ā01-27-2026 02:48 AM
Hi,
i tried to do 802.1x and captive portal with LDAP in Wing controller.
i followed this articles but it does not seems to work in my lab
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000080568
https://extreme-networks.my.site.com/ExtrArticleDetail?an=000080854
the ldap is Windows AD.
here is my configs
vx9000-99B838(config-radius-server-policy-test)#show context
radius-server-policy test
authentication data-source ldap
authentication eap-auth-type peap-mschapv2
ldap-server primary host 192.168.10.175 port 389 login "(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" bind-dn "cn=Users,dc=ahmed,dc=loc" base-dn "cn=wm3400,cn=Users,dc=ahmed,dc=loc" passwd 0 12345678 passwd-attr UserPassword group-attr cn group-filter "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-userDn})))" group-membership radiusGroupName start-tls net-timeout 10
ldap-agent primary domain-name AHMED domain-admin-user wm3400 domain-admin-password 0 12345678
any help will be appreciated.
ā01-27-2026 10:15 PM
Both 802.1x and captive portal authentication is not working.
And for the logs im not sure how can i collect it. i ran packet capture in the controller and filtered port 389 for ldap but there is no single packet coming out of the controller.
However i get these logs :
Jan 28 09:12:43 2026: %DAEMON-3-ERR: radiusd[25144]: Unable to check file "": No such file or directory
Jan 28 09:12:43 2026: %DAEMON-3-ERR: radiusd[25144]: /etc/raddb/radiusd.conf[81]: Invalid configuration for module "ldap_primary"
Jan 28 09:12:53 2026: %DAEMON-6-INFO: radiusd[25245]: Core dumps are enabled
Jan 28 09:12:53 2026: %DAEMON-6-INFO: radiusd[25245]: Debugger not attached
Jan 28 09:12:53 2026: %DAEMON-3-ERR: radiusd[25247]: Unable to check file "": No such file or directory
Jan 28 09:12:53 2026: %DAEMON-3-ERR: radiusd[25247]: /etc/raddb/radiusd.conf[81]: Invalid configuration for module "ldap_primary"
Jan 28 09:13:03 2026: %DAEMON-6-INFO: radiusd[25325]: Core dumps are enabled
Jan 28 09:13:03 2026: %DAEMON-6-INFO: radiusd[25325]: Debugger not attached
Jan 28 09:13:03 2026: %DAEMON-3-ERR: radiusd[25327]: Unable to check file "": No such file or directory
Jan 28 09:13:03 2026: %DAEMON-3-ERR: radiusd[25327]: /etc/raddb/radiusd.conf[81]: Invalid configuration for module "ldap_primary"
Even tho the controller has joined the domain fine :
vx9000-99B838#
vx9000-99B838#
vx9000-99B838#show ldap-agent join-status on vx9000-99B838
Primary LDAP Server's agent join-status : Joined domain AHMED.
Secondary LDAP Server's agent join-status : Not Configured or Unused
vx9000-99B838#