Re: password not present in ttls inner-tunnel

Alan DeKok <[email protected]>
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>
On May 7, 2025, at 12:29 PM, Evan Sharp via Freeradius-Users <[email protected]> wrote:
> I'm having difficulty understanding why &User-Password is not being found
> by my inner-tunnel virtual server. Desired outcome is EAP-TTLS/PAP for
> google's LDAP.

  Read the debug output.

> In my debug output, I see that the conditional check that would specify
> ldap as the Auth-Type is not passing.
> 
> [eap setup success]
> [ttls setup success]
> ...
> (5)       if (&User-Password && !control:Auth-Type)  {
> (5)       if (&User-Password && !control:Auth-Type)   -> FALSE
> (5)     } # authorize = updated
> (5)   ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type =
> Reject
> (5)   Failed to authenticate the user
> [post-auth-reject]

  If you're not sure how to read the debug output, then post it to the list.

  ALL OF IT.

  Don't edit it.  When you edit the debug output, you're deleting things which are needed to answer your question.

  Go read http://wiki.freeradius.org/list-help

  We write documentation because we want people to read it.

  Alan DeKok.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.