BTW, would it be possible to add the behavior described in rfc4590 so freeradius can create a nonce. I am not sure if the structure of freeradius supports this since the rlm_digest only returns OK if the user is authenticated. Is it possible to define the returned package in more detail? "B sends an Access-Request packet with the newly defined Digest-Method and Digest-URI attributes but without a Digest-Nonce attribute to the RADIUS server, C (step 2). C chooses a nonce and responds with an Access-Challenge (step 3)." (B=http server, C=radius server) (RFC4590 1.3) /Alex
-----Original Message----- From: freeradius-devel-bounces+alexander.schrab=axis.com@lists.freer adius.org [mailto:freeradius-devel-bounces+alexander.schrab=axis.com@lis ts.freeradius.org] On Behalf Of Alan DeKok Sent: den 18 september 2006 18:35 To: FreeRadius developers mailing list Subject: Re: rfc4590
"Alexander Schrab" <Alexander.Schrab@axis.com> wrote:
I think I have a working version. But I can't test it with the old version of digest (I had a test program, but it expired). How do you usually test freeradius?
src/tests. It includes a number of digest tests.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html