EAP-TTLS + Post-auth clear password

joe vieira jvieira at clarku.edu
Wed Mar 21 21:17:18 CET 2007


Erico Augusto wrote:
> Hi,
>
> I would like to send clear-text password at post-auth using eap-ttls. 
> is there a way?
> I'm avoiding to write a lot of details about the question. Just using 
> post-auth I got to send User-password attribute, but it's cyphered at 
> destination(Yes, there is all the TLS tunneling stuff, but I'm trying 
> to see the problem at a simpler-unknown perspective).
>
i think by default pap is an md5 hash, you should be able to change that 
tho in the radiusd.conf (altho i could be totally insane.) in 1.1.4+ 
this looks to have changed to be auto negotiated.  other people will 
know better than me but, i think this is accurate.

Joe



More information about the Freeradius-Users mailing list