Issue with LinOTP, LDAP, Freeradius, and Perl - No UID Found for User

476 views
Skip to first unread message

nick.e....@gmail.com

unread,
Sep 2, 2015, 12:07:36 PM9/2/15
to LinOTP
I'm so very close to getting LinOTP working with LDAP and FreeRADIUS so that I can authenticate users to a VPN. However, I'm running into an issue where the FreeRAIDUS + Perl module is having trouble authenticating the users.

I have all of my users defined in LDAP, and I can see the users in the LinOTP management console, assign tokens, etc. I've followed instructions for getting FreeRADIUS set up with the rlm_perl module and pointed it at a config file. It seems to be talking.

I'm using a test account to log in, and I am able to correctly log in to the web self-service console with the LDAP username and password. In the log file I see the following:

2015/09/02 - 09:46:08 INFO {140003665929984} [linotp.lib.user][getResolversOfUser #508] [getResolversOfUser] user u'my....@domain.com' found in resolver u'useridresolver.LDAPIdResolver.IdResolver.eDirectory'
2015/09/02 - 09:46:08 INFO {140003665929984} [linotp.lib.user][getResolversOfUser #508] [getResolversOfUser] user u'my....@domain.com' found in resolver u'useridresolver.LDAPIdResolver.IdResolver.eDirectory'
2015/09/02 - 09:46:08 INFO {140003665929984} [linotp.lib.user][getResolversOfUser #509] [getResolversOfUser] userid resolved to u'cn=My Test,ou=People,dc=domain,dc=com'
2015/09/02 - 09:46:08 INFO {140003665929984} [linotp.lib.user][getResolversOfUser #509] [getResolversOfUser] userid resolved to u'cn=My Test,ou=People,dc=domain,dc=com'

When I use the radtest program to try to test it out, I get a failure message, and the following logged to the log file:

2015/09/02 - 09:53:51 WARNI {140003644950272} [linotp.lib.user][getUserId #587] [getUserId] No uid found for the user >u'my....@domain.com'< in realm u'domain'
2015/09/02 - 09:53:51 WARNI {140003644950272} [linotp.lib.user][getUserId #587] [getUserId] No uid found for the user >u'my....@domain.com'< in realm u'domain'
2015/09/02 - 09:55:26 WARNI {140003665929984} [linotp.lib.user][getUserId #587] [getUserId] No uid found for the user >u'my....@domain.com'< in realm u'domain'
2015/09/02 - 09:55:26 WARNI {140003665929984} [linotp.lib.user][getUserId #587] [getUserId] No uid found for the user >u'my....@domain.com'< in realm u'domain'
2015/09/02 - 09:55:39 WARNI {140003644950272} [linotp.lib.user][getUserId #587] [getUserId] No uid found for the user >u'my....@domain.com'< in realm u'domain'
2015/09/02 - 09:55:39 WARNI {140003644950272} [linotp.lib.user][getUserId #587] [getUserId] No uid found for the user >u'my....@domain.com'< in realm u'domain'

I'm having a hard time understanding why the self-service login works perfectly and is able to map the LDAP object, while the RADIUS/Perl configuration fails? Can anyone shed some light on this??

Thanks,
Nick

nick.e....@gmail.com

unread,
Sep 2, 2015, 12:18:24 PM9/2/15
to LinOTP
Well, I self-resolved this - I had a RESCONF parameter specified in the rlm_perl.ini file, and it looks like that was interfering with proper operation. Removed that and it seems to be resolving the LDAP users correctly.
Reply all
Reply to author
Forward
0 new messages