Hi, Running 1.1.6 now. Crypt-Local works ok now. I would like to know if it is possible to have both User-Password and Crypt-Local Auth-Types for sql users. Now I need to disable the current System (/etc/passwd) users to Crypt-Local, and also have users with cleartext passwords. Thank you, Felipe Ceglia Rascher, Markus wrote:
If u use the db for user authentication, then db, here is my db-content:
select * from radcheck; +----+----------+---------------+----+---------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+---------------+ | 1 | testuser | Crypt-Password| := | oV9XYXNTx4awE | +----+----------+---------------+----+---------------+
select * from radgroupcheck; +----+-----------+-----------+----+---------------+ | id | GroupName | Attribute | op | Value | +----+-----------+-----------+----+---------------+ | 1 | testgroup | Auth-Type | := | Crypt-Local | +----+-----------+-----------+----+---------------+ 1 row in set (0.01 sec)
If it works with cleartext pwd's and the auth-type Local then it will work with Crypt-Local and the crypted pwd in the radcheck table
For encrypting the pwd use the encrypt("pwd") function in sql
Do you have any further questions?
regards Markus
-----Ursprüngliche Nachricht----- Von: Felipe Ceglia [mailto:felipeceglia@gmail.com] Im Auftrag von Felipe Ceglia - PY1NB Gesendet: Mittwoch, 13. Juni 2007 13:54 An: Rascher, Markus Betreff: Re: AW: encrypted password
Hi Markus,
Where should I try it? users file, or as an attribute on the db?
Thank you,
Felipe
Rascher, Markus wrote:
Did you try Crypt-Local auth-Type?
-----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+markus.mr.rascher=siemens.com@lists.freeradius.org [mailto:freeradius-users-bounces+markus.mr.rascher=siemens.com@lists.freeradius.org] Im Auftrag von Felipe Ceglia - PY1NB Gesendet: Mittwoch, 13. Juni 2007 00:26 An: FreeRadius users mailing list Betreff: Re: encrypted password
Hi Arran,
Thank you for your reply.
I tried Crypt-Password := "9D8wtP7DGqgCg", but then the debug says:
(...) modcall[authorize]: module "sql" returns ok for request 2 modcall: group authorize returns ok for request 2 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied User-Password does NOT match local User-Password auth: Failed to validate the user. Login incorrect: [anavc/2572ava] (from client localhost port 0) Delaying request 2 for 2 seconds
When I try with a clear text password user, it says:
(...) modcall[authorize]: module "sql" returns ok for request 3 modcall: group authorize returns ok for request 3 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied User-Password matches local User-Password (...)
Thank you,
Felipe
Arran Cudbard-Bell wrote:
Felipe Ceglia - PY1NB wrote:
Hi again,
I need to migrate my users from plain old unix passwd file to sql.
How do I have the user information in the radcheck table?
Encrypted-Password == 9D8wtP7DGqgCg ?
My passwd file looks like: anavc:9D8wtP7DGqgCg:1002:300:#Ana:/home/dummy:/usr/bin/passwd
This password seems not to be MD5.
Any guesses?
Thank you again,
Felipe
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
That would be unix crypt.
The attribute in radcheck is
Crypt-Password := "9D8wtP7DGqgCg" - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html