22 May
2019
22 May
'19
1:46 p.m.
Great.
On Wed, May 22, 2019 at 2:29 PM Nicolas Breuer <Nicolas.Breuer@belcenter.biz>
wrote:
> Hello,
>
> This is the last version 3.0.19
> I added the filter_password and it works now !
>
>
> -----Message d'origine-----
> De : Freeradius-Users <freeradius-users-bounces+nicolas.breuer=
> belcenter.biz@lists.freeradius.org> De la part de Jorge Pereira
> Envoyé : mercredi 22 mai 2019 18:50
> À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
> Objet : Re: User password
>
> Nicolas,
>
> if you get a chance, update to the latest 3.0.19. you could find the
> prebuilt packages for Centos/Redhat and Ubuntu in
> http://packages.networkradius.com/
>
> On Wed, May 22, 2019 at 11:01 AM Nicolas Breuer <
> Nicolas.Breuer@belcenter.biz> wrote:
>
> > Thanks Nicolas, i will try right away.
> >
> > -----Message d'origine-----
> > De : Freeradius-Users <freeradius-users-bounces+nicolas.breuer=
> > belcenter.biz@lists.freeradius.org> De la part de Chaigneau, Nicolas via
> > Freeradius-Users
> > Envoyé : mercredi 22 mai 2019 15:59
> > À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org
> >
> > Cc : Chaigneau, Nicolas <nicolas.chaigneau@capgemini.com>
> > Objet : RE: User password
> >
> > As Alan suggested, look at the following policy (in
> raddb/policy.d/filter):
> >
> > # Some equipment sends passwords with embedded zeros.
> > # This policy filters them out.
> > #
> > filter_password {
> > if (&User-Password && \
> > (&User-Password != "%{string:User-Password}")) {
> > update request {
> > &Tmp-String-0 := "%{string:User-Password}"
> > &User-Password := "%{string:Tmp-String-0}"
> > }
> > }
> > }
> >
> >
> >
> > -----Message d'origine-----
> > De : Freeradius-Users <freeradius-users-bounces+nicolas.chaigneau=
> > capgemini.com@lists.freeradius.org> De la part de Nicolas Breuer
> > Envoyé : mercredi 22 mai 2019 15:46
> > À : FreeRadius users mailing list
> > Objet : RE: User password
> >
> > Hello Alan,
> >
> > Ok but i have the correct attribute in v2.2 but maybe that was not
> > expected and the Cisco is very old.
> > Can you help with a link to solve the issue ?
> >
> > Thanks in advance,
> >
> >
> > -----Message d'origine-----
> > De : Freeradius-Users <freeradius-users-bounces+nicolas.breuer=
> > belcenter.biz@lists.freeradius.org> De la part de Alan DeKok Envoyé :
> > mercredi 22 mai 2019 13:08 À : FreeRadius users mailing list <
> > freeradius-users@lists.freeradius.org>
> > Objet : Re: User password
> >
> > On May 22, 2019, at 5:12 AM, Nicolas Breuer <
> Nicolas.Breuer@belcenter.biz>
> > wrote:
> > > Trying to migrate our old Cisco XS Server to FR3.0.19
> > >
> > > Ready to process requests
> > > (9) Received Access-Request Id 9 from 117.212.177.1:1645 to
> > 117.212.180.1:1814 length 97
> > > (9) NAS-IP-Address = 217.112.177.1
> > > (9) NAS-Port = 3
> > > (9) NAS-Port-Type = Async
> > > (9) User-Name = "username"
> > > (9) Called-Station-Id = "240"
> > > (9) Calling-Station-Id = "71"
> > > (9) User-Password = "alerteo268\000N: In"
> > > (9) Service-Type = Framed-User
> > > (9) Framed-Protocol = PPP
> > >
> > >
> > > Any ideas from where the \000N:In comes from ?
> >
> > It comes from the NAS, like every other RADIUS attribute.
> >
> > Some NASes implement RADIUS incorrectly.
> >
> > If you read the config in a recent version of v3, there are policies to
> > catch & fix this exact issue.
> >
> > Alan DeKok.
> >
> >
> > This message contains information that may be privileged or confidential
> > and is the property of the Capgemini Group. It is intended only for the
> > person to whom it is addressed. If you are not the intended recipient,
> you
> > are not authorized to read, print, retain, copy, disseminate, distribute,
> > or use this message or any part thereof. If you receive this message in
> > error, please notify the sender immediately and delete all copies of this
> > message.
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> > -
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html