On Jun 30, 2023, at 6:46 AM, Michael Schwartzkopff via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I am trying to use a hased password, but I get the error:
pap: ERROR: SHA1 digest does not match "known good" digest
from the eap_gtc module.
According to the compatibility matrix this should work.
Hmm, yes. It should work. I do this: update control { &SHA1-Password := "%{sha1:hello}" } pap.authenticate ... And the debug output shows: Fri Jun 30 07:25:14 2023 : Debug: (0) pap: Login attempt with password "hello" (5) Fri Jun 30 07:25:14 2023 : Debug: (0) pap: Comparing with "known-good" SHA-Password Fri Jun 30 07:25:14 2023 : Debug: (0) pap: User authenticated successfully Fri Jun 30 07:25:14 2023 : Debug: (0) modsingle[authenticate]: returned from pap (rlm_pap) Fri Jun 30 07:25:14 2023 : Debug: (0) [pap] = ok Fri Jun 30 07:25:14 2023 : Debug: (0) } # authenticate = ok I'm not sure what else is going on Maybe change SHA-Password to SHA1-Password? I ran into an issue here related to that which might affect it. I'll try to track that down. Alan DeKok.