Pass cleartext-password to exec module with EAP

Alan DeKok aland at deployingradius.com
Sat Mar 3 09:22:01 CET 2012


Quentin Meulepas wrote:
> I need to use an external script to check both username and password.

  That works only if the authentication method has a clear-text password.

> We don't have the cleartext version of these passwords, which are encrypted in a Postresql database...

  How?  It can matter...

> Although I'm running into troubles with the configuration files... And there's one major issue I can't seem to solve : EAP.
> I don't know how to pass the cleartext version of the entered password to the external script from the inner-tunnel of the EAP process.
> 
> Could anybody help me on this?

  Does the cleartext password exist in EAP?

  There's your answer.

  Alan DeKok.


More information about the Freeradius-Users mailing list