[Serusers] IP phone ---> SER ---> freeradius ---> ldap

[Marc Sutter]

Hi all,

I'm trying to authentificate ser users against ldap.

IP phone ---> SER ---> freeradius ---> ldap

Everything's working well exept the username who's passed to ldap.

The user is passed with username at realm and I want just the username.

After googling a long while and trying to modify the realm module entry
in radiusd.conf, I can't find the right config in the config files.

Is the problem in the ser config or the radius config.


Thanks in advance for you help.




rad_recv: Access-Request packet from host 127.0.0.1:32852, id=114,
length=200
        User-Name = "test at 192.168.16.33"
        Digest-Attributes = 0x0a0674657374
        Digest-Attributes = 0x010f3139322e3136382e31362e3333
        Digest-Attributes =
0x022a34323932316232373363653965396436623336653063306233376334366234316135356235656339
        Digest-Attributes = 0x04137369703a3139322e3136382e31362e3333
        Digest-Attributes = 0x030a5245474953544552
        Digest-Response = "aade5df3a90732fd1a221d3ce43f7c96"
        Service-Type = Sip-Session
        Sip-Uri-User = "test"
        NAS-IP-Address = 127.0.0.1
        NAS-Port = 5060
    rlm_digest: Converting Digest-Attributes to something sane...
        Digest-User-Name = "test"
        Digest-Realm = "192.168.16.33"
        Digest-Nonce = "42921b273ce9e9d6b36e0c0b37c46b41a55b5ec9"
        Digest-URI = "sip:192.168.16.33"
        Digest-Method = "REGISTER"
rlm_digest: Adding Auth-Type = DIGEST
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test at 192.168.16.33
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: object not found or got ambiguous search result
rlm_ldap: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
rlm_digest: Configuration item "User-Password" is required for
authentication.
Login incorrect (rlm_ldap: User not found): [test at 192.168.16.33/<no
User-Password attribute>] (from client localhost port 5060)