RE: User password

22 May 2019

      ...
Thanks Nicolas, i will try right away.
-----Message d'origine-----
De : Freeradius-Users <freeradius-users-bounces+nicolas.breuer=
belcenter.biz@lists.freeradius.org> De la part de Chaigneau, Nicolas via
Freeradius-Users
Envoyé : mercredi 22 mai 2019 15:59
À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Cc : Chaigneau, Nicolas <nicolas.chaigneau@capgemini.com>
Objet : RE: User password
As Alan suggested, look at the following policy (in raddb/policy.d/filter):
#  Some equipment sends passwords with embedded zeros.
#  This policy filters them out.
#
filter_password {
        if (&User-Password && \
           (&User-Password != "%{string:User-Password}")) {
                update request {
                        &Tmp-String-0 := "%{string:User-Password}"
                        &User-Password := "%{string:Tmp-String-0}"
                }
         }
}
-----Message d'origine-----
De : Freeradius-Users <freeradius-users-bounces+nicolas.chaigneau=
capgemini.com@lists.freeradius.org> De la part de Nicolas Breuer
Envoyé : mercredi 22 mai 2019 15:46
À : FreeRadius users mailing list
Objet : RE: User password
Hello Alan,
Ok but i have the correct attribute in v2.2 but maybe that was not
expected and the Cisco is very old.
Can you help with a link to solve the issue ?
Thanks in advance,
-----Message d'origine-----
De : Freeradius-Users <freeradius-users-bounces+nicolas.breuer=
belcenter.biz@lists.freeradius.org> De la part de Alan DeKok Envoyé :
mercredi 22 mai 2019 13:08 À : FreeRadius users mailing list <
freeradius-users@lists.freeradius.org>
Objet : Re: User password
On May 22, 2019, at 5:12 AM, Nicolas Breuer <Nicolas.Breuer@belcenter.biz>
wrote:
...
Trying to migrate our old Cisco XS Server to FR3.0.19
Ready to process requests
(9) Received Access-Request Id 9 from 117.212.177.1:1645 to
117.212.180.1:1814 length 97
(9)   NAS-IP-Address = 217.112.177.1
(9)   NAS-Port = 3
(9)   NAS-Port-Type = Async
(9)   User-Name = "username"
(9)   Called-Station-Id = "240"
(9)   Calling-Station-Id = "71"
(9)   User-Password = "alerteo268\000N: In"
(9)   Service-Type = Framed-User
(9)   Framed-Protocol = PPP
Any ideas from where the \000N:In comes from ?
It comes from the NAS, like every other RADIUS attribute.
Some NASes implement RADIUS incorrectly.
If you read the config in a recent version of v3, there are policies to
catch & fix this exact issue.
Alan DeKok.
This message contains information that may be privileged or confidential
and is the property of the Capgemini Group. It is intended only for the
person to whom it is addressed. If you are not the intended recipient, you
are not authorized to read, print, retain, copy, disseminate, distribute,
or use this message or any part thereof. If you receive this message in
error, please notify the sender immediately and delete all copies of this
message.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
Hello,

This is the last version 3.0.19
I added the filter_password and it works now !

-----Message d'origine-----
De : Freeradius-Users <freeradius-users-bounces+nicolas.breuer=belcenter.biz@lists.freeradius.org> De la part de Jorge Pereira
Envoyé : mercredi 22 mai 2019 18:50
À : FreeRadius users mailing list <freeradius-users@lists.freeradius.org>
Objet : Re: User password

Nicolas,

if you get a chance, update to the latest 3.0.19. you could find the
prebuilt packages for Centos/Redhat and Ubuntu in
http://packages.networkradius.com/

On Wed, May 22, 2019 at 11:01 AM Nicolas Breuer <
Nicolas.Breuer@belcenter.biz> wrote:

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html