- Freeradius-Users - lists.freeradius.org

PAP what password encryption is used?
by sphaero 08 Aug '08

08 Aug '08

Hello, I've been asked to setup freeradius to talk to a SQL Server database which contains users and passwords. This was not so much of a pain but I can't figure what password encryption is used. So I had hoped somebody with some more password encryption experience could shine a light here :) In the database I've set a password to 'testing' which results in the database as: DC724AF18FBDD4E59189F5FE768A5F8311527050 This looks like a SHA algorithm? I've browsed through the source code of the program that generates these password hashes. Indeed it uses SHA. This is the library they use: http://www.aspencrypt.com/object_context.html#CreateHash. They use the 'calgSHA'. But when I set the Password attribute in freeradius to SHA_password it doesn't match. It reads the database succesfully when I set User_password and use the hash as a password: radtest test(a)bla.com DC724AF18FBDD4E59189F5FE768A5F8311527050 localhost 0 testing123 Sending Access-Request of id 61 to 127.0.0.1 port 1812 User-Name = "test(a)bla.com" User-Password = "DC724AF18FBDD4E59189F5FE768A5F8311527050" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=61, length=43 Service-Type = Framed-User Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "132" But when I change User-Password to SHA-Password it doesn't match: radtest test(a)bla.com testing localhost 0 testing123 Sending Access-Request of id 131 to 127.0.0.1 port 1812 User-Name = "test(a)bla.com" User-Password = "testing" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Re-sending Access-Request of id 131 to 127.0.0.1 port 1812 User-Name = "test(a)bla.com" User-Password = "testing" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=131, length=20 So this isn't a SHA password hash? I don't know for sure if this the same encryption method but 'echo testing | openssl sha' generates a different hash: 581165b0cc90703a8e669d91effba108fbe2c83c Rg, Arnaud -- View this message in context: http://www.nabble.com/PAP-what-password-encryption-is-used--tp18887393p1888… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 4

Re: PAP what password encryption is used?
by sphaero 08 Aug '08

08 Aug '08

It seems it is SHA. I found in the output that freeradius couldn't determine the Auth-Type so rejected the user: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user I've forced PAP by setting it in the users file for the realm: DEFAULT Realm == "bla.com", Autz-Type := bla, Auth-Type := PAP It works: rad_check_password: Found Auth-Type PAP auth: type "PAP" Processing the authenticate section of radiusd.conf modcall: entering group PAP for request 0 rlm_pap: login attempt with password testing rlm_pap: Using SHA1 encryption. rlm_pap: Normalizing SHA-Password from hex encoding rlm_pap: User authenticated successfully Great, now some good config practicing Thanks for all help :P Arnaud -- View this message in context: http://www.nabble.com/PAP-what-password-encryption-is-used--tp18887393p1888… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

php radius client (mount packet data)
by Alexandre J. Correa - Onda Internet 08 Aug '08

08 Aug '08

Hello !! Based on 'Pure PHP radius class' (http://developer.sysco.ch/php/) i´m trying to implement "disconnect-packet" like this command: echo "User-Name := xxxxxx" | radclient -x 111.222.333.444 disconnect <secret> freeradius recognizes that packet are "disconnect-request" but i think checksum of packet are incorrect, can someone look and try to discover the error ?! attached class, my changes are commented with //AlexandrE thanks !!! -- Sds. Alexandre Jeronimo Correa Onda Internet - http://www.ondainternet.com.br OPinguim Hosting - http://www.opinguim.net Linux User ID #142329 UNOTEL S/A - http://www.unotel.com.br

3 2

two types of auth on same freeradius
by Alexandre J. Correa - Onda Internet 08 Aug '08

08 Aug '08

Hello again :P how i can configure radius to auth users from my pppoe concentrators but auth MAC from my access-point too ... (for each type, i need change sql queries) !? or i need to run other copy of freeradius (different port and config) ?! thanks !!! regards, -- Sds. Alexandre Jeronimo Correa Onda Internet - http://www.ondainternet.com.br OPinguim Hosting - http://www.opinguim.net Linux User ID #142329 UNOTEL S/A - http://www.unotel.com.br

2 1

SQL module and Oracle Stored Procedures
by andreiv 08 Aug '08

08 Aug '08

Hi all, i have a question: is there a problem if instead of INSERT, SELECT or UPDATE I use Oracle stored procedures with FreeRadius 2.0.5? I haven't tested this because the procedure isn't ready yet. I searched the other posts and found similarities of my question only for FreeRadius 1.x.x which is configured differently. Thanks -- View this message in context: http://www.nabble.com/SQL-module-and-Oracle-Stored-Procedures-tp18887408p18… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

EAP-SIM and EAP-AKA fast-reauth support
by Geoffroy Arnoud 08 Aug '08

08 Aug '08

Hi all, I have a question about EAP-SIM and EAP-AKA authentication. Is fast-reauthentication supported (in eap or eap2 module)? Thanks in advance for your answers. Geoff. _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

3 3

Re: Login incorrect (Home Server says so)... - But why?
by uni＠christiankraus.de 08 Aug '08

08 Aug '08

well, problem is solved. The IP for the my realm was wrong. Now everything works without any problem

1 0

2.0.5 on Solaris
by Rafiqul Ahsan 08 Aug '08

08 Aug '08

Can anyone suggest the documents/wiki for installation steps for Freeradius 2.0.5 on Solaris ? -- Rafiqul Ahsan

2 5

Whether the FreeRADIUS supports switch 3Com 5500G-EI ?
by Gennadiy Redko 07 Aug '08

07 Aug '08

Hi,all. I wish to dispose authorization on the switch with the dynamic isolation VID on the port on the protocol of 802.1x on RADIUS Server. Stand: the switch of 3Com 5500-EI (Software Of version of 3Com OS Of v3.02.03s56), computer from OS Windows XP (SP2), RHEL 5 update 1, freeradius-1.1.3-1.2.el5,kernel 2.6.18-53.el5 #1 SMP. Technical support of the 3Com has advised to use here this document for adjustment: http://www.3com.com/products/en_US/result.jsp?selected=2&sort=effdt&order=d… DUA1725-0BAA02.pdf , page 415 The authorization to FreeRadius is passed at the given moment, but to port is not allotted necessary VID. FreeRADIUS does not support 3Com switches ?

5 25

Slow Starting..
by Cris Boisvert 07 Aug '08

07 Aug '08

Been using Freeradius for years.. Quad core Xeon server New Server setup UBUNTU 8.04 Mysql 5.0.51 Running newest version of freeradius Have dual mysql databases running .. One has all the user data and the other gets all the accounting. The server takes about 20-30 seconds to start.. Where on the previous servers old P3 500mhz it took only 2-3 seconds.. It works and responds perfectly fine.. But just takes a while to finish reading the configs.. Running debugging it loads. To the point where it says --------------Cut--------------------------------------- main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients ---------------------------end Cut------------------------------------ Then after about 30 seconds blasts out the rest of the normal load.. Attaching to all the databases etc..etc... Anyone have any Ideas what this may be waiting around for? Thanx

4 5