On 28/08/2015 22:10, Arran Cudbard-Bell wrote:
On 28 Aug 2015, at 00:54, Noel Butler <noel.butler@ausics.net> wrote:
Howdy,
Building new radius setup, and in test bed using freeradius at present, I see v3 uses SHA-2, great, it's what we are trying, but when inserting into mariadb $6$salt$foobarqwerty.... does not seems not to work (clear text of course does but thats not an option in 2015) does it expect it in some other format?
FreeRADIUS doesn't need to support SHA2 for this, you just need to put the password in the right control attribute, so FreeRADIUS will treat it as a crypt password.
update control { &Crypt-Password := "<value from db or other attribute>" } pap
FreeRADIUS will then call crypt(), and if your system's crypt function understands the format, it should all work fine.
Thanks, yes it does support it, now I have a good starting point to follow. Cheers