topic Re: Extreme Wing 7.9.6.1 Integation with LDAP in ExtremeWireless (WiNG)

Extreme Wing 7.9.6.1 Integation with LDAP

Ahmed_101 — Tue, 27 Jan 2026 10:48:27 GMT

Hi,
i tried to do 802.1x and captive portal with LDAP in Wing controller.
i followed this articles but it does not seems to work in my lab
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000080568
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000080854

the ldap is Windows AD.
here is my configs

vx9000-99B838(config-radius-server-policy-test)#show context

radius-server-policy test

authentication data-source ldap

authentication eap-auth-type peap-mschapv2

ldap-server primary host 192.168.10.175 port 389 login "(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" bind-dn "cn=Users,dc=ahmed,dc=loc" base-dn "cn=wm3400,cn=Users,dc=ahmed,dc=loc" passwd 0 12345678 passwd-attr UserPassword group-attr cn group-filter "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-userDn})))" group-membership radiusGroupName start-tls net-timeout 10

ldap-agent primary domain-name AHMED domain-admin-user wm3400 domain-admin-password 0 12345678
any help will be appreciated.

Re: Extreme Wing 7.9.6.1 Integation with LDAP

Luis_Agner — Tue, 27 Jan 2026 13:02:18 GMT

Hi Ahmed,

Which part is failing (802.1X or captive portal)?
Do you have any authentication or LDAP logs from the WiNG controller to share?

Without the logs it’s hard to identify whether the issue is LDAP binding, user lookup, or PEAP authentication.

Re: Extreme Wing 7.9.6.1 Integation with LDAP

Angelo_Cargnel — Tue, 27 Jan 2026 14:12:54 GMT

Please find attached some slides and two How-To's regarding 802.1x with PEAP and LDAP.
I hope they are useful...

Re: Extreme Wing 7.9.6.1 Integation with LDAP

Ahmed_101 — Wed, 28 Jan 2026 06:15:58 GMT

Both 802.1x and captive portal authentication is not working.
And for the logs im not sure how can i collect it. i ran packet capture in the controller and filtered port 389 for ldap but there is no single packet coming out of the controller.
However i get these logs :

Jan 28 09:12:43 2026: %DAEMON-3-ERR: radiusd[25144]: Unable to check file "": No such file or directory

Jan 28 09:12:43 2026: %DAEMON-3-ERR: radiusd[25144]: /etc/raddb/radiusd.conf[81]: Invalid configuration for module "ldap_primary"

Jan 28 09:12:53 2026: %DAEMON-6-INFO: radiusd[25245]: Core dumps are enabled

Jan 28 09:12:53 2026: %DAEMON-6-INFO: radiusd[25245]: Debugger not attached

Jan 28 09:12:53 2026: %DAEMON-3-ERR: radiusd[25247]: Unable to check file "": No such file or directory

Jan 28 09:12:53 2026: %DAEMON-3-ERR: radiusd[25247]: /etc/raddb/radiusd.conf[81]: Invalid configuration for module "ldap_primary"

Jan 28 09:13:03 2026: %DAEMON-6-INFO: radiusd[25325]: Core dumps are enabled

Jan 28 09:13:03 2026: %DAEMON-6-INFO: radiusd[25325]: Debugger not attached

Jan 28 09:13:03 2026: %DAEMON-3-ERR: radiusd[25327]: Unable to check file "": No such file or directory

Jan 28 09:13:03 2026: %DAEMON-3-ERR: radiusd[25327]: /etc/raddb/radiusd.conf[81]: Invalid configuration for module "ldap_primary"
Even tho the controller has joined the domain fine :

vx9000-99B838#

vx9000-99B838#show ldap-agent join-status on vx9000-99B838

Primary LDAP Server's agent join-status : Joined domain AHMED.

Secondary LDAP Server's agent join-status : Not Configured or Unused

vx9000-99B838#

Re: Extreme Wing 7.9.6.1 Integation with LDAP

Ahmed_101 — Wed, 28 Jan 2026 06:55:01 GMT

Hi thank you.
i followed the guides and i ran wireshark in AD but there no LDAP packets coming to the AD.

Re: Extreme Wing 7.9.6.1 Integation with LDAP

Ahmed_101 — Thu, 29 Jan 2026 13:57:42 GMT

Update :
Now the Wing controller can communicates with ldap and it seems that the search for users is working fine but the clients cant authenticate bcs the internal radius is rejecting the requests

WifiController-1*#show radius server stats

Access-Accepts 0

Access-Challenges 0

Access-Rejects 1

Access-Requests 2

Accounting-Requests 0

Accounting-Responses 0

Acct-Dropped-Requests 0

Acct-Duplicate-Requests 0

Acct-Invalid-Requests 0

Acct-Malformed-Requests 0

Acct-Unknown-Types 0

Auth-Dropped-Requests 0

Auth-Duplicate-Requests 0

Auth-Invalid-Requests 0

Auth-Malformed-Requests 0

Auth-Responses 1

Auth-Unknown-Types 0

what did i miss ?