<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<br><br><div><div id="SkyDrivePlaceholder"></div>> Date: Fri, 20 Apr 2012 15:47:28 +0200<br>> From: aland@deployingradius.com<br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: passwd encrypted in user file<br>> <br>> vazoumana fofana wrote:<br>> > i want to use encrypted passwd in "users" file without using unix files.<br>> > So, i have to write :<br>> > <br>> > username Crypt-Password := "$1$5oVGRb3C$PCKT5Fv7d81NZTmzEm83e0".<br>> > <br>> > How does Freeradius link the encrypted password with password ?<br>> <br>> The PAP module does this. It sees the Crypt-Password as one of the<br>> formats supported for "known good" passwords. It then uses<br>> User-Password from the packet, and compares the two.<br>> <br>> > I want to run a command wich crypt password. Wich command could i use ?<br>> > My system is unix-like.<br>> <br>> See "radcrypt", which comes with the server.<br>I use radcrypt but i note that for the same passwd , the encrypted passwd changes everytime. It it right ?<br>How does freeradius link passwd and encrypt-passwd if this last changes at each run ?<br><br>I try to connect a client with encrypted passwd. I used radcrypt without option. I inserted result in users file.<br>Here s the debug :<br><br>[eap] Request found, released from the list<br>[eap] EAP/mschapv2<br>[eap] processing type mschapv2<br>[mschapv2] # Executing group from file /etc/raddb/sites-enabled/inner-tunnel<br>[mschapv2] +- entering group MS-CHAP {...}<br>[mschap] No Cleartext-Password configured. Cannot create LM-Password.<br>[mschap] No Cleartext-Password configured. Cannot create NT-Password.<br>[mschap] Creating challenge hash with username: vazou<br>[mschap] Told to do MS-CHAPv2 for vazou with NT-Password<br>[mschap] FAILED: No NT/LM-Password. Cannot perform authentication.<br>[mschap] FAILED: MS-CHAP2-Response is incorrect<br>++[mschap] returns reject<br>[eap] Freeing handler<br>++[eap] returns reject<br><br>To configure windows client, i use PEAP with mschap V2. Is it right ? I don't find other ways to connect windows client with login/passwd.<br><br><br>> <br>> > Then, i want to store this encrypted password in "users" file ?<br>> <br>> Yes.<br>> <br>> > i look<br>> > to man rlm_pap and i set yes to auto_header.<br>> <br>> You don't need to set that. Leave it as the default.<br>> <br>> Alan DeKok.<br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br></div> </div></body>
</html>