<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Sorry, I'm an idiot, this is not the list I should post to. Please remove.</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div style="font-size:12.8px"><b style="font-size:12.8px">--</b></div><div style="font-size:12.8px"><b style="font-size:12.8px">Rashad Hall</b><br></div><div style="font-size:12.8px">Jr. Network Engineer | <b>Zay<font color="#ff9900">o</font> Group</b></div><div style="font-size:12.8px">O: <a href="tel:(858)%20836-0202" value="+18588360202" style="color:rgb(17,85,204)" target="_blank">+1 858.836.0202</a></div><div style="font-size:12.8px"><span><div style="font-size:12.8px"><font color="#000000">12270 World Trade Drive <span style="font-size:12.8px">Suite #100</span><span style="font-size:12.8px"> | </span>San Diego, CA 92128</font></div><div style="font-size:12.8px"><a href="http://www.zayo.com/company/about-zayo/" style="color:rgb(17,85,204)" target="_blank">Mission</a> | <a href="http://www.zayo.com/solutions/global-network/" style="color:rgb(17,85,204)" target="_blank">Network Map</a> | <a href="https://www.linkedin.com/company/zayo-group" style="color:rgb(17,85,204)" target="_blank">LinkedIn</a> | <a href="https://twitter.com/zayogroup" style="color:rgb(17,85,204)" target="_blank">Twitter</a></div></span></div></div></div></div></div></div>
<br><div class="gmail_quote">On Fri, Feb 9, 2018 at 10:27 PM, Rashad Hall <span dir="ltr"><<a href="mailto:rashad.hall@zayo.com" target="_blank">rashad.hall@zayo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Currently running FreeRADIUS Version 3.0.15 and looking for confirmation of SHA3 support as I found this page (<a href="https://freeradius.org/radiusd/man/rlm_pap.html" target="_blank">https://freeradius.org/<wbr>radiusd/man/rlm_pap.html</a>) that has SHA3 listed, but when I run man rlm_pap I have significantly fewer options. Just wanted to confirm if support for SHA3 in FreeRADIUS is available yet? My "man rlm_pap" below.</div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default"><div class="gmail_default"><font face="tahoma, sans-serif">rlm_pap(5) FreeRADIUS Module rlm_pap(5)</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif">NAME</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> rlm_pap - FreeRADIUS Module</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif">DESCRIPTION</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> The rlm_pap module authenticates RADIUS Access-Request packets that</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> contain a User-Password attribute. The module should also be listed</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> last in the authorize section, so that it can set the Auth-Type</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> attribute as appropriate.</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif"> When a RADIUS packet contains a clear-text password in the form of a</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> User-Password attribute, the rlm_pap module may be used for</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> authentication. The module requires a "known good" password, which it</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> uses to validate the password given in the RADIUS packet. That "known</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> good" password must be supplied by another module (e.g. rlm_files,</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> rlm_ldap, etc.), and is usually taken from a database.</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif">CONFIGURATION</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> The only configuration item is:</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif"> normalise</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> The default is "yes". This means that the module will try to</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> automatically detect passwords that are hex- or base64-encoded</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> and decode them back to their binary representation. However,</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> some clear text passwords may be erroneously converted. Setting</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> this to "no" prevents that conversion.</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif">USAGE</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> The module looks for the Password-With-Header control attribute to find</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> the "known good" password. The attribute value comprises the header</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> followed immediately by the password data. The header is given by the</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> following table.</font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif"><br></font></div><div class="gmail_default"><font face="tahoma, sans-serif"> Header Attribute Description</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> ------ --------- -----------</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {clear} Cleartext-Password clear-text passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {cleartext} Cleartext-Password clear-text passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {crypt} Crypt-Password Unix-style "crypt"ed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {md5} MD5-Password MD5 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {base64_md5} MD5-Password MD5 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {smd5} SMD5-Password MD5 hashed passwords, with a salt</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {sha} SHA-Password SHA1 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> SHA1-Password SHA1 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {ssha} SSHA-Password SHA1 hashed passwords, with a salt</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> SSHA1-Password SHA1 hashed passwords, with a salt</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {ssh2} SHA2-Password SHA2 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {ssh256} SHA2-Password SHA2 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {ssh512} SHA2-Password SHA2 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {nt} NT-Password Windows NT hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {nthash} NT-Password Windows NT hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {x-nthash} NT-Password Windows NT hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {ns-mta-md5} NS-MTA-MD5-Password Netscape MTA MD5 hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {x- orcllmv} LM-Password Windows LANMAN hashed passwords</font></div><div class="gmail_default"><font face="tahoma, sans-serif"> {X- orclntv} LM-Password Windows LANMAN hashed passwords</font></div><div style="font-family:tahoma,sans-serif"><br></div></div><div><div class="m_3938977538953350483gmail_signature"><div dir="ltr"><div dir="ltr"><div style="font-size:12.8px"><span></span></div></div></div></div></div>
</div>
</blockquote></div><br></div>