3 Aug
2021
3 Aug
'21
3:03 p.m.
On 03/08/2021 18:23, Alan DeKok wrote:
On Aug 3, 2021, at 12:14 PM, Jason Alderfer <jha2@emu.edu> wrote:
When using the Python passlib module to generate PBKDF2 password hashes, the resulting values may contain a "." which causes FreeRADIUS 3.0.23 to fail to decode them. I am assuming a bug in FreeRADIUS but I suppose another possibility would be that Python's passlib is not conforming to some encoding standard that FreeRADIUS expects.
The encoding should be base64. The '.' character is not used in base64.
It looks like the Python library is broken.
Yup https://github.com/efficks/passlib/blob/master/passlib/utils/binary.py#L175-... -- Matthew