Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 11:45 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 2 posts ] 
Author Message
PostPosted: Mon Dec 10, 2012 2:05 pm 
Offline

Joined: Mon Dec 10, 2012 1:52 pm
Posts: 2
Hi,

We have been using UbiRadius 3.5.1 , now are trying to migrate to 3.5.3. I have followed the migration directions. The 3.5.3 server works fine for a day , the NeXT day it fails to authenticate the users. We import users from our Windows domain.

I look in the freeradius.log file I can see this beeing loged when the server is working :

[<thread>] # Executing section authorize from file /etc/freeradius/sites-enabled/default
[<thread>] +- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
++[files] returns noop
[ldap] Setting Auth-Type = LDAP
++[ldap] returns ok
++[expiration] returns noop


The next day I try with the same user and Yubikey and without any configuration on the server touched , I get this in the radius.log :

[<thread>] # Executing section authorize from file /etc/freeradius/sites-enabled/default
[<thread>] +- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
++[files] returns noop
[ldap] performing user authorization for tat
[ldap] expand: %{Stripped-User-Name} ->
[ldap] ... expanding second conditional
[ldap] expand: %{User-Name} -> tat
[ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=tat)
[ldap] expand: dc=example,dc=com -> dc=example,dc=com
[ldap] ldap_get_conn: Checking Id: 0
[ldap] ldap_get_conn: Got Id: 0
[ldap] performing search in dc=example,dc=com, with filter (uid=tat)
[ldap] object not found
[ldap] search failed
[ldap] ldap_release_conn: Release Id: 0
++[ldap] returns notfound
++[expiration] returns noop

If I try to restart the server it behaves the same way. The only way to get it working again is to cleare the server and re run the migration script.

Any help would be appreciated, I'm fairly new to YubiRadius and don't really know where to start looking.

br
Trond T.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Fri Jan 04, 2013 2:19 pm 
Offline
Yubico Team
Yubico Team

Joined: Mon Feb 22, 2010 9:49 am
Posts: 183
Hello,

Did you used "OpenLDAP" available with YubiRADIUS VM? This is because as per the logs it shows the domain name is "example.com", which is the "OpenLDAP" domain name available with YRVA. If you are using other LDAP/AD server please go to "Advanced" and change the user DN and base DN accordingly.

Thanks and best regards,
Samir.


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 2 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group