RE: [Help-gnu-radius] Pam_ldap to Authenticate against Active directory.

[Mark Campbell]

Of course, it's strange that this isn't an option during FreeBSD's
'make' stage in the ports.  I am no longer getting the "not available
message".

I'm still having trouble getting pam_ldap working though :|.  This is my
ldap.conf file

host pdc.itconvergence.com
base dc=itconvergence,dc=com
ldap_version 3

binddn username
bindpw password

scope sub

pam_filter objectclass=user
pam_login_attribute sAMAccountName
pam_password ad

When I use radauth to test I get the following (trying different
username formats:

Aug 11 16:23:41 [10273]: Login incorrect [mcampbell/passwd]
Aug 11 16:24:20 [10273]: Login incorrect
address@hidden/passwd]

I've treid to trun up the level of debugging (-x) however no more detail
is being provided.  

Any pointers are appricated.

On a side note, since I installed from source I'm getting these errors
in the logs.  However I believe they are secondary compred to the
authentication issues.

Thanks again for any advise.

Mark

Aug 11 16:22:51 [10092]: Normal shutdown.
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:21: Attribute
Framed-Compression is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:22: Attribute
Framed-Compression is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:23: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:24: Attribute
Auth-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:25: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:26: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:32: Redefining
attribute Login-Host
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:37: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:38: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:39: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:40: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat:41: Attribute
Service-Type is not defined
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/dict/compat: 11 errors
Aug 11 16:23:04 [10271]: /usr/local/etc/raddb/users reloaded.
Aug 11 16:23:04 [10271]: Ready
Aug 11 16:23:04 [10271]: Ready to process requests.


Mark Campbell.
IT Convergence Operating System Administrator
<address@hidden> 
Office:   [608] 283 50 80
Mobile:  [267] 257 12 78
Internal Ext:  630

-----Original Message-----
From: Sergey Poznyakoff [mailto:address@hidden 
Sent: Wednesday, August 11, 2004 2:54 AM
To: Mark Campbell
Cc: address@hidden
Subject: Re: [Help-gnu-radius] Pam_ldap to Authenticate against Active
directory.

Mark Campbell <address@hidden> wrote:

> Aug 10 15:50:16 [11611]: (AUTHREQ local 23 mcampbell): PAM
authentication not available

This message means that radiusd binary is compiled without PAM support.
Use ./configure --enable-pam to switch it on. 

Regards,
Sergey