<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman,new york,times,serif;font-size:12pt"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Mensagem original ----<br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">De: Alan DeKok <aland@deployingradius.com><br>Para: FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br>Enviadas: Sexta-feira, 23 de Março de 2007 3:54:41<br>Assunto: Re: Res: Res: EAP-TTLS + Post-auth clear password<br><br><div>Erico Augusto wrote:<br>> All I can say is "huh"? You want to use a custom app, and you<br>>solution is to write a shell script that does... nothing?<br>sure not!<br><br>> Perhaps you could explain how the custom app *currently* interacts<br>> with FreeRADIUS. From the examples you've posted, it doesn't.<br>it's called
learning ...<br><br>> My suggestion was to write a program that would send the username &&<br>> password to the custom app. See the documentation for how to see the<br>>username && password in a shell script run by rlm_exec.<br>that's what I'm looking for ... constructive suggestions ...<br><br>> What makes you think that the shell script changes the password?<br>>Nothing in the documentation or examples would lead you to believe that<br>>simple echoing a number would have the magic side-effect of changing the<br>>password.<br>just learning how the tool works...<br><br>> The configurations you've shown don't match the documentation. i.e.<br>>You think they do one thing, but the documentation says they do<br>>something else.<br>The interaction with JRadius now works ... it wasn't an issue with freeradius ... JRadius API was outputing <br>[Encrypted String] to the password ... in truth, it's just
in ASCII ... a simple casting fix everything.<br><br>So, to get cleartext password with WinXP SecureW2(EAP-TTLS) Supplicant configured to PAP at Authentication Tab, using JRadius API, just gather password bytes as following:<br>byte [] passByte = requestPacket.getAttributes().get(Attr_UserPassword.NAME). getValue().getBytes();<br>where requestPacket is a RadiusPacket object.<br><br>Erico.<br><br>--<br> <a target="_blank" href="http://deployingradius.com">http://deployingradius.com</a> - The web site of the book<br> <a target="_blank" href="http://deployingradius.com/blog/">http://deployingradius.com/blog/</a> - The blog<br>- <br>List info/subscribe/unsubscribe? See <a target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a><br></div></div><br></div></div><br>__________________________________________________<br>Fale com seus amigos de graça com o
novo Yahoo! Messenger <br>http://br.messenger.yahoo.com/ </body></html>