RE: communication safe ssh <-> NAS <-> FreeRADIUS ?

19 May 2009


      ...
Oki, thanks. In fact, I want my radius client crypt my passwd in md5 for
example, and freeradius check the MD5 hash. So I understand I have to use
PAP ?  In my modul ldap I think I have to put « password_attribute =
userPassword ». But If I do, I have to put my password in clear in my
ldap, otherwise it don't works.
Store password as {md5} and then encrypted value and enable auto header
detection in pap module (it's disabled by default):
...
pap {
        encryption_scheme = "auto"
        auto_header = no
  }
Ivan Kalik
Kalik Informatika ISP