                 Framed-Compression =  
> Van-Jacobson-TCP-IP
> 		Timeout 8
> 		Version 3
> </AuthBy>
>
> It works fine if I use a username without any DOT in it. I have  
> active directory username with dot in the username for example:  
> headoffice.user1
>
> Also I face problem with user password. If the user password  
> contains with # symbol it is not authenticating.
>
>
>
>
> Thanks and Regards,
>
> Aboo Vattem Kandathil
> <image001.jpg>
>
> _______________________________________________
> radiator mailing list
> radiator at open.com.au
> http://www.open.com.au/mailman/listinfo/radiator



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.




More information about the radiator mailing list