Re: A question about rlm modules

["Ali Majdzadeh" <ali.majdzadeh@gmail.com>]

Hello Alan
Yes, I am sure that the code works correctly, because the CHAP module
accepts the clear text password which I have provided in the
request->config_items. Below is my code for the authorize section of
the module:

static int netbill_authorize (void *instance, REQUEST *request)
{
        VALUE_PAIR *password;
        VALUE_PAIR *clear_text_password;

        instance = instance;
        request = request;
       
        clear_text_password = pairmake ("User-Password", "123456", T_OP_EQ);
        pairadd (&request->config_items, clear_text_password);

        return RLM_MODULE_OK;
}

And this is the server's log:

Thu Oct 25 13:18:42 2007 : Debug: modcall: entering group CHAP for request 1
Thu Oct 25 13:18:42 2007 : Debug:   modsingle[authenticate]: calling chap (rlm_chap) for request 1
Thu Oct 25 13:18:42 2007 : Debug:   rlm_chap: login attempt by "ali" with CHAP password
Thu Oct 25 13:18:42 2007 : Debug:   rlm_chap: Using clear text password "123456" for user ali authentication.
Thu Oct 25 13:18:42 2007 : Debug:   rlm_chap: Password check failed
Thu Oct 25 13:18:42 2007 : Debug:   modsingle[authenticate]: returned from chap (rlm_chap) for request 1
Thu Oct 25 13:18:42 2007 : Debug:   modcall[authenticate]: module "chap" returns reject for request 1
Thu Oct 25 13:18:42 2007 : Debug: modcall: leaving group CHAP (returns reject) for request 1
Thu Oct 25 13:18:42 2007 : Debug: auth: Failed to validate the user.

Thanks in advance.

2007/10/25, Alan DeKok <aland@deployingradius.com>:

Ali Majdzadeh wrote:> I have written an rlm_module. It works fine. Here,
we have clients which
> should be authenticated using CHAP passwords. In the radiusd.conf, I
> have mentioned my module before the CHAP module in the authentication
> section. Also, I have found that my module should populate the
> request->config_items field of the request with the clear text password
> so that the CHAP module can process the request. I have added the
> required code to do so, but the CHAP module complains about the size of
> the password.

  Would it be possible to post the error message?  Are you sure that
your code correctly creates the clear-text password?

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html