FreeRadius rlm_ldap::ldap_groupcmp: ldap_get_values()失败

Question

我正在为我们的ldap服务器配置freeRadius。我可以从用户的角度向radius客户端进行身份验证。但是，当radius尝试查询有关to ldap组的信息时，我们收到以下错误

ldap在uid=vchevakula@test.us、ou=users、dc=test、dc=us、with filter (objectclass=*) rlm_ldap::ldap_groupcmp: ldap_get_values()中执行搜索失败，或者如果我们正在更改组成员身份筛选器中的任何筛选器，则会收到实现错误

[ldap] ldap_release_conn: Release Id: 0
[files]     expand: (&(objectClass=GroupOfUniqueNames)(UniqueMember=%{User-Name})) -> (&(objectClass=GroupOfUniqueNames)(UniqueMember=vchevakula@test.us))
  [ldap] ldap_get_conn: Checking Id: 0
  [ldap] ldap_get_conn: Got Id: 0
  [ldap] performing search in dc=test,dc=us, with filter (&(cn=Dev-Nw)(&(objectClass=GroupOfUniqueNames)(UniqueMember=vchevakula@cstest.us)))
  [ldap] object not found
  [ldap] ldap_release_conn: Release Id: 0
  [ldap] ldap_get_conn: Checking Id: 0
  [ldap] ldap_get_conn: Got Id: 0
  [ldap] performing search in 
uid=vchevakula@cstest.us,ou=users,dc=test,dc=us, with filter (objectclass=*)
    rlm_ldap::ldap_groupcmp: ldap_get_values() failed
      [ldap] ldap_release_conn: Release Id: 0

自由半径内的用户文件

DEFAULT Ldap-Group == "Dev-Nw"
DEFAULT Ldap-Group == "SRE"
        Reply-Message = "You are allowed"

免费radius中的模块/ldap

  groupname_attribute = cn
    groupmembership_filter = "(&(objectClass=GroupOfUniqueNames)(UniqueMember=%{User-Name}))"
        groupmembership_attribute = radiusGroupName

我试着更改组成员过滤器，但直到现在都不起作用。我得到了同样的错误，但它找不到。Freeradius -X在寻找小组上不断失败

"(&(objectClass=GroupOfUniqueNames)(uniquemember=%{control:Ldap-UserDn}))“#groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn}) groupname_attribute = cn #groupmembership_filter =cn))“groupmembership_filter = "(&(objectClass=GroupOfUniqueNames)(UniqueMember=%{User-Name}))”groupmembership_attribute = radiusGroupName

ldap服务器中的ldap属性

dn: cn=SRE,ou=groups,dc=test,dc=us
objectClass: top
objectClass: groupofUniqueNames
cn: SRE
uniqueIdentifier: XXXXXXX
description: SRE Team
uniqueMember: uid=vchevakula@test.us,ou=users,dc=test,dc=us
uniqueMember: uid=nuser@test.us,ou=users,dc=test,dc=us

在freeradius中配置ldap组时需要一些帮助

Answer 1

你好，我已经解决了我的问题

通过将以下行添加到我在freeradius server /etc/freeradius/modules/ldap中的配置中

groupmembership_filter = "(&(objectClass=GroupOfUniqueNames)(uniqueMember=%{control:Ldap-UserDn}))"