rml_perl question

Phil Mayers p.mayers at imperial.ac.uk
Tue Jul 24 13:00:33 CEST 2007


On Tue, 2007-07-24 at 11:43 +0300, FreeRadius-ML wrote:
> Hi Peter,
> 
>   Well, according to the RFC, the string should be:
> username:realm:password and then into the md5sum.

No, the digest response is:

md5 (
  concat (
    md5 ( user:realm:passwd )
    nonce:nc-val:cnonce:qop:md5(method:uri[:entity-body])
  )
)
    
 

>   So, I did the following: echo '101 at 192.168.2.80:192.168.2.80:101' | md5sum, which generated
> the following output: ec6cec8f0b5904ba56401b1e305638b5.

*Even* if that were how it worked, you've md5'ed the "\n" that echo will
echo.

In any event, you're going about this totally wrong. FreeRadius has a
digest auth module; you should be extracting the credentials from your
database and letting FreeRadius do the auth algorithm.




More information about the Freeradius-Users mailing list