Thanks Alan, What I'll probably have a go at will be attempting to authenticate it against Samba if possible, not looked into how it works yet, but I'm hopeful. :) R On 15/02/07, Alan DeKok <aland@deployingradius.com> wrote:
Richard Hamilton-Frost wrote:
What I want:
To be able to authenticate wireless users via the /etc/passwd and /etc/shadow files. I've setup the WRT54GL to talk to the Radius server, this all seems fine and dandy. The WRT54GL is using WPA TKIP, it has the option of WPA AES too, and WPA AES+TKIP, neither seem to work.. here is the output I get when trying to authenticate a user:
...
rlm_eap_md5: Issuing Challenge
http://deployingradius.com/documents/protocols/compatibility.html
Passwords in /etc/shadow are hashed via the "crypt" method, or one similar to that. It is impossible to do EAP-MD5 and authenticate users via passwords in /etc/shadow.
If you're going to use EAP, you MUST have the clear-text password for the user.
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html