[RADIATOR] Realms with AuthBy LDAP2 problem

[romans at cc.technion.ac.il]

Hi,

 

I’ve met some problem when added Realm to my username. Below is my debug log:

 

Sun May 22 18:08:09 2011: DEBUG: Packet dump:

*** Received from 1.1.1.2 port 20003 ....

Code:       Access-Request

Identifier: 68

Authentic:  T<16><20><223><184>(<149><213><27>!`:<177><141><138><0>

Attributes:

        User-Name = "alex at tx"

        MS-CHAP-Challenge = <211><236><200><0>~<143><30><242>?<14><13><189><155><233><198><20>

        MS-CHAP2-Response = <0><0>#<198>&<232><139><232>t?<247><5>b<232>\<145><14><140><0><0><0><0><0><0><0><0>Kk<128>e-j<130><233><163><158><138>1<175><228>`N8u<209>^<245><182>0<252>

        NAS-Port-Id = "AP183/1"

        Calling-Station-Id = "00-26-B0-C1-A4-F8"

        Called-Station-Id = "00-0B-0E-2A-16-82:dog"

        NAS-Port = 15829

        NAS-Port-Type = Wireless-IEEE-802-11

        NAS-IP-Address = 1.1.1.2

        NAS-Identifier = "Trapeze"

 

Sun May 22 18:08:09 2011: DEBUG: Handling request with Handler 'Realm=tx', Identifier ''

Sun May 22 18:08:09 2011: DEBUG: Rewrote user name to alex

Sun May 22 18:08:09 2011: DEBUG:  Deleting session for alex at tx, 1.1.1.2, 15829

Sun May 22 18:08:09 2011: DEBUG: Handling with Radius::AuthLDAP2:

Sun May 22 18:08:09 2011: INFO: Connecting to localhost:389

Sun May 22 18:08:09 2011: INFO: Attempting to bind to LDAP server localhost:389

Sun May 22 18:08:09 2011: DEBUG: LDAP got result for uid=alex,ou=People,dc=TECHNION

Sun May 22 18:08:09 2011: DEBUG: LDAP got sambaNTPassword: FD5117F72B251C2CB9A7A6669B8BD0A6

Sun May 22 18:08:09 2011: DEBUG: Radius::AuthLDAP2 looks for match with alex [alex at tx]

Sun May 22 18:08:09 2011: DEBUG: Radius::AuthLDAP2 REJECT: Bad Password: alex [alex at tx]

Sun May 22 18:08:09 2011: DEBUG: AuthBy LDAP2 result: REJECT, Bad Password

Sun May 22 18:08:09 2011: INFO: Access rejected for alex: Bad Password

Sun May 22 18:08:09 2011: DEBUG: Packet dump:

*** Sending to 1.1.1.2 port 20003 ....

Code:       Access-Reject

Identifier: 68

Authentic:  `v<245>U<242>&v-}<170><230>N<3><144><170><136>

Attributes:

        Reply-Message = "Request Denied"

 

And my radius.cfg:

 

<Realm tx>

        RewriteUsername s/^([^@]+).*/$1/

        <AuthBy LDAP2>

                NoDefault

                TranslatePasswordHook sub {return "{nthash}$_[0]";}

                Host            localhost

                Port            389

                AuthDN          cn=user,dc=TECHNION

                AuthPassword    password

                BaseDN          dc=TECHNION

                Scope           sub

                Version 3

                PasswordAttr    sambaNTPassword

        </AuthBy>

</Realm>

 

>From LDAP I receive right password but authentication falls.

 

Where’s my error?

 

Regards,

Roman Safonov

Networking Engineer

Taub Computer Center

Technion, Haifa

Tel. 04-829-4992

Fax 04-8236-212

Email:  <mailto:romans at cc.technion.ac.il> romans at cc.technion.ac.il

Description: Description: Description: cid:image001.png at 01CB7AD9.2EDDF0A0

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.open.com.au/pipermail/radiator/attachments/20110522/6ea1b577/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/png
Size: 9886 bytes
Desc: not available
Url : http://www.open.com.au/pipermail/radiator/attachments/20110522/6ea1b577/attachment-0001.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5695 bytes
Desc: not available
Url : http://www.open.com.au/pipermail/radiator/attachments/20110522/6ea1b577/attachment-0001.bin