26 May
2021
26 May
'21
5:25 p.m.
On May 26, 2021, at 3:03 PM, Honglak Kim via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Does FreeRadius support sha128 or sha256 for the user encrypted password?
Yes. The PAP module supports a wide range of encrypted passwords.
We are using the internet to communicate between the radius server and network devices.Therefore more strong encrypted password method seems necessary.
That is not how RADIUS works. The passwords between the NAS and the RADIUS server are already encrypted with the RADIUS shared secret. The RADIUS server gets a clear-text password in the User-Password attribute. How the passwords are stored in the DB (SHA or whatever) is entirely unrelated. Alan DeKok.