communication safe ssh <-> NAS <-> FreeRADIUS ?

Ivan Kalik tnt at kalik.net
Tue May 19 15:41:42 CEST 2009


> Oki, thanks. In fact, I want my radius client crypt my passwd in md5 for
> example, and freeradius check the MD5 hash. So I understand I have to use
> PAP ?  In my modul ldap I think I have to put « password_attribute =
> userPassword ». But If I do, I have to put my password in clear in my
> ldap, otherwise it don't works.

Store password as {md5} and then encrypted value and enable auto header
detection in pap module (it's disabled by default):

>   pap {
>         encryption_scheme = "auto"
>         auto_header = no
>   }

Ivan Kalik
Kalik Informatika ISP




More information about the Freeradius-Users mailing list