Freeradius-Devel

Download

freeradius-devel@lists.freeradius.org

February 2011

5 participants
12 discussions

GIT Log for 2011-02-09 00:33 GMT
by aland＠deployingradius.com 08 Feb '11

08 Feb '11

commit 95ee46e169cad00de0f5a9184ae7877a54e3e90d Author: Ken-ichirou MATSUZAWA <chamas(a)h4.dion.ne.jp> Date: Tue Feb 8 21:19:10 2011 +0900 fix freeing eap_handler as opaque (and typo) Hello, I hope this would be hint for fixing segfault and better solution. Thanks. Subject: [PATCH 1/2] freeing EAP opaque with one arg Files changed: src/modules/rlm_eap/eap.h | 1 + src/modules/rlm_eap/mem.c | 8 ++++++++ src/modules/rlm_eap/rlm_eap.c | 6 ++++-- src/modules/rlm_eap/rlm_eap.h | 1 + src/modules/rlm_eap/types/rlm_eap_peap/peap.c | 4 ++-- 5 files changed, 16 insertions(+), 4 deletions(-) ====================================================================== commit 6934989ee8e35916d43c6820600c337e5ccbee80 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed Feb 2 10:14:01 2011 +0100 Added sample for dynamic clients from LDAP Files changed: raddb/sites-available/dynamic-clients | 39 +++++++++++++++++++++++++++++++++ 1 files changed, 39 insertions(+), 0 deletions(-) ======================================================================

1 0

Support for other hash (like MD5, SHA1) using MSCHAPv2
by Brivaldo Junior 03 Feb '11

03 Feb '11

We use OpenLDAP here, and have many users with many fields userPassword each one with one hash like, MD5, SHA1, SSHA, SMD5 and others. Using PAP, work perfect, but, we want to use MSCHAPv2 because work with simple conf (thinking on user side) on Windows, MacOSX and sometimes Linux too. I read the rlm_mschap.c and see that code use SMB (using directly the domain or the ClearText password to generate NTLM encoding or OD of Apple, right?), but I need to auth using OpenLDAP, and using this hashes (we have a idP using shibboleth with this OpenLDAP too, but not think if it is possible to use with auth purpose on FreeRadius). Exist an explanation why this isn't exist? or only because isn't implemented yet? We think to use PAP code implementation to help our modification, of course, with that kind of modification don't represent a problem for the rlm_mschap.c module. Our idea is to get ClearText decoded on MSCHAP connection (get this information) and encode using OpenSSL (same form used on PAP) to check if hashes are the same of which were obtained from OpenLDAP. Regards, -- Brivaldo Junior/DIGR/NIN

3 5