Re: Broken base64_decode in rlm_pap

Tomas Hoger wrote:

Hi all!

I've come across an issue with verification of {SSHA} encrypted passwords in FreeRadius 1.1.4. Verification fails for correct passwords. I've managed to track problem through normify() to base64_decode() function in rlm_pap.c. This seems to be a culprit:

if (src[length] != '=') return 0; /* no trailing '=' */

Fixed, thanks. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog