Hello all.<br><br>I'm trying to get FreeRADIUS to authenticate against MD5 passwords. Here's the relevant part of my config...<br><br>............<br>modules {<br> pap {<br> encryption_scheme = md5
<br> }<br>......<br>instantiate {<br> #mysqlcounter<br><br>}<br><br>authorize {<br> preprocess<br> sql<br>}<br><br>authenticate {<br> pap
<br>}<br><br>preacct {<br> preprocess<br>}<br><br>accounting {<br> #acct_unique<br> #detail<br> sql<br> radutmp # ?<br>}<br><br><br>session {<br> radutmp # ?
<br> sql<br><br>}<br>[end of file]<br><br>I have the passwords in my database as MD5 (I have included a testuser2 with a plaintext password for troubleshooting):<br><br>id UserName Attribute op Value
<br>1 testuser1 Password == ae2b1fca515949e5d54fb22b8ed95575<br>2 testuser2 Password == testing<br><br>What do I need to do to make FreeRADIUS authenticate passwords sent as plaintext to it from a client NAS, to MD5 stored in the database?
<br>Is this possible?<br><br>(please see attempt logs below)<br><br>Regards,<br><br>Jan Mulders<br><br>### client request ###<br>www~# radtest testuser1 testing localhost:1812 3 testing123<br>Sending Access-Request of id 111 to
<a href="http://127.0.0.1">127.0.0.1</a> port 1812<br> User-Name = "testuser1"<br> User-Password = "testing"<br> NAS-IP-Address = <a href="http://255.255.255.255">255.255.255.255</a>
<br> NAS-Port = 3<br>Re-sending Access-Request of id 111 to <a href="http://127.0.0.1">127.0.0.1</a> port 1812<br> User-Name = "testuser1"<br> User-Password = "testing"<br> NAS-IP-Address =
<a href="http://255.255.255.255">255.255.255.255</a><br> NAS-Port = 3<br>rad_recv: Access-Reject packet from host <a href="http://127.0.0.1:1812">127.0.0.1:1812</a>, id=111, length=20<br>0www~#<br><br><br>### radiusd log ###
<br>Listening on authentication *:1812<br>Listening on accounting *:1813<br>Ready to process requests.<br>rad_recv: Access-Request packet from host <a href="http://127.0.0.1:49086">127.0.0.1:49086</a>, id=111, length=61<br>
User-Name = "testuser1"<br> User-Password = "testing"<br> NAS-IP-Address = <a href="http://255.255.255.255">255.255.255.255</a><br> NAS-Port = 3<br>rlm_sql (sql): Reserving sql socket id: 4
<br>rlm_sql (sql): Released sql socket id: 4<br>rlm_sql (sql): No matching entry in the database for request from user [testuser1]<br>Login incorrect: [testuser1/testing] (from client localhost port 3)<br>rad_recv: Access-Request packet from host
<a href="http://127.0.0.1:49086">127.0.0.1:49086</a>, id=111, length=61<br>Sending Access-Reject of id 111 to <a href="http://127.0.0.1">127.0.0.1</a> port 49086<br><br>