Help for PHP based authentication

Javed Akhtar javed at gowifi.in
Tue Jun 3 12:56:21 CEST 2014


it was not working without the user_name so i thought to give it a try
previously i t was Cleartext-Password := "pass"
Please suggest what changes i can do in this so that it will work

i don't know why my message is not getting posted as a reply
http://lists.freeradius.org/pipermail/freeradius-devel/2014-June/thread.html


On Tue, Jun 3, 2014 at 4:05 PM, Arran Cudbard-Bell <
a.cudbardb at freeradius.org> wrote:

>
> On 3 Jun 2014, at 11:32, Javed Akhtar <javed at gowifi.in> wrote:
>
> > Hello i am trying to setup a basic authentication for users against the
> php script
> > with the config bellow(removed functional things and showed reply only
> as example)
> >
> > i am getting the error
> >
> > Exec-Program output: user_name     Cleartext-Password := "pass"
> > Exec-Program-Wait: plaintext: user_name     Cleartext-Password := "pass"
> > Exec-Program: returned: 0
> > ++[php_check] returns ok
> > [pap] WARNING! No "known good" password found for the user.
>  Authentication may fail because of this.
> > ++[pap] returns noop
> > ERROR: No authenticate method (Auth-Type) found for the request:
> Rejecting the user
> > Failed to authenticate the user.
> > Using Post-Auth-Type Reject
> >
> >
> > PLEASE SUGGEST ME THE CHANGES NEEDED
> >
> > the module php looks like this
> > exec php_check{
> >         wait = yes
> >         program = "/usr/bin/php -f /var/rad_check.php
>  %{Called-Station-Id} %{User-Name} %{User-Password}"
> >         input_pairs = request
> >         output_pairs = config
> >         shell_escape = yes
> > }
> >
> > php script is like this
> > <?php
> >       echo 'user_name     Cleartext-Password := "pass"';
> > ?>
> >
> > radiusd.conf is like this
> > authorize {
> > php_check
> > }
> > authenticate {
> >        Auth-Type PAP {
> >               pap
> >        }
> > }
> >
>
> Um, what's the 'user_name    ' part for? and I know you're doing it for
> convenience, but learn a real programming language. PHP should have no role
> to play in anything security related, we've rejected native rlm_php modules
> before on those grounds.
>
> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
> FreeRADIUS Development Team
>
> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/devel.html
>



-- 
Md Javed Akhtar
Managing Director
Go WiFi Networking Solutions Pvt. Ltd.
217, Purusottampur
Jajpur  Town-755001, Odisha
08270060400
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freeradius.org/pipermail/freeradius-devel/attachments/20140603/be3e9abf/attachment.html>


More information about the Freeradius-Devel mailing list