/etc/freeradius/modules/ldap
Changed line from basedn = "DC=office,DC=zentyal,DC=lan" to basedn = "CN=Users,DC=office,DC=zentyal,DC=lan"
I had to change the above so that its searched in the "CN=Users,DC=office,DC=zentyal,DC=lan" and it logged on which is OK if you dont have any users in different OU's
I wanted to use a basedn of "DC=office,DC=zentyal,DC=lan" so that it would this would be possible, but when I do its fails the ldap search.
I thought this might be just a scope declaration of scope=sub which means check all subtrees.
Spent ages trying to google for a reference for scope and tried a few bits of guess work such as just adding scope ="sub" but didn't work.
Posted on the freeradius site and the guys said oh use the 3.0 series.
With that util and zentyal with a change of basedn = "CN=Users,DC=office,DC=zentyal,DC=lan" it worked.
To make those changes permanent it would need changes to the corresponding .mas file.
Then again why freeradius needs a killall haven't sovled that yet.