<div dir="ltr"><div><div><div><div>Dear <span name="Alan DeKok" class="">Alan DeKok<br><br></span></div><span name="Alan DeKok" class="">thanks for your help<br><br></span></div><span name="Alan DeKok" class="">i use it to get some to=ime to transfer all user information from other AAA server.<br>
<br></span></div><span name="Alan DeKok" class="">i try to change </span><span name="Alan DeKok" class=""><span name="Alan DeKok" class="">Cleartext-Password </span>to lower case by this code in authorize section<br><br>
But if password saved in database in upercase it can not be match to client lowercase password ...!!!<br><br>i think i should change </span><span name="Alan DeKok" class=""><span name="Alan DeKok" class=""><span name="Alan DeKok" class="">Cleartext-Password </span>to lower case</span> in other section<br>
<br> update control {<br> Cleartext-Password := "%{tolower:%{control:Cleartext-Password}}"<br> }<br><br><br></span></div><span name="Alan DeKok" class="">Best regards<br><br><br></span></div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Apr 24, 2013 at 7:17 PM, Alan DeKok <span dir="ltr"><<a href="mailto:aland@deployingradius.com" target="_blank">aland@deployingradius.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">Mehdi Ravanbakhsh wrote:<br>
> how i could check case insensitive password for user..<br>
<br>
</div> You don't.<br>
<div class="im"><br>
> and it is better if i could limit this kind of password check for some<br>
> nas-ip-adress.<br>
<br>
</div> Write "unlang" rules to do that.<br>
<div class="im"><br>
> which part of config file should be modified for this problem?<br>
<br>
</div> Write a policy:<br>
<br>
<br>
if (User-Password) {<br>
update request {<br>
User-Password := "%{tolower:%{User-Password}}"<br>
<br>
}<br>
}<br>
<br>
This will force all passwords to lowercase. They will need to be in<br>
the database as lowercase.<br>
<br>
Or, edit your database queries to do case-insensitive checks.<br>
<br>
In general, this is a very bad idea. It's insecure.<br>
<span class="HOEnZb"><font color="#888888"><br>
Alan DeKok.<br>
-<br>
List info/subscribe/unsubscribe? See <a href="http://www.freeradius.org/list/users.html" target="_blank">http://www.freeradius.org/list/users.html</a><br>
</font></span></blockquote></div><br></div>