<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><span>Yeah, perhaps, the header was not in the password value. I use dialup-admin and MySQL. Anyway, I ended up using the specific password attribute "Crypt-Password" instead of "User-Password".<br></span></div><div><br></div><div>the debug from freeradius shows this. so i guess could be the password storage as you said. </div><div><span> Module: Instantiating pap<br> pap {<br> encryption_scheme = "auto"<br> auto_header = yes<br> }<br><br></span></div><div><br></div><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;"><font size="2" face="Arial"><hr size="1"><b><span style="font-weight: bold;">From:</span></b> Arran Cudbard-Bell
<a.cudbardb@freeradius.org><br><b><span style="font-weight: bold;">To:</span></b> FreeRadius users mailing list <freeradius-users@lists.freeradius.org><br><b><span style="font-weight: bold;">Cc:</span></b> Det Det <det.explorer@yahoo.com><br><b><span style="font-weight: bold;">Sent:</span></b> Monday, August 22, 2011 6:16 PM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: PAP Auto Header<br></font><br><meta http-equiv="x-dns-prefetch-control" content="off"><div id="yiv64880301">* added,<div><br></div><div>And no you shouldn't need to use auto-hearder if you've set the appropriate password attribute.</div><div><br></div><div>The recommended way is to prepend the headers, and use auto_header as its more flexible, and allows you to migrate between hash schemes non disruptively.</div><div><br></div><div>-Arran</div><div><br><div><div>On 22 Aug 2011, at 12:00, Arran Cudbard-Bell wrote:</div><br
class="yiv64880301Apple-interchange-newline"><blockquote type="cite"><div style="word-wrap: break-word;">That would depend on whether you've add the correct header to the hash :)<div><br></div><div><span class="yiv64880301Apple-style-span" style="font-family: helvetica,arial,freesans,clean,sans-serif; font-size: 11px; line-height: 12px; background-color: rgb(255, 255, 255);"><pre style="margin: 0px; padding: 0px; font: 12px/1.4 Courier,monospace;"><div class="yiv64880301line" id="yiv64880301LC94" style="margin: 0px; padding: 0px 0px 0px 1em;"><span class="yiv64880301cm" style="margin: 0px; padding: 0px; color: rgb(153, 153, 136); font-style: italic;">/*</span></div><div class="yiv64880301line" id="yiv64880301LC95" style="margin: 0px; padding: 0px 0px 0px 1em;"><span class="yiv64880301cm" style="margin: 0px; padding: 0px; color: rgb(153, 153, 136); font-style: italic;"> * For auto-header discovery.</span></div><div class="yiv64880301line"
id="yiv64880301LC96" style="margin: 0px; padding: 0px 0px 0px 1em;"><span class="yiv64880301cm" style="margin: 0px; padding: 0px; color: rgb(153, 153, 136); font-style: italic;"> */</span></div><div class="yiv64880301line" id="yiv64880301LC97" style="margin: 0px; padding: 0px 0px 0px 1em;"><span class="yiv64880301k" style="margin: 0px; padding: 0px; font-weight: bold;">static</span> <span class="yiv64880301k" style="margin: 0px; padding: 0px; font-weight: bold;">const</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">FR_NAME_NUMBER</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">header_names</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">[]</span> <span class="yiv64880301o" style="margin: 0px; padding: 0px; font-weight: bold;">=</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span></div><div class="yiv64880301line" id="yiv64880301LC98" style="margin: 0px; padding: 0px
0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{clear}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_CLEARTEXT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC99" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{cleartext}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_CLEARTEXT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div
class="yiv64880301line" id="yiv64880301LC100" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{md5}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_MD5_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC101" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{smd5}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_SMD5_PASSWORD</span> <span class="yiv64880301p"
style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC102" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{crypt}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_CRYPT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC103" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{sha}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding:
0px;">PW_SHA_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC104" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{ssha}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_SSHA_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC105" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{nt}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span
class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_NT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC106" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{nthash}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_NT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC107" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{x-nthash}"</span><span class="yiv64880301p"
style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_NT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC108" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{ns-mta-md5}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_NS_MTA_MD5_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC109" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color:
rgb(221, 17, 68);">"{x- orcllmv}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_LM_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC110" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span class="yiv64880301s" style="margin: 0px; padding: 0px; color: rgb(221, 17, 68);">"{X- ORCLNTV}"</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301n" style="margin: 0px; padding: 0px;">PW_NT_PASSWORD</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">},</span></div><div class="yiv64880301line" id="yiv64880301LC111" style="margin: 0px; padding: 0px 0px 0px 1em;"> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">{</span> <span
class="yiv64880301nb" style="margin: 0px; padding: 0px; color: rgb(0, 134, 179);">NULL</span><span class="yiv64880301p" style="margin: 0px; padding: 0px;">,</span> <span class="yiv64880301mi" style="margin: 0px; padding: 0px; color: rgb(0, 153, 153);">0</span> <span class="yiv64880301p" style="margin: 0px; padding: 0px;">}</span></div><div class="yiv64880301line" id="yiv64880301LC112" style="margin: 0px; padding: 0px 0px 0px 1em;"><span class="yiv64880301p" style="margin: 0px; padding: 0px;">};</span></div><div class="yiv64880301line" id="yiv64880301LC112" style="margin: 0px; padding: 0px 0px 0px 1em;"><span class="yiv64880301p" style="margin: 0px; padding: 0px;"><br></span></div></pre></span>-Arran</div><div><br></div><div><br></div><div><br></div><div><div><div>On 22 Aug 2011, at 11:46, Det Det wrote:</div><br class="yiv64880301Apple-interchange-newline"><blockquote type="cite"><div><div style="color: rgb(0, 0, 0); background-color: rgb(255, 255,
255); font-family: times new roman,new york,times,serif; font-size: 12pt;"><div>Hi,</div><div><br></div><div>I set PAP module as below. In my DB, user attribute is User-Password. Value of User-Password is an MD5 or CRYPT password. Shouldn't auto-header=yes able to detect the encryption scheme used in the password? What will the auto-header setting for if I still have to specifically set attributes such as MD5-Password or Cleartext-Password, etc. <br></div><div><br></div><div>pap {<br> auto_header = yes<br>}</div><div><br></div><div>thanks,</div><div>det</div></div></div>-<br>List info/subscribe/unsubscribe? See <a rel="nofollow" target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></blockquote></div><br><div>
<span class="yiv64880301Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium;"><span class="yiv64880301Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium;"><div style="word-wrap: break-word;"><div>Arran Cudbard-Bell</div><div><a rel="nofollow" ymailto="mailto:a.cudbardb@freeradius.org" target="_blank" href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</a></div><div><br></div><div>RADIUS - Half the complexity of
Diameter</div></div></span></span>
</div>
<br></div></div>-<br>List info/subscribe/unsubscribe? See <a rel="nofollow" target="_blank" href="http://www.freeradius.org/list/users.html">http://www.freeradius.org/list/users.html</a></blockquote></div><br><div>
<span class="yiv64880301Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium;"><span class="yiv64880301Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; font-size: medium;"><div style="word-wrap: break-word;"><div>Arran Cudbard-Bell</div><div><a rel="nofollow" ymailto="mailto:a.cudbardb@freeradius.org" target="_blank" href="mailto:a.cudbardb@freeradius.org">a.cudbardb@freeradius.org</a></div><div><br></div><div>RADIUS - Half the
complexity of Diameter</div></div></span></span>
</div>
<br></div></div><meta http-equiv="x-dns-prefetch-control" content="on"><br><br></div></div></div></body></html>