Freeradius-Devel

Download

freeradius-devel@lists.freeradius.org

September 2023

3 participants
2 discussions

EAP-TEAP Compound MAC calculation
by Suriya Shankar 14 Sep '23

14 Sep '23

Hi, I am trying to calculate the Compound MAC for EAP-TEAP. But the description in the rfc 7170 is bit confusing Section 4.2.13 mentions both the MSK and EMSK Compound MAC is either Server MAC or Client MAC (not sure what exactly are those). Section 5.3 gives the calculation where we have to zero out both MSK and EMSK Compound MAC and apply the MAC function to calculate the Compound MAC. - What's the resultant Compound MAC we get from trying section 5.3 (MSK or EMSK Compound MAC) - What algorithm should we use? The document adds to consider TLS 1.2 rfc 5246 where the recommended algorithm is HMAC 256 that results in 32 octet digest instead of the expected 20 octet one. Could any please help me in understanding the Compound MAC calculation or guide me in the right direction Thanks, Suriya

2 8

custom user lookup - how to
by Felix Nielsen 03 Sep '23

03 Sep '23

Hi I am looking for a way to integrate my own username/password validation - I need to authenticate with Okta using their proxy. Is there a way to implement this or where should I look for this in the source code? My initial quick-fix, was to modify the current implementation using the /usr/local/etc/raddb/users file database "myusername" Cleartext-Password := "mypassword" So basically if I can find the correct function to modify it would be great Thanks Felix

2 1