Re: Password in auth-detail file

Axel Seguin wrote:

Hi everyone,

I am using Freeradius with LDAP. I use EAP-TTLS for authentication with PAP (the passwords in LDAP being crypted). In the ldap.conf file I have :

log_auth_badpass = no log_auth_goopass = no

But I still see the user password in clear text in the auth-detail file.

I am sorry if this is a silly question but I have been trying to find a solution for quite a while now and still haven't found anything. Is it possible to make sure the passwords are not stored in the auth-detail files?

Not without source code patches. See other recent posts on the list on this subject.

Or does it have to be like this?

No. You can disable auth-detail logging. It's not enabled by default. You chose to enable it.