help on radius, how to make password in clear text
Hi, All, When Using a Server by Radius Authtication, always failed, check in Radius Server by Radius -A -X , see below. rad_recv: Access-Request packet from host 10.10.7.190:5672, id=0, length=87 User-Name = "tester" User-Password = "\010\n\rINCORRECT" NAS-IP-Address = 10.10.7.190 NAS-Identifier = "sshd" NAS-Port = 4647 NAS-Port-Type = Virtual Service-Type = Authenticate-Only Calling-Station-Id = "10.10.7.5" But if other client using same radius server authticate with same username and pasword, the "User-Password" field is in clear text and all works. Could some one look this for me, many thanks. Ryan. _________________________________________________________________ 使用下一代的 MSN Messenger。 http://imagine-msn.com/messenger/launch80/default.aspx?locale=zh-cn&source=w...
Hi, this is for the _users_ list, not developers.
But if other client using same radius server authticate with same username and pasword, the "User-Password" field is in clear text and all works. Could some one look this for me, many thanks. Ryan.
1) double-check the shared secret on NAS and FreeRADIUS - if they don't match, decryption of User-Password results in weird characters 2) post _useful_ debugs. Of "radiusd -X" as a whole, not just a few lines. radiusd -X probably even tells you that it suspects a mismatched shared secret a few lines later. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
participants (2)
-
liRyan -
Stefan Winter